Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(mod_security) mod_security (id:225170) triggered by 143.44.156.78 (143.44.156.78-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:36:02.796200 2026] [security2:error] [pid 11999:tid 11999 ...
show more(mod_security) mod_security (id:225170) triggered by 143.44.156.78 (143.44.156.78-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:36:02.796200 2026] [security2:error] [pid 11999:tid 11999] [client 143.44.156.78:37623] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||uphillfarmvt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "uphillfarmvt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "au2tkkdG4jBABu-tzHzT3QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Web attack blocked by WAF: GET /wp-login.php, GET /wp-json/wp/v2/users/me (Access to login page in WordPress (counter); Track WP REST API Basic Auth (App-Password channel)).
[06/Nov/2026:03:27:53 +0300] "GET /wp-login.php HTTP/1.1" UA="Mozilla/5.0 (W ...
show moreWeb attack blocked by WAF: GET /wp-login.php, GET /wp-json/wp/v2/users/me (Access to login page in WordPress (counter); Track WP REST API Basic Auth (App-Password channel)).
[06/Nov/2026:03:27:53 +0300] "GET /wp-login.php HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:148.0) Gecko/20100101 Firefox/148.0" -> Access to login page in WordPress (counter)
[06/Nov/2026:03:27:53 +0300] "GET /wp-json/wp/v2/users/me HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:148.0) Gecko/20100101 Firefox/148.0" -> Track WP REST API Basic Auth (App-Password channel); Monitoring WordPress 5.3 User Enumeration attempt…
show less
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/155.0.8059.37 Mobile/15E
Azure WAF blocked a request. Rule: 100200. Observed at: 2026-10-27T10:38:30.000Z.
Web App Attack
Anonymous
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show moreLarge-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Offpeak: Sessionless Catalog Access Blocked: /brands/cisco/collaboration/telepresence/endpoints/shopby/iptel_application-personal_noe-menedzher/manufacturer-cisco/product_vc_mcu-bez_mcu-do_6_abonentov/product_vc_type-bol_peregovornaja.html | UA: Opera/9.95.(X11; Linux x86_64; ta-LK) Presto/2.9.181 Version/11.00 | (Magento Site)
show less
