🇺🇸
TPI-Abuse
2026-10-23 22:23:09
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 213.232.122.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.122.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 18:22:54.104567 2026] [security2:error] [pid 365:tid 380] [client 213.232.122.150:22911] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wicca-love-spells.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wicca-love-spells.com"] [uri "/articles/how-to-bring-love-into-your-life/"] [unique_id "atvePh_DiE0QTB-9J7kZqwAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 04:19:40
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 213.232.122.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.122.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 00:19:22.276045 2026] [security2:error] [pid 13473:tid 13473] [client 213.232.122.150:24367] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||buccinet.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "buccinet.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apuYSv4EdwyxIbdXTDwrVQAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-02 23:48:10
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-08-03 08:35:54
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 213.232.122.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.122.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 04:35:37.881639 2026] [security2:error] [pid 181686:tid 181686] [client 213.232.122.150:25363] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||globalmappinginc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "globalmappinginc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anBS2Wnhy6sTqiCg9mZGUAAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 23:35:53
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 213.232.122.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.122.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 19:35:35.471694 2026] [security2:error] [pid 2216177:tid 2216177] [client 213.232.122.150:63969] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||churchtop.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "churchtop.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amFTx_XEpWWU6OxpWqdpkQAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 07:47:46
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 213.232.122.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.122.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 03:47:32.243851 2026] [security2:error] [pid 31268:tid 31268] [client 213.232.122.150:25227] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pinballhistory.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pinballhistory.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alH1FB77fn3QP0KtOje0awAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-27 19:46:31
(4 months ago)
Fail2Ban banned 213.232.122.150 for security violations in jail wp-armour. Log: 2026/06/27 19:46:31 ...
show more
Fail2Ban banned 213.232.122.150 for security violations in jail wp-armour. Log: 2026/06/27 19:46:31 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 213.232.122.150 | Target: wplogin" , client: 213.232.122.150, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-27 05:53:09
(4 months ago)
Fail2Ban banned 213.232.122.150 for security violations in jail wp-armour. Log: 2026/06/27 05:53:09 ...
show more
Fail2Ban banned 213.232.122.150 for security violations in jail wp-armour. Log: 2026/06/27 05:53:09 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 213.232.122.150 | Target: wplogin" , client: 213.232.122.150, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-06-24 03:23:47
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 213.232.122.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.122.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 23:23:32.825976 2026] [security2:error] [pid 19968:tid 19968] [client 213.232.122.150:50163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hischurchatwork.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hischurchatwork.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajtNtFAeEYofe92Q0FN9NAAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-09 06:03:01
(5 months ago)
IM360 WAF: Possible SQL injection attack MV:ASC) AND AND/**/8753/**/IN/**/(SELECT/**/('~'+(SELECT/** ...
show more
IM360 WAF: Possible SQL injection attack MV:ASC) AND AND/**/8753/**/IN/**/(SELECT/**/('~'+(SELECT/**/(CASE/**/WHEN/**/(8753=8753)/**/THEN/**/'1'/**/ELSE/**/'0'/**/END))+'~'))-- -
show less
SQL Injection
2026-02-13 02:59:11
(8 months ago)
wordpress-trap
Web App Attack
🇺🇸
oncord
2025-12-17 11:46:06
(10 months ago)
Form spam
Web Spam
🇮🇩
BPS-StatisticsIndonesia
2025-03-08 06:18:22
(1 year ago)
WP Login Scan Activities
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-03-02 00:34:15
(1 year ago)
WP Login Scan Activities
Web App Attack
🇬🇧
gurnip
2025-02-28 16:19:02
(1 year ago)
Vulnerability probe of page /wp-login.php, not found on server.
Brute-Force
Web App Attack
