2026-03-27 16:31:39
(2 months ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇬🇧
consul.to
2026-03-09 06:10:48
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
xmission.com
2026-03-03 09:53:33
(3 months ago)
Blocked by UFW (TCP on 51413)
Source port: 28727
TTL: 115
Packet length: 52
TOS: 0x08
This report ( ...
show more
Blocked by UFW (TCP on 51413)
Source port: 28727
TTL: 115
Packet length: 52
TOS: 0x08
This report (for 212.56.53.37) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
TPI-Abuse
2025-11-28 07:16:34
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 212.56.53.37 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 212.56.53.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 02:16:29.159409 2025] [security2:error] [pid 1091:tid 1091] [client 212.56.53.37:7217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||oweng.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oweng.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSlMTacu9_OqiI0Pg7QekQAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 05:34:50
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 212.56.53.37 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 212.56.53.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 00:34:44.811831 2025] [security2:error] [pid 11826:tid 11826] [client 212.56.53.37:39800] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||edgeimprov.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "edgeimprov.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSk0dA1YYDT927y_AoIkZAAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2025-11-09 12:50:26
(7 months ago)
212.56.53.37 - - [09/Nov/2025:05:50:26 -0700] "POST /wp-login.php HTTP/1.1" 200 2330 "-" "Mozilla/5. ...
show more
212.56.53.37 - - [09/Nov/2025:05:50:26 -0700] "POST /wp-login.php HTTP/1.1" 200 2330 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0"
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2025-10-26 02:26:36
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 212.56.53.37 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 212.56.53.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 22:26:30.899608 2025] [security2:error] [pid 12783:tid 12783] [client 212.56.53.37:7002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ablogisticsgroup.com"] [uri "/.env"] [unique_id "aP2G1j747Fq4mQvtf2E7rgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-25 21:35:49
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 212.56.53.37 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 212.56.53.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 17:35:45.256966 2025] [security2:error] [pid 5960:tid 5960] [client 212.56.53.37:32746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jolankagroup.com"] [uri "/.env"] [unique_id "aP1CsYCrS15KWUeKiZP85gAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-17 11:15:50
(11 months ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-07-17 11:05:50
(11 months ago)
Detected attack by Imunify360
Brute-Force
Web App Attack