🇦🇹
neo72
2026-06-24 04:42:28
(2 days ago)
Detected malicious activity - bulk block
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 02:13:46
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 20.169.53.177 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 20.169.53.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 22:13:39.437320 2026] [security2:error] [pid 14067:tid 14067] [client 20.169.53.177:56021] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stringview.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stringview.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajs9U04vjFuqedhX955TKgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-24 02:06:04
(2 days ago)
Trying to access config files
Web App Attack
🇩🇪
strxmpp
2026-06-24 02:04:27
(2 days ago)
20.169.53.177 - - [24/Jun/2026:04:04:27 +0200] "GET /wp-json/wp/v2/users/ HTTP/1.1" 400 27319 "-" "M ...
show more
20.169.53.177 - - [24/Jun/2026:04:04:27 +0200] "GET /wp-json/wp/v2/users/ HTTP/1.1" 400 27319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-24 01:47:11
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 20.169.53.177 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 20.169.53.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 21:47:04.520466 2026] [security2:error] [pid 20626:tid 20626] [client 20.169.53.177:55345] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||carolynedds.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "carolynedds.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajs3GNrpi_LEs_bOg9aH2QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Penny Packer
2026-06-24 01:45:45
(2 days ago)
Fail2Ban apache-tripwires
Web App Attack
🇩🇪
LRob.fr
2026-06-24 01:30:32
(2 days ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
ArturShelby
2026-06-24 01:29:45
(2 days ago)
Honeypot triggered: /wp-json/wp/v2/users/
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 01:26:52
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 20.169.53.177 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 20.169.53.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 21:26:48.723917 2026] [security2:error] [pid 19215:tid 19215] [client 20.169.53.177:56980] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||antoniocobo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "antoniocobo.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajsyWEb0j0NUTOXDs5KugQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-24 01:23:31
(2 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇨🇦
Dunham Support
2026-06-24 01:19:35
(2 days ago)
(wordpress) Failed wordpress login from 20.169.53.177 (US/United States/-)
Brute-Force
2026-06-24 01:05:32
(2 days ago)
20.169.53.177 - - [24/Jun/2026:01:05:31 +0000] "GET /wp-json/wp/v2/users/ HTTP/1.1" 404 19670 "-" "M ...
show more
20.169.53.177 - - [24/Jun/2026:01:05:31 +0000] "GET /wp-json/wp/v2/users/ HTTP/1.1" 404 19670 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Bad Web Bot
Web App Attack
🇬🇧
andypiper
2026-06-24 01:00:23
(2 days ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇩🇪
abdubhai
2026-06-24 00:53:07
(2 days ago)
20.169.53.177 - - [24/Jun/2026:0
...
Brute-Force
🇺🇸
TPI-Abuse
2026-06-24 00:51:03
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 20.169.53.177 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 20.169.53.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 20:50:56.655122 2026] [security2:error] [pid 32369:tid 32369] [client 20.169.53.177:57264] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||web-sitebuilder.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "web-sitebuilder.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajsp8LIHBK919i-ItA5xaAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack