🇺🇸
TPI-Abuse
2026-04-30 06:49:54
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.119.41.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.119.41.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 02:49:50.298132 2026] [security2:error] [pid 11124:tid 11124] [client 212.119.41.34:46429] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||soudertonbigred.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "soudertonbigred.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afL7jouEdwwTpOAbD_KBCgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 23:25:27
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.119.41.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.119.41.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 19:25:21.930101 2026] [security2:error] [pid 1201:tid 1201] [client 212.119.41.34:51917] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||desertautoworks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "desertautoworks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae6e4cM3vLSq_yMINRXBsAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 20:29:43
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.119.41.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.119.41.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 16:29:39.457131 2026] [security2:error] [pid 13724:tid 13724] [client 212.119.41.34:56773] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||coyotebytes.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coyotebytes.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ae51s7Ncn2jYLbWw4yzZGQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 00:55:11
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.119.41.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.119.41.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 20:55:04.423677 2026] [security2:error] [pid 6910:tid 6910] [client 212.119.41.34:34713] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||artevoix.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artevoix.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae1iaCdsAKFPibUlY9AZrAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-24 16:45:28
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.119.41.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.119.41.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 12:45:22.564614 2026] [security2:error] [pid 3533151:tid 3533158] [client 212.119.41.34:23903] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vancekelly.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vancekelly.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeueItZgGXClfmDi7QksKAAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-03-15 08:52:22
(2 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -52.934 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -52.934 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1637.1
show less
Web App Attack
Bad Web Bot
🇮🇩
BPS-StatisticsIndonesia
2026-03-05 00:20:32
(3 months ago)
WP Login Scan Activities: "2026-03-05T07:20:32.848+07:00" "/wp-login.php" "212.119.41.34" "Mozilla/5 ...
show more
WP Login Scan Activities: "2026-03-05T07:20:32.848+07:00" "/wp-login.php" "212.119.41.34" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-03-02 12:17:31
(3 months ago)
WP Login Scan Activities: "2026-03-02T19:17:31.116+07:00" "/wp-login.php" "212.119.41.34" "Mozilla/5 ...
show more
WP Login Scan Activities: "2026-03-02T19:17:31.116+07:00" "/wp-login.php" "212.119.41.34" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-02-25 10:52:17
(3 months ago)
WP Login Scan Activities: "2026-02-25T17:52:17.266+07:00" "/wp-login.php" "212.119.41.34" "Mozilla/5 ...
show more
WP Login Scan Activities: "2026-02-25T17:52:17.266+07:00" "/wp-login.php" "212.119.41.34" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-02-25 10:20:43
(3 months ago)
WP Login Scan Activities: "2026-02-25T17:20:43.826+07:00" "/wp-login.php" "212.119.41.34" "Mozilla/5 ...
show more
WP Login Scan Activities: "2026-02-25T17:20:43.826+07:00" "/wp-login.php" "212.119.41.34" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Web App Attack
🇫🇷
Baking333
2026-02-18 19:55:53
(3 months ago)
[redacted] 212.119.41.34 - - [18/Feb/2026:20:55:48 +0100] "GET /administrator HTTP/2.0" 301 193 "htt ...
show more
[redacted] 212.119.41.34 - - [18/Feb/2026:20:55:48 +0100] "GET /administrator HTTP/2.0" 301 193 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 212.119.41.34 - - [18/Feb/2026:20:55:50 +0100] "GET /fr/administrator/ HTTP/2.0" 404 25677 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-01-31 22:55:52
(4 months ago)
WP Login Scan Activities
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-01-30 17:50:35
(4 months ago)
WP Login Scan Activities
Web App Attack
🇺🇸
ANTI SCANNER
2026-01-27 22:37:59
(4 months ago)
Scanner : /xmlrpc.php
Web Spam
🇮🇩
BPS-StatisticsIndonesia
2026-01-26 03:33:56
(4 months ago)
WP Login Scan Activities
Web App Attack