🇧🇪
voormedia
2026-08-03 21:34:02
(3 weeks ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇺🇸
TPI-Abuse
2026-07-30 22:37:25
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 77.83.26.79 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 77.83.26.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 18:37:18.587507 2026] [security2:error] [pid 2331675:tid 2331675] [client 77.83.26.79:9885] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||maffiniandbearce.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "maffiniandbearce.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amvSHinQSxbpcpybqBE6dwAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 23:57:30
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 77.83.26.79 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 77.83.26.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 19:57:26.196281 2026] [security2:error] [pid 23986:tid 23986] [client 77.83.26.79:45121] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jafgcreates.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jafgcreates.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aitLZpwzXF79fiGJYYIdngAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-10 23:06:00
(5 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-06 19:02:13
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 77.83.26.79 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 77.83.26.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 14:02:05.988113 2026] [security2:error] [pid 32047:tid 32119] [client 77.83.26.79:60509] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||richardleeweatherman.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "richardleeweatherman.com"] [uri "/"] [unique_id "aaskrb1q5O0PH89t5LaasAAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-01-24 18:56:58
(7 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 77.83.26.79 (US/United States/-): 1 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 77.83.26.79 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-01-23 20:10:25
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 77.83.26.79 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 77.83.26.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 23 15:10:19.205126 2026] [security2:error] [pid 5745:tid 5745] [client 77.83.26.79:58095] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gonzalez.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXPVqwD0phMg75RbxUYE-gAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2026-01-15 08:55:37
(7 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 1/15/2026 8:55 am (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-01-12 08:10:07
(7 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇸🇬
ANTI SCANNER
2026-01-11 14:19:36
(7 months ago)
Scanner : /wp-login.php
Web Spam
🇧🇪
voormedia
2026-01-11 09:45:15
(7 months ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇵🇱
rafix
2023-11-03 06:58:20
(2 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot