🇺🇸
TPI-Abuse
2025-07-19 08:18:25
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 04:18:19.751860 2025] [security2:error] [pid 1070:tid 1070] [client 162.241.225.63:37226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "echinech.com"] [uri "/wp-config.php_orig"] [unique_id "aHtUy6Ys1-TbvGB8NVqcAQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 08:11:41
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 04:11:37.354467 2025] [security2:error] [pid 22269:tid 22269] [client 162.241.225.63:18272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lisalehmann.com"] [uri "/johnehmann.html/wp-config.php1"] [unique_id "aHoBuQjTTTbmMmCJZctxwgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-17 22:25:54
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-07-17 00:35:49
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-07-15 21:15:52
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-12 16:14:49
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 12:14:42.414998 2025] [security2:error] [pid 13418:tid 13418] [client 162.241.225.63:13720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pontchartrainhumanesociety.org"] [uri "/wp-config.php.old"] [unique_id "aHKJ8vpDvTwfTRi90NzFGwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-12 11:27:26
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 07:27:20.545943 2025] [security2:error] [pid 32281:tid 32281] [client 162.241.225.63:55286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.peacecampus.org"] [uri "/wp-config.php.old"] [unique_id "aHJGmERbQeOcgegffp_kDwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-12 07:22:39
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 03:22:33.034417 2025] [security2:error] [pid 1708:tid 1708] [client 162.241.225.63:47738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssl-grp.com"] [uri "/wp-config.php.old"] [unique_id "aHINOR-247Sc_LNfBTRp_wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2025-07-12 03:01:32
(1 year ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇺🇸
TPI-Abuse
2025-07-11 17:03:47
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 13:03:42.861789 2025] [security2:error] [pid 9777:tid 9777] [client 162.241.225.63:30258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wallpaperpro.com"] [uri "/wp-config.php1"] [unique_id "aHFD7gkAQ-cv5BCKDL2ougAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-11 07:04:04
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 03:03:56.366944 2025] [security2:error] [pid 1539:tid 1551] [client 162.241.225.63:25684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "juantrece.com"] [uri "/wp-config.php.old"] [unique_id "aHC3XEv7rtdAtjOt7386EQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-10 21:31:14
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 10 17:31:07.179503 2025] [security2:error] [pid 3180:tid 3180] [client 162.241.225.63:37172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amosellistonfortheladies.com"] [uri "/wp-config.php1"] [unique_id "aHAxG37CMW-2x9KsuH9rvAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-10 02:35:49
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-10 01:25:58
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 21:25:53.603234 2025] [security2:error] [pid 26876:tid 26876] [client 162.241.225.63:31548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "corepest.com"] [uri "/wp-config.php.old"] [unique_id "aG8WoVRWJVVqtnWe7G5ekQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-08 05:32:27
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.225.63 (box5243.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 08 01:32:23.269189 2025] [security2:error] [pid 32263:tid 32263] [client 162.241.225.63:29926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.highaltitudebaking.com"] [uri "/wp-config.php1"] [unique_id "aGytZxCTWq6UbHfXNjJc-gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack