🇮🇹
Progetto1
2026-05-26 14:00:17
(1 week ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 12:13:37
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 77.83.27.188 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 77.83.27.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 08:13:30.386259 2026] [security2:error] [pid 19072:tid 19072] [client 77.83.27.188:44937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jennyfiore.com"] [uri "/wp-config.php.orig"] [unique_id "ahBIai2mSKDw9f9kuCaWSAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 00:22:54
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 77.83.27.188 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 77.83.27.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 20:22:46.126199 2026] [security2:error] [pid 22084:tid 22084] [client 77.83.27.188:23203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vrevgaming.net"] [uri "/wp-config.php.old"] [unique_id "ag-h1qvuEk65niv0ns9GUAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 16:49:24
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 77.83.27.188 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 77.83.27.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 12:49:20.395093 2026] [security2:error] [pid 13810:tid 13812] [client 77.83.27.188:10013] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tomithai.com|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tomithai.com"] [uri "/wp-config.inc"] [unique_id "ag3mEKb8kG5fGxnvvHBcBgAAAMA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 12:45:14
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 77.83.27.188 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 77.83.27.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:45:10.400440 2026] [security2:error] [pid 14357:tid 14357] [client 77.83.27.188:35967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stoneybluff.com"] [uri "/wp-config.php.save"] [unique_id "ag2s1k9Ssu2G9hy7JO8WWgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-04 08:10:12
(1 month ago)
77.83.27.188 - - [04/May/2026:16:10:12 +0800] "GET /wp-config.php~ HTTP/1.1" 301 - "-" "Mozilla/5.0 ...
show more
77.83.27.188 - - [04/May/2026:16:10:12 +0800] "GET /wp-config.php~ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-04-26 02:52:59
(1 month ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 77.83.27.188 (US/United States/-): ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 77.83.27.188 (US/United States/-): 2 in the last 3600 secs
show less
Web App Attack
🇩🇪
london2038.com
2026-02-17 22:58:04
(3 months ago)
Detected by WP fail2ban
2026-02-17T23:58:04.021151+01:00 wordpress: Authentication attempt from 77.8 ...
show more
Detected by WP fail2ban
2026-02-17T23:58:04.021151+01:00 wordpress: Authentication attempt from 77.83.27.188
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-06 16:57:28
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 77.83.27.188 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 77.83.27.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 06 11:57:20.779177 2026] [security2:error] [pid 20793:tid 20793] [client 77.83.27.188:27219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||calvarycavaliers.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "calvarycavaliers.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aYYdcAyRvlUrk2x9fJUPBQAAAA4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2026-01-24 22:59:26
(4 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 1/24/2026 10:59 pm (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇵🇱
rafix
2023-11-03 06:58:41
(2 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot
🇩🇪
SCHAPPY
2023-07-26 19:11:14
(2 years ago)
Mutliple attempts to access web resources unauthorized, HTTP code 403.
Web App Attack