🇺🇸
xmission.com
2026-01-19 19:30:21
(4 months ago)
Blocked by UFW (TCP on 50383)
Source port: 53246
TTL: 49
Packet length: 60
TOS: 0x08
This report (f ...
show more
Blocked by UFW (TCP on 50383)
Source port: 53246
TTL: 49
Packet length: 60
TOS: 0x08
This report (for 212.32.49.155) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇦🇹
neo72
2025-09-22 05:06:59
(8 months ago)
Wordpress Attack
Web App Attack
🇺🇸
TPI-Abuse
2025-09-22 03:32:23
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 23:32:19.697437 2025] [security2:error] [pid 3695:tid 3695] [client 212.32.49.155:41872] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.d-sinema.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.d-sinema.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNDDQy3rjZH6YuSaawEB4AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-22 02:53:53
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 22:53:48.772275 2025] [security2:error] [pid 5642:tid 5642] [client 212.32.49.155:17566] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.consolidatedoperationsgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.consolidatedoperationsgroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNC6PC1AJ8M1NLFToBaO9QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-22 02:48:49
(8 months ago)
Trawling for Open Source CMS user accounts
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-09-22 02:13:05
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 22:12:57.888279 2025] [security2:error] [pid 24456:tid 24456] [client 212.32.49.155:63228] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.circulodesonido.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.circulodesonido.org"] [uri "/site/wp-json/wp/v2/users/"] [unique_id "aNCwqV1_KXOcapC3ctdFKgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-22 01:08:21
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 21:08:13.936730 2025] [security2:error] [pid 765785:tid 765785] [client 212.32.49.155:7276] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cartiologyfilms.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cartiologyfilms.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNChffuZXAsDv7d3rMmYrwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-22 00:40:49
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 20:40:42.838753 2025] [security2:error] [pid 15882:tid 15882] [client 212.32.49.155:44802] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.calogerolawfirm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.calogerolawfirm.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNCbCvPomM7jChi_YGk_yAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-21 23:34:49
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 19:34:45.790454 2025] [security2:error] [pid 31336:tid 31336] [client 212.32.49.155:29963] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.billymitchell.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.billymitchell.com"] [uri "/wordpress/wp-json/wp/v2/users/"] [unique_id "aNCLleyEhLkZFOEFEf0nvQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
DocNetzwerk
2025-09-21 23:33:23
(8 months ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 212.32.49.155 (US/United States/-)
Brute-Force
🇺🇸
TPI-Abuse
2025-09-21 23:15:54
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 19:15:44.989710 2025] [security2:error] [pid 12321:tid 12321] [client 212.32.49.155:9581] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.beirutbazar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.beirutbazar.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNCHIGIyj7bS58DwxLzmSQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
weblite
2025-09-21 23:11:15
(8 months ago)
WP_AUTHOR_SCANNING
Web App Attack
🇧🇪
cmbplf
2025-09-21 22:57:44
(8 months ago)
9.253 4xx requests in 1 hour (2w7h50mfromnow)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2025-09-21 22:46:46
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.32.49.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 18:46:41.132603 2025] [security2:error] [pid 14077:tid 14077] [client 212.32.49.155:52173] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.badconsultingllc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.badconsultingllc.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNCAUb0C0NdTlcljgONxcQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-09-21 22:30:07
(8 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack