🇺🇸
TPI-Abuse
2026-10-23 09:56:53
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 77.52.19.17 (77-52-19-17.staticip.vf-ua.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 77.52.19.17 (77-52-19-17.staticip.vf-ua.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 05:56:46.696790 2026] [security2:error] [pid 2349:tid 2349] [client 77.52.19.17:50792] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pakistanvision.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pakistanvision.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atsvXsNBA9UZWNX2p5KKiQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-22 12:59:32
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 11:54:16
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 77.52.19.17 (77-52-19-17.staticip.vf-ua.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 77.52.19.17 (77-52-19-17.staticip.vf-ua.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 07:54:08.885335 2026] [security2:error] [pid 6877:tid 6877] [client 77.52.19.17:37668] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||primacomm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "primacomm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atn5YLRjot3SOVxAxOohpAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-10-21 17:05:20
(1 day ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-197)
Hacking
2026-10-21 05:46:15
(2 days ago)
Failed Wordpress Logins
Web App Attack
🇫🇷
LRob
2026-10-19 06:29:26
(4 days ago)
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 ...
show more
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-19 05:23:28
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 77.52.19.17 (77-52-19-17.staticip.vf-ua.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 77.52.19.17 (77-52-19-17.staticip.vf-ua.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 01:23:20.821722 2026] [security2:error] [pid 12612:tid 12612] [client 77.52.19.17:18792] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||36sovereignchambers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "36sovereignchambers.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atWpSNfqqgn_rHK-X6yltwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-10-18 04:46:06
(5 days ago)
(wplogin) WordPress login brute-force 77.52.19.17 (UA/Ukraine/77-52-19-17.staticip.vf-ua.net): 5 in ...
show more
(wplogin) WordPress login brute-force 77.52.19.17 (UA/Ukraine/77-52-19-17.staticip.vf-ua.net): 5 in the last 300 secs
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-10-16 16:18:51
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 77.52.19.17 (77-52-19-17.staticip.vf-ua.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 77.52.19.17 (77-52-19-17.staticip.vf-ua.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:18:45.863534 2026] [security2:error] [pid 25890:tid 25890] [client 77.52.19.17:37114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iconconstructors.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iconconstructors.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atJOZeRLnjSz7Wu03zad5gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-16 12:39:43
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
2026-10-15 20:46:25
(1 week ago)
Failed Wordpress Logins
Web App Attack
🇫🇷
masterguru
2026-10-15 08:51:03
(1 week ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 77.52.19.17 (UA/Ukraine/77-52-19-17.staticip. ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 77.52.19.17 (UA/Ukraine/77-52-19-17.staticip.vf-ua.net): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-10-15 00:40:26
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 77.52.19.17 (77-52-19-17.staticip.vf-ua.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 77.52.19.17 (77-52-19-17.staticip.vf-ua.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 20:40:20.764812 2026] [security2:error] [pid 20399:tid 20399] [client 77.52.19.17:42490] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.crystaljohns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.crystaljohns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atAg9JyFhT5arJHdzWTdiQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 00:13:45
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 77.52.19.17 (77-52-19-17.staticip.vf-ua.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 77.52.19.17 (77-52-19-17.staticip.vf-ua.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 20:13:41.467959 2026] [security2:error] [pid 7849:tid 7849] [client 77.52.19.17:56330] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fusteriafontane.casademunt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fusteriafontane.casademunt.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atAatZChvRFs3Ns2mhHvVgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 22:02:00
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 77.52.19.17 (77-52-19-17.staticip.vf-ua.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 77.52.19.17 (77-52-19-17.staticip.vf-ua.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:01:54.226438 2026] [security2:error] [pid 23576:tid 23576] [client 77.52.19.17:1618] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||oakglenhouse.com.benchmarkbcs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oakglenhouse.com.benchmarkbcs.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as_70kO4xvHEL_sLiTK0iAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack