🇺🇸
TPI-Abuse
2026-09-08 05:08:27
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 01:08:19.628164 2026] [security2:error] [pid 2947794:tid 2947794] [client 100.29.80.103:21231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.scswat.org"] [uri "/wp-config.php.save"] [unique_id "ap-YQ5DcShcM2K7eB8Q4QQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 04:52:12
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 00:52:04.443522 2026] [security2:error] [pid 8571:tid 8571] [client 100.29.80.103:57823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mtshastaconcerts.com"] [uri "/wp-config.php.old"] [unique_id "ap-UdGH6P6idDMzDwBEUcAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 00:36:10
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 20:36:03.677865 2026] [security2:error] [pid 6566:tid 6566] [client 100.29.80.103:58162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goldcountrygermanamericanclub.org"] [uri "/.env.local"] [unique_id "ap9Yc7VcF_pSfd7-OY4bdwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 22:57:23
(7 hours ago)
(mod_security) mod_security (id:210730) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amaz ...
show more
(mod_security) mod_security (id:210730) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 18:57:20.146161 2026] [security2:error] [pid 7051:tid 7051] [client 100.29.80.103:1782] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||theateroobleck.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "theateroobleck.com"] [uri "/dump.sql"] [unique_id "ap9BUCmcB3OGpv5iRipfsAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 22:18:39
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 18:18:35.863774 2026] [security2:error] [pid 4656:tid 4656] [client 100.29.80.103:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "local639.com"] [uri "/.env.backup"] [unique_id "ap84O0ynTKJJEWHCAgfaQAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 20:27:21
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 16:27:17.155281 2026] [security2:error] [pid 3655:tid 3655] [client 100.29.80.103:44073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kountz.org"] [uri "/wp-config.php.orig"] [unique_id "ap8eJXglmFtdlJTbaIg0kAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 19:35:11
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:35:04.214822 2026] [security2:error] [pid 17774:tid 17774] [client 100.29.80.103:30141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.abneyfoundation.org"] [uri "/.env"] [unique_id "ap8R6LleP0CCivu3D24NRQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 19:07:55
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:07:50.657831 2026] [security2:error] [pid 31461:tid 31461] [client 100.29.80.103:60562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bryteandbroderick.org"] [uri "/wp-config.php.backup"] [unique_id "ap8LhiokfE9U-SATDog5PwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 15:58:15
(14 hours ago)
(mod_security) mod_security (id:210730) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amaz ...
show more
(mod_security) mod_security (id:210730) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 11:58:10.633925 2026] [security2:error] [pid 21901:tid 21901] [client 100.29.80.103:63709] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||montgomeryhistoricalsociety.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "montgomeryhistoricalsociety.org"] [uri "/db.sql"] [unique_id "ap7fEscXhR9vFp6HyeAvFAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 11:21:06
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 07:21:00.517886 2026] [security2:error] [pid 26837:tid 26837] [client 100.29.80.103:55374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.assec.org"] [uri "/wp-config.php.dist"] [unique_id "ap6eHE0ChRCdfAbUmqsixgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 09:09:01
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 05:08:54.281097 2026] [security2:error] [pid 28383:tid 28383] [client 100.29.80.103:61469] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "afscmelocal2794.com"] [uri "/wp-config.php~"] [unique_id "ap5_JlwO37dYiV9L79geQQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 04:06:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 00:06:10.131872 2026] [security2:error] [pid 1775986:tid 1776070] [client 100.29.80.103:7533] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sportsoutreachnc.org"] [uri "/.env.old"] [unique_id "ap44MlAY7FEzOcUqwbb4gAAAAZQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 00:04:20
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 100.29.80.103 (ec2-100-29-80-103.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 20:04:12.297896 2026] [security2:error] [pid 5441:tid 5441] [client 100.29.80.103:42386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.h-vpastoralcharge.org"] [uri "/wp-config.php.bak"] [unique_id "ap3_fP05_lDlqONGNupZCQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
clapper
2026-09-06 21:21:15
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 100.29.80.103 (US/United States/ec2-100-29-80-1 ...
show more
(mod_security) mod_security (id:949110) triggered by 100.29.80.103 (US/United States/ec2-100-29-80-103.compute-1.amazonaws.com): 3 in the last 3600 secs; ID: LUC
show less
Brute-Force
Bad Web Bot
🇫🇷
dynamix
2026-09-06 18:01:23
(1 day ago)
Multiple WAF Violations
Web App Attack