🇦🇺
FireGuard Server
2026-11-14 09:25:15
UTC ·
(1 hour ago)
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=443
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-11-12 19:02:51
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 77.69.198.152 (dynamic.ip.77.69.198.152.batelco.com.bh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:02:43.517127 2026] [security2:error] [pid 17831:tid ...
show more
(mod_security) mod_security (id:225170) triggered by 77.69.198.152 (dynamic.ip.77.69.198.152.batelco.com.bh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:02:43.517127 2026] [security2:error] [pid 17831:tid 17831] [client 77.69.198.152:54804] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||studio66.chapa.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "studio66.chapa.net"] [uri "/wp-json/wp/v2/users"] [unique_id "avYNU-kDVCjikDUHR6QvaAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-11 15:10:58
UTC ·
(2 days ago)
Web probing (1 hits in 24h) on kernoverlegsibbe-ijzeren.nl: sensitive-path scans and/or 404 bursts. Reported by CRMON.
Web App Attack
2026-11-10 11:02:07
UTC ·
(3 days ago)
[osotir.org] httpd-suspicious-path: sites=www.osotir.org; logs=/var/log/httpd/domains/osotir.org.log; samples=/?author=3&feed=rss2 | /?author=4&feed=rss2 | /?author=5&feed=rss2
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 13:56:20
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 77.69.198.152 (dynamic.ip.77.69.198.152.batelco.com.bh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 08:56:12.601023 2026] [security2:error] [pid 27930:tid ...
show more
(mod_security) mod_security (id:225170) triggered by 77.69.198.152 (dynamic.ip.77.69.198.152.batelco.com.bh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 08:56:12.601023 2026] [security2:error] [pid 27930:tid 27930] [client 77.69.198.152:29630] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||starcrestsales.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "starcrestsales.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "au3cfBA-t4xMfazPMRAWawAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
Mugen
2026-11-04 02:21:46
UTC ·
(1 week ago)
Unauthorized VPN login attempts
Brute-Force
🇨🇿
lp
2026-11-02 10:48:18
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 77.69.198.152
2026-11-02T11:34:37+0100 vpn Access-Reject station: 77.69.198.152
Brute-Force
Web App Attack
🇩🇪
LRob
2026-10-27 10:27:07
UTC ·
(2 weeks ago)
Web exploit attempt | method: POST, GET | path: /wp-login.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 14:48:15
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 77.69.198.152 (dynamic.ip.77.69.198.152.batelco.com.bh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 10:48:10.475316 2026] [security2:error] [pid 14910:tid ...
show more
(mod_security) mod_security (id:225170) triggered by 77.69.198.152 (dynamic.ip.77.69.198.152.batelco.com.bh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 10:48:10.475316 2026] [security2:error] [pid 14910:tid 14910] [client 77.69.198.152:53508] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||accommodation-perthairport.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "accommodation-perthairport.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "at9oKtSHcamsf2v-oiW_qQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇹
Malta
2026-10-25 17:46:27
UTC ·
(2 weeks ago)
77.69.198.152 - - [25/Oct/2026:18:46:27 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
Brute-force password attempt
Hacking
Web App Attack
Brute-Force
🇳🇱
Alt255
2026-10-21 09:21:26
UTC ·
(3 weeks ago)
[ti-10al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 77.69.198.152 - - [21/Oct/2026:11:21:12 +0200] "GET /wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug&page=1 HTTP/2.0 ...
show more
[ti-10al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 77.69.198.152 - - [21/Oct/2026:11:21:12 +0200] "GET /wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug&page=1 HTTP/2.0" 404 365 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36"
77.69.198.152 - - [21/Oct/2026:11:21:13 +0200] "GET /wp-json/wp/v2/users?per_page=100&_fields=id,slug&per_page=100&page=1 HTTP/2.0" 404 366 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36"
77.69.198.152 - - [21/Oct/2026:11:21:14 +0200] "GET /wp-json/rankmath/v1/getHead?url=https://ns.thurn.nl HTTP/2.0" 404 343 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome
...
show less
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-10-11 08:53:20
UTC ·
(1 month ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 77.69.198.152 (BH/Bahrain/dynamic.ip.77.69.198.152.batelco.com.bh): 1 in the last 3600 secs (0-195)
Hacking
🇩🇪
FeG Deutschland
2026-10-09 12:31:04
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 12:03:15
UTC ·
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 77.69.198.152 (dynamic.ip.77.69.198.152.batelco.com.bh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 08:03:07.349424 2026] [security2:error] [pid 9542:tid ...
show more
(mod_security) mod_security (id:225170) triggered by 77.69.198.152 (dynamic.ip.77.69.198.152.batelco.com.bh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 08:03:07.349424 2026] [security2:error] [pid 9542:tid 9542] [client 77.69.198.152:54872] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kaylamaclaincounseling.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kaylamaclaincounseling.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asjX-3us4GCdN6ONQBA-swAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ByeByte API
2026-09-11 13:01:35
UTC ·
(2 months ago)
byebyte.space auth: GET /login.html at 2026-09-11T13:01:35Z. Source IP is in our local ban list and retried; banned offender continuing to probe. UA: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943. ...
show more
byebyte.space auth: GET /login.html at 2026-09-11T13:01:35Z. Source IP is in our local ban list and retried; banned offender continuing to probe. UA: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.36 Safari/537.36'. Accept-Language: 'en-GB,en;q=0.9,en-US;q=0.8'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Not(A)Brand";v="99", "Google Chrome";v="133", "Chromium";v="133"'. Platform: "Windows" (mobile=?0). Country (CF): BH. TLS info: {"scheme":"https"}.
show less
Brute-Force
Web App Attack
