|
🇨🇦
polycoda
|
|
📄 Probes for wp-login.php and other inexistent URLs
|
Hacking
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 212.56.53.189 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.56.53.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 19:42:24.110408 2025] [security2:error] [pid 30554:tid 30554] [client 212.56.53.189:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||southernbroadcast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "southernbroadcast.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQ_jcCv1pRl3KZ-QWC67SQAAAAA"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 212.56.53.189 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.56.53.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 07:11:11.562082 2025] [security2:error] [pid 24842:tid 24842] [client 212.56.53.189:7303] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dougscomputers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dougscomputers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQ8zX2lLUGrBI1QwzwA7cQAAABI"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 212.56.53.189 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.56.53.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 04:43:13.623086 2025] [security2:error] [pid 5852:tid 5852] [client 212.56.53.189:6096] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||winterspring.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "winterspring.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aQ8QsaXG89V7jrk4WrP76QAAAA8"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
LRob.fr
|
|
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
|
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 212.56.53.189 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 212.56.53.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 10:50:20.827057 2025] [security2:error] [pid 32682:tid 32682] [client 212.56.53.189:24074] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||web142.dnchosting.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "web142.dnchosting.com"] [uri "/mailman/admindb/hardmanfamily_coolestfamilyever.com"] [unique_id "aQIprIHYHjHMg3hIcmBLDQAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇨🇳
ThreatBook.io
|
|
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/212.56.53.189
|
Web App Attack
|
|
|
🇺🇸
oncord
|
|
Form spam
|
Web Spam
|
|
|
🇦🇺
oncord
|
|
Form spam
|
Web Spam
|
|
|
🇦🇺
oncord
|
|
Form spam
|
Web Spam
|
|
|
🇫🇷
Bensay
|
|
2025-04-27T19:09:46.163686+02:00 bzhbenjouille.ovh auth[2998260]: pam_unix(dovecot:auth): authentica ...
show more
2025-04-27T19:09:46.163686+02:00 bzhbenjouille.ovh auth[2998260]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=212.56.53.189
2025-04-27T19:09:48.086227+02:00 bzhbenjouille.ovh dovecot[879]: auth-worker(2998260): conn unix:auth-worker (pid=2998256,uid=0): auth-worker<2>: passwd([email protected],212.56.53.189): unknown user
...
show less
|
Email Spam
Port Scan
Brute-Force
Exploited Host
|
|