|
🇵🇹
Alberto Ferreira
|
|
SPAM
|
Fraud Orders
Spoofing
Exploited Host
Web App Attack
Web Spam
Phishing
Blog Spam
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 77.68.64.27 (web-out27-hp3.livemail.co.uk): 1 i ...
show more
(mod_security) mod_security (id:210492) triggered by 77.68.64.27 (web-out27-hp3.livemail.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 20:12:34.083275 2026] [security2:error] [pid 1531498:tid 1531498] [client 77.68.64.27:42470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "premiumenterprisessolution.com"] [uri "/wp-config.php.bak"] [unique_id "arMZct1UEM-MZKvNCzR2NAAAABY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 77.68.64.27 (web-out27-hp3.livemail.co.uk): 1 i ...
show more
(mod_security) mod_security (id:210492) triggered by 77.68.64.27 (web-out27-hp3.livemail.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:08:46.433632 2026] [security2:error] [pid 17598:tid 17598] [client 77.68.64.27:44546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "genesis-one.com"] [uri "/wp-config.php.bak"] [unique_id "arLSPts4FG93UxkylZGLtwAAABY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 77.68.64.27 (web-out27-hp3.livemail.co.uk): 1 i ...
show more
(mod_security) mod_security (id:210492) triggered by 77.68.64.27 (web-out27-hp3.livemail.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:05:27.676189 2026] [security2:error] [pid 619:tid 727] [client 77.68.64.27:38132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "woadwellness.com"] [uri "/wp-config.php.bak"] [unique_id "arJE11-3JMEVq51yEz-c-QAAAQg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇪🇸
masterguru
|
|
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (5000900-122)
|
Web App Attack
|
|
|
🇹🇷
rtbh.com.tr
|
|
list.rtbh.com.tr report: tcp/0
|
Brute-Force
|
|
|
🇺🇸
Dave Hansen
|
|
(wordpress) Failed wordpress login from 77.68.64.27 (GB/United Kingdom/web-out27-hp3.livemail.co.uk)
|
Brute-Force
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 77.68.64.27 (web-out27-hp3.livemail.co.uk): 1 i ...
show more
(mod_security) mod_security (id:240335) triggered by 77.68.64.27 (web-out27-hp3.livemail.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 06:24:20.873096 2025] [security2:error] [pid 9946:tid 10003] [client 77.68.64.27:45188] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 77.68.64.27 (+1 hits since last alert)|bortec-corp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bortec-corp.com"] [uri "/xmlrpc.php"] [unique_id "aVETZOOOWfzcPXz9GDzmagAAAM4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
dbmwebdesign
|
|
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
|
Brute-Force
Web App Attack
|
|
|
🇩🇪
big-cloud.nl
|
|
Try to access /xmlrpc.php
|
Web App Attack
|
|
|
🇺🇸
xmission.com
|
|
77.68.64.27 - - [23/Dec/2025:15:59:51 -0700] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (W ...
show more
77.68.64.27 - - [23/Dec/2025:15:59:51 -0700] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"
...
show less
|
Web App Attack
|
|
|
🇺🇸
nationaleventpros.com
|
|
WordPress login attempt
|
Brute-Force
|
|
|
🇺🇸
nationaleventpros.com
|
|
WordPress login attempt
|
Brute-Force
|
|
|
🇫🇮
stinpriza
|
|
Web App Attack
|
Web App Attack
|
|
|
🇧🇪
cmbplf
|
|
1 /?brand=dvs (4mos2w1d)
|
Brute-Force
Bad Web Bot
|
|