🇺🇸
TPI-Abuse
2026-11-10 08:14:16
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210350) triggered by 77.81.65.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:14:13.720328 2026] [security2:error] [pid 7983:tid 7983] [client 77.81.65.69:32871] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 77.81.65.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:14:13.720328 2026] [security2:error] [pid 7983:tid 7983] [client 77.81.65.69:32871] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vitality-web.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vitality-web.com"] [uri "/backstore/Lift-signature.htm"] [unique_id "avLSVa5swkXHT4f28icwaQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-04 01:53:49
UTC ·
(6 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 16:13:10
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 77.81.65.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:13:04.988481 2026] [security2:error] [pid 493:tid 493] [client 77.81.65.69:28965] ModSecuri ...
show more
(mod_security) mod_security (id:210350) triggered by 77.81.65.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:13:04.988481 2026] [security2:error] [pid 493:tid 493] [client 77.81.65.69:28965] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||roachranch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "roachranch.com"] [uri "/Donate.html"] [unique_id "auNwkP59mbw3U9F2aUKj0wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 06:11:08
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 77.81.65.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 02:11:05.320539 2026] [security2:error] [pid 29528:tid 29528] [client 77.81.65.69:26587] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 77.81.65.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 02:11:05.320539 2026] [security2:error] [pid 29528:tid 29528] [client 77.81.65.69:26587] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.become-a-medicalsalesrep.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.become-a-medicalsalesrep.com"] [uri "/"] [unique_id "athXefh70L979DQ-m5P_ZgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 15:57:40
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 77.81.65.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:57:36.132052 2026] [security2:error] [pid 22260:tid 22260] [client 77.81.65.69:27473] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 77.81.65.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:57:36.132052 2026] [security2:error] [pid 22260:tid 22260] [client 77.81.65.69:27473] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.technicallydental.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.technicallydental.com"] [uri "/2009/06/"] [unique_id "atJJcCP4c4ApcMaxFw__UgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-12 09:20:19
UTC ·
(4 weeks ago)
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
Web App Attack
Hacking
🇩🇪
FD-IX
2026-10-01 00:45:17
UTC ·
(1 month ago)
Brute-force login attack detected by WordPress firewall.
Brute-Force
Web App Attack
🇺🇸
NicoID
2026-05-02 00:14:39
UTC ·
(6 months ago)
77.81.65.69 - - [01/May/2026:12:16:28 -0600] "GET /wp-login.php HTTP/1.1" 200 4883 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
Brute-Force
🇺🇸
TPI-Abuse
2026-04-27 23:09:06
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 77.81.65.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 19:09:02.180348 2026] [security2:error] [pid 18931:tid 18936] [client 77.81.65.69:38693] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 77.81.65.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 19:09:02.180348 2026] [security2:error] [pid 18931:tid 18936] [client 77.81.65.69:38693] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sallykimmel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sallykimmel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae_sjiMbofVXcSUk6JI6VwAAAcM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-04-26 10:16:33
UTC ·
(6 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇨🇿
ptlab
2026-04-21 04:48:29
UTC ·
(6 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇺🇸
kosada.com
2026-04-19 23:32:11
UTC ·
(6 months ago)
Web password guessing
Brute-Force
🇳🇿
Tripwire
2026-04-12 18:41:42
UTC ·
(6 months ago)
Probing for Wordpress - /wp-login.php
Brute-Force
Web App Attack
🇪🇸
Cognisant-Security
2026-04-07 11:52:00
UTC ·
(7 months ago)
Attempts to log in WordPress with invalid admin credentials.
Web App Attack
Hacking
🇺🇸
www.winos.me
2026-03-10 17:19:16
UTC ·
(8 months ago)
Banned due to high error rate on HTTP/1.1 protocol
Brute-Force
Web App Attack
