🇺🇸
TPI-Abuse
2026-05-23 22:17:18
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 77.81.142.12 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 77.81.142.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 18:17:11.048087 2026] [security2:error] [pid 22260:tid 22260] [client 77.81.142.12:24777] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pharmaceuticalsalescareerhub.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pharmaceuticalsalescareerhub.com"] [uri "/hello-world/100cuci-8.com"] [unique_id "ahInZ8aPPMBi2sA8HDGlkwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-03-14 14:45:23
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇪
OperatorXoR
2026-02-14 22:29:00
(3 months ago)
This IP address has been observed attempting the exploitation of CVE-2016-0703 relating to SSLv2.Ope ...
show more
This IP address has been observed attempting the exploitation of CVE-2016-0703 relating to SSLv2.Openssl.Get.Shared.Ciphers.Buffer.Overflow
This is a buffer overflow vulnerability related to OpenSSL and its implementation of the SSLv2 protocol https://nvd.nist.gov/vuln/detail/CVE-2016-0703
show less
Hacking
🇳🇿
Antinson
2026-02-14 00:08:53
(3 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇭🇺
Lacika555
2026-01-09 14:05:53
(4 months ago)
RdpGuard detected brute-force attempt on SMTP
Brute-Force
2025-12-03 17:49:59
(6 months ago)
77.81.142.12 - - [03/Dec/2025:18:43:56 +0100] "GET /wordpress/wp-login.php HTTP/1.1" 404 27 "-" "Moz ...
show more
77.81.142.12 - - [03/Dec/2025:18:43:56 +0100] "GET /wordpress/wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)"
...
show less
Web App Attack
🇫🇷
SpaceHost-Server
2025-11-02 04:40:30
(7 months ago)
Nov 2 05:40:29 pegasus postfix/smtpd[3152777]: warning: unknown[77.81.142.12]: SASL LOGIN authentic ...
show more
Nov 2 05:40:29 pegasus postfix/smtpd[3152777]: warning: unknown[77.81.142.12]: SASL LOGIN authentication failed: authentication failure, [email protected]
Nov 2 05:40:29 pegasus postfix/smtpd[3152815]: warning: unknown[77.81.142.12]: SASL LOGIN authentication failed: authentication failure, [email protected]
Nov 2 05:40:29 pegasus postfix/smtpd[3152816]: warning: unknown[77.81.142.12]: SASL LOGIN authentication failed: authentication failure, [email protected]
show less
Hacking
Brute-Force
2025-10-23 16:30:44
(7 months ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇮🇹
VHosting
2025-10-22 04:20:50
(7 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇮🇹
VHosting
2025-10-22 04:20:15
(7 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
2025-09-22 20:04:07
(8 months ago)
High Number of Ports and High Connection Diversity
Port Scan
🇺🇸
xmission.com
2025-07-26 13:03:11
(10 months ago)
Blocked by UFW (TCP on 6881)
Source port: 32927
TTL: 52
Packet length: 60
TOS: 0x00
This report (fo ...
show more
Blocked by UFW (TCP on 6881)
Source port: 32927
TTL: 52
Packet length: 60
TOS: 0x00
This report (for 77.81.142.12) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
2025-06-22 15:20:01
(11 months ago)
BruteForce IMAP/POP3
Brute-Force
🇺🇸
TPI-Abuse
2025-05-11 22:49:39
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 77.81.142.12 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 77.81.142.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 11 18:49:32.449339 2025] [security2:error] [pid 2118962:tid 2118962] [client 77.81.142.12:65314] [client 77.81.142.12] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cnprcertificationreviews.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cnprcertificationreviews.org"] [uri "/facebook.com"] [unique_id "aCEpfLdpdWbMPtmoC3MGzQAAAAo"], referer: https://cnprcertificationreviews.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
hostseries
2025-04-20 17:04:45
(1 year ago)
Trigger: LF_DISTATTACK
Brute-Force