2026-05-29 19:11:17
(1 week ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2026-05-26 11:22:42
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 77.83.25.215 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 77.83.25.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 07:22:38.058081 2026] [security2:error] [pid 4067:tid 4094] [client 77.83.25.215:26561] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||adultbaja.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "adultbaja.com"] [uri "/backup_2020.db"] [unique_id "ahWCfsy2wBxviUgDT0zukwAAAFE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 13:27:15
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 77.83.25.215 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 77.83.25.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 09:27:06.955061 2026] [security2:error] [pid 8042:tid 8042] [client 77.83.25.215:58323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iee-usa.com"] [uri "/wp-config.php~"] [unique_id "ahBZqmVB1ButZHt-JAca2AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 20:49:00
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 77.83.25.215 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 77.83.25.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 16:48:55.353830 2026] [security2:error] [pid 9523:tid 9523] [client 77.83.25.215:42669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.kbalan.com"] [uri "/wp-config.php.orig"] [unique_id "ag4eN1BWyp0A6lxOBmorKQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 15:20:19
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 77.83.25.215 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 77.83.25.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 11:20:13.625508 2026] [security2:error] [pid 20810:tid 20810] [client 77.83.25.215:36345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fuentevictoria.com"] [uri "/wp-config.bak"] [unique_id "ag3RLflcV0yAaEKKjuFtMQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 12:55:34
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 77.83.25.215 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 77.83.25.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:55:25.901054 2026] [security2:error] [pid 5970:tid 5970] [client 77.83.25.215:44259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "automatebi.com"] [uri "/wp-config.php~"] [unique_id "ag2vPV1HL255mTU3yfIqAAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
COMAITE
2026-05-16 12:08:18
(3 weeks ago)
Suspicious URL access.
Web App Attack
🇨🇭
4server
2026-05-11 11:20:44
(4 weeks ago)
[MonMay1113:20:36.9338582026][security2:error][pid295150:tid295183][client77.83.25.215:0]ModSecurity ...
show more
[MonMay1113:20:36.9338582026][security2:error][pid295150:tid295183][client77.83.25.215:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".db\"][severity\"ERROR\"][hostname\"fisioterapiafalzone.ch\"][uri\"/backup_2019.db\"][unique_id\"agG7hEyDOgB0e-L7uwMkQwAAAMg\"]
show less
Hacking
Web App Attack
🇮🇹
sssrit
2026-04-15 11:09:19
(1 month ago)
77.83.25.215 - - [15/Apr/2026:13:09:16 +0200] "GET /wp-content/plugins/akismet/readme.txt HTTP/1.1" ...
show more
77.83.25.215 - - [15/Apr/2026:13:09:16 +0200] "GET /wp-content/plugins/akismet/readme.txt HTTP/1.1" 200 2638 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15"
77.83.25.215 - - [15/Apr/2026:13:09:16 +0200] "GET /wp-content/plugins/seo-by-rank-math/readme.txt HTTP/1.1" 200 9442 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15"
77.83.25.215 - - [15/Apr/2026:13:09:17 +0200] "GET /wp-content/plugins/wp-optimize/readme.txt HTTP/1.1" 200 21714 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15"
...
show less
Web App Attack