🇺🇸
TPI-Abuse
2026-08-28 12:32:54
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 212.119.47.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 212.119.47.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 08:32:46.980915 2026] [security2:error] [pid 19080:tid 19080] [client 212.119.47.181:34259] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tech-servusa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tech-servusa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apF_7ugYKV-3aEzR1tOgUAAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-20 17:18:59
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 212.119.47.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 212.119.47.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 13:18:53.368370 2026] [security2:error] [pid 28979:tid 28979] [client 212.119.47.181:42785] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||insua.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "insua.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoc2_WijSd1RE8EwLr6mXgAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-08-20 16:35:25
(1 week ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-08-17 05:46:19
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 212.119.47.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 212.119.47.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 01:46:10.406277 2026] [security2:error] [pid 21441:tid 21441] [client 212.119.47.181:43045] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||davisllp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "davisllp.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoKgIv5L1X7v1SdU8SMFEwAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-14 16:59:47
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 212.119.47.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 212.119.47.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 12:59:40.690602 2026] [security2:error] [pid 16184:tid 16184] [client 212.119.47.181:60151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||keymarketmedia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "keymarketmedia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "an9JfLlE6Y5sGpSkj1Ci7wAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-04 18:39:37
(3 weeks ago)
Web password guessing
Brute-Force
🇪🇸
librebit
2026-07-12 13:38:56
(1 month ago)
RDWeb scan
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 20:24:44
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.119.47.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 212.119.47.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 16:24:38.926696 2026] [security2:error] [pid 16900:tid 16900] [client 212.119.47.181:46311] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||puoci.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "puoci.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alFVBsLDUxI6CgvUINP3nAAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-07-10 05:51:18
(1 month ago)
RDWeb scan
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 10:05:53
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 212.119.47.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 212.119.47.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 06:05:47.203536 2026] [security2:error] [pid 27077:tid 27077] [client 212.119.47.181:33455] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||beckomberga.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "beckomberga.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ak4g-3ZYlo19k_Srh9glXAAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-07-08 09:48:40
(1 month ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-07-05 17:24:21
(1 month ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-07-04 04:39:48
(1 month ago)
RDWeb scan
Web App Attack
🇨🇿
ptlab
2026-06-27 08:45:20
(2 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
2026-06-27 05:05:57
(2 months ago)
212.119.47.181 - - [27/Jun/2026:07:05:51 +0200] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.goo ...
show more
212.119.47.181 - - [27/Jun/2026:07:05:51 +0200] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Web App Attack