🇺🇸
TPI-Abuse
2026-05-22 13:43:31
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 77.83.25.51 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 77.83.25.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 09:43:24.632943 2026] [security2:error] [pid 30046:tid 30046] [client 77.83.25.51:26585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barigby.com"] [uri "/.wp-config.php.swp"] [unique_id "ahBdfMclrfzr7YPmbPQXJQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 21:12:09
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 77.83.25.51 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 77.83.25.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 17:12:02.910892 2026] [security2:error] [pid 13967:tid 13967] [client 77.83.25.51:13137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.thebestac.com"] [uri "/wp-config.bak"] [unique_id "ag4jonb-DrM1ZdQkcYlk-QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 12:57:27
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 77.83.25.51 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 77.83.25.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:57:21.702162 2026] [security2:error] [pid 7324:tid 7324] [client 77.83.25.51:11429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brianwhitty.com"] [uri "/wp-config.php.orig"] [unique_id "ag2vschjSoLVJckx7EsNDwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
tilellit.pro
2026-05-19 06:51:56
(2 weeks ago)
Fail2Ban banned 77.83.25.51 for security violations in jail wp-armour. Log: 2026/05/19 06:51:55 [err ...
show more
Fail2Ban banned 77.83.25.51 for security violations in jail wp-armour. Log: 2026/05/19 06:51:55 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 77.83.25.51 | Target: wplogin" , client: 77.83.25.51, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
2026-05-18 12:33:00
(3 weeks ago)
Exceeded the maximum global requests per minute for crawlers or humans.
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
oralunal
2026-03-31 05:42:41
(2 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇫🇷
tilellit.pro
2026-02-06 18:12:20
(4 months ago)
Fail2Ban banned 77.83.25.51 for security violations in jail wp-armour. Log: 2026/02/06 18:12:19 [err ...
show more
Fail2Ban banned 77.83.25.51 for security violations in jail wp-armour. Log: 2026/02/06 18:12:19 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 77.83.25.51 | Target: wplogin" , client: 77.83.25.51, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇩🇪
psauxit
2026-02-04 22:23:09
(4 months ago)
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ...
show more
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping
show less
Hacking
Web App Attack
🇷🇺
sms.ru
2024-09-24 04:20:05
(1 year ago)
SMS pumping attack from foreign country
DDoS Attack
🇵🇱
rafix
2023-11-03 06:57:39
(2 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot