🇺🇸
TPI-Abuse
2026-01-29 13:31:30
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 77.81.142.41 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 77.81.142.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 08:31:26.704448 2026] [security2:error] [pid 20920:tid 20920] [client 77.81.142.41:56133] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||benefit-design.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "benefit-design.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXthLuhZuYbvmTR6GPa9VgAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-25 17:14:09
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 77.81.142.41 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 77.81.142.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 25 12:14:01.764824 2026] [security2:error] [pid 30920:tid 30920] [client 77.81.142.41:7174] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gonzalez.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXZPWS4snfvRIS1fsFdFnwAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-25 14:57:18
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 77.81.142.41 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 77.81.142.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 25 09:57:11.379985 2026] [security2:error] [pid 15027:tid 15027] [client 77.81.142.41:34217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lbee.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lbee.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXYvR4GzPRVInvLMVdGrzQAAABc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Dampen59
2026-01-07 23:25:52
(5 months ago)
(smtpauth) Failed SMTP AUTH login from 77.81.142.41 (US/United States/-): 5 in the last 3600 secs; P ...
show more
(smtpauth) Failed SMTP AUTH login from 77.81.142.41 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-01-08 00:25:30 dovecot_login authenticator failed for H=(ADMIN) [77.81.142.41]:47770: 535 Incorrect authentication data ([email protected] )
2026-01-08 00:25:35 dovecot_login authenticator failed for H=(ADMIN) [77.81.142.41]:41403: 535 Incorrect authentication data ([email protected] )
2026-01-08 00:25:36 dovecot_login authenticator failed for H=(ADMIN) [77.81.142.41]:17187: 535 Incorrect authentication data ([email protected] )
2026-01-08 00:25:48 dovecot_login authenticator failed for H=(ADMIN) [77.81.142.41]:56654: 535 Incorrect authentication data ([email protected] )
2026-01-08 00:25:51 dovecot_login authenticator failed for H=(ADMIN) [77.81.142.41]:42759: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇺🇸
bigscoots.com
2025-12-14 01:29:58
(6 months ago)
(sshd) Failed SSH login from 77.81.142.41 (US/United States/-): 5 in the last 3600 secs; Ports: *; D ...
show more
(sshd) Failed SSH login from 77.81.142.41 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Dec 13 19:29:39 19276 sshd[17027]: Did not receive identification string from 77.81.142.41 port 20330
Dec 13 19:29:39 19276 sshd[17031]: Did not receive identification string from 77.81.142.41 port 16079
Dec 13 19:29:39 19276 sshd[17035]: Did not receive identification string from 77.81.142.41 port 10270
Dec 13 19:29:39 19276 sshd[17028]: Did not receive identification string from 77.81.142.41 port 5110
Dec 13 19:29:39 19276 sshd[17036]: Did not receive identification string from 77.81.142.41 port 43773
show less
Brute-Force
SSH
🇹🇭
thaizone.com
2025-12-03 21:14:41
(6 months ago)
Password guessing attack (SM11) #1
Email Spam
Brute-Force
🇨🇿
lp
2025-11-26 20:53:40
(6 months ago)
Email account brute force: 1 attempts were recorded from 77.81.142.41
2025-11-26T21:32:13+01:00 warn ...
show more
Email account brute force: 1 attempts were recorded from 77.81.142.41
2025-11-26T21:32:13+01:00 warning: unknown[77.81.142.41]: SASL LOGIN authentication failed: authentication failure, [email protected]
show less
Brute-Force
🇺🇸
TPI-Abuse
2025-11-06 08:08:15
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 77.81.142.41 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 77.81.142.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 03:08:10.276566 2025] [security2:error] [pid 8282:tid 8282] [client 77.81.142.41:39402] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||manty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "manty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQxXarkdCW7a5nSKQ14dkgAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
GEDAL
2025-09-25 08:57:05
(8 months ago)
Fail2ban webexploits @ <hostname> : 77.81.142.41 - - [07/Sep/2025:19:27:17 +0200] "GET /wp/wp-login. ...
show more
Fail2ban webexploits @ <hostname> : 77.81.142.41 - - [07/Sep/2025:19:27:17 +0200] "GET /wp/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)"
show less
Brute-Force
SSH
🇫🇷
GEDAL
2025-09-23 09:51:07
(8 months ago)
Fail2ban webexploits @ <hostname> : 77.81.142.41 - - [07/Sep/2025:19:27:17 +0200] "GET /wp/wp-login. ...
show more
Fail2ban webexploits @ <hostname> : 77.81.142.41 - - [07/Sep/2025:19:27:17 +0200] "GET /wp/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)"
show less
Brute-Force
SSH
🇫🇷
GEDAL
2025-09-07 17:27:18
(9 months ago)
Fail2ban webexploits @ <hostname> : 77.81.142.41 - - [07/Sep/2025:19:27:17 +0200] "GET /wp/wp-login. ...
show more
Fail2ban webexploits @ <hostname> : 77.81.142.41 - - [07/Sep/2025:19:27:17 +0200] "GET /wp/wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)"
show less
Brute-Force
SSH
2025-08-25 22:30:16
(9 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
🇺🇸
octageeks.com
2025-08-05 04:11:26
(10 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
2025-07-29 11:15:14
(10 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2025-07-26 11:10:15
(10 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking