🇫🇷
Sklurk
2026-10-28 00:47:29
(3 hours ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 07:40:09
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 213.232.121.37 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.121.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 03:39:54.025433 2026] [security2:error] [pid 6089:tid 6089] [client 213.232.121.37:23689] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||comfortcartel.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "comfortcartel.com"] [uri "/maxeltoft/index.php"] [unique_id "atxgyjI066MV3SwCd5VTFAAAAFs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-05 02:24:22
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
nationaleventpros.com
2026-09-03 06:26:16
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-08-31 18:50:42
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 213.232.121.37 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.121.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 14:50:27.765214 2026] [security2:error] [pid 9387:tid 9387] [client 213.232.121.37:28933] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||blindshine.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blindshine.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apXM82l9saXT_GacE9ZcMAAAABk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 02:30:16
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 213.232.121.37 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.121.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 22:30:01.271107 2026] [security2:error] [pid 19140:tid 19140] [client 213.232.121.37:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mcbrude.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mcbrude.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoUVKYyqiPuDwa12lJDL-AAAAB0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-18 22:36:44
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 213.232.121.37 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.121.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 18:36:29.689522 2026] [security2:error] [pid 18568:tid 18568] [client 213.232.121.37:38535] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lowrygroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lowrygroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoTebR_PczQfp9KURKG7GgAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-17 20:41:44
(2 months ago)
Web password guessing
Brute-Force
2026-08-17 04:30:47
(2 months ago)
FPROCO WEBEXPLOIT 213.232.121.37 (213.232.121.37)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-12 01:45:07
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 213.232.121.37 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.121.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 21:44:50.859388 2026] [security2:error] [pid 9760:tid 9760] [client 213.232.121.37:12983] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||portraitsinblues.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "portraitsinblues.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anvQEseeLtElTnGZ2CnLOwAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 17:16:34
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 213.232.121.37 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.121.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 13:16:21.567892 2026] [security2:error] [pid 2127666:tid 2127666] [client 213.232.121.37:60449] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||venturecg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "venturecg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al-pZZCo7hRHhSIBdIJxAAAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 23:02:19
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 213.232.121.37 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.121.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 19:02:06.217797 2026] [security2:error] [pid 1903:tid 1903] [client 213.232.121.37:30645] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||verenacastle.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "verenacastle.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alli7poXyUuJ0ejP8dNBaQAAABo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-07-05 04:43:14
(3 months ago)
WP Armour Plugin detection
Web Spam
Brute-Force
🇫🇷
Tilellit.PRO
2026-06-29 16:17:42
(3 months ago)
Fail2Ban banned 213.232.121.37 for security violations in jail wp-armour. Log: 2026/06/29 16:17:42 [ ...
show more
Fail2Ban banned 213.232.121.37 for security violations in jail wp-armour. Log: 2026/06/29 16:17:42 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 213.232.121.37 | Target: wplogin" , client: 213.232.121.37, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-28 08:52:13
(3 months ago)
Fail2Ban banned 213.232.121.37 for security violations in jail wp-armour. Log: 2026/06/28 08:52:13 [ ...
show more
Fail2Ban banned 213.232.121.37 for security violations in jail wp-armour. Log: 2026/06/28 08:52:13 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 213.232.121.37 | Target: wplogin" , client: 213.232.121.37, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
