🇺🇸
TPI-Abuse
2026-09-22 23:44:35
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 19:44:30.964862 2026] [security2:error] [pid 20939:tid 20939] [client 162.241.253.72:13254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "naghmehfarahmand.com"] [uri "/wp-config.php.bak"] [unique_id "arMS3vQGRXJ0ECB5r4aFqgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 22:54:48
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 18:54:45.495780 2026] [security2:error] [pid 1446345:tid 1446345] [client 162.241.253.72:22946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wonboyn.com"] [uri "/wp-config.php.bak"] [unique_id "arMHNV6HJE8KdhGwI70I6wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:46:57
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:46:51.174915 2026] [security2:error] [pid 31583:tid 31583] [client 162.241.253.72:28862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gemexpressions.com"] [uri "/wp-config.php.bak"] [unique_id "arLpO8LsbTg7ZG8N_2G20wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:27:15
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:27:10.187507 2026] [security2:error] [pid 3985:tid 3985] [client 162.241.253.72:17064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ditchthediaper.com"] [uri "/wp-config.php.bak"] [unique_id "arLknv4V4OFqjcUiPNTdLAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 18:35:34
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 14:35:26.236140 2026] [security2:error] [pid 10644:tid 10699] [client 162.241.253.72:24282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "the-queen-bee.com"] [uri "/wp-config.php.bak"] [unique_id "arLKbm54EhUung9fxqHs8QAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 18:13:58
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 14:13:52.075970 2026] [security2:error] [pid 4647:tid 4647] [client 162.241.253.72:17452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darrinlauritzen.com"] [uri "/wp-config.php.bak"] [unique_id "arLFYE-lyiqe-jaeNOg5WAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 17:48:12
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:48:04.692347 2026] [security2:error] [pid 31911:tid 31911] [client 162.241.253.72:46494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "livingminimal.com"] [uri "/wp-config.php.bak"] [unique_id "arK_VI-W4DGowksY89QJIQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-22 16:59:26
(12 hours ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.241.253.72 - - [22/Sep/2026:18:59:25 +0200] "GET /wp-config.php.bak HTTP/1.1" 301 576 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:35:34
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:35:28.339104 2026] [security2:error] [pid 7843:tid 7843] [client 162.241.253.72:40966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "churchtop.com"] [uri "/wp-config.php.bak"] [unique_id "arKuUBMnlRa-hCj0CW4M9gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:00:35
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:00:30.756795 2026] [security2:error] [pid 21791:tid 21791] [client 162.241.253.72:52480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "snowfection.com"] [uri "/wp-config.php.bak"] [unique_id "arKmHnNbAn7efCaQELg19gAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:07:11
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:07:04.616923 2026] [security2:error] [pid 25362:tid 25362] [client 162.241.253.72:13444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "martinvjohnson.com"] [uri "/wp-config.php.bak"] [unique_id "arKLiHJUFRGI3RnNvlGgyQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:48:23
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:48:18.287245 2026] [security2:error] [pid 12355:tid 12355] [client 162.241.253.72:37922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isjustanasshole.com"] [uri "/wp-config.php.bak"] [unique_id "arKHIiLPp86KRIm4HnFALQAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 12:03:03
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:02:58.887156 2026] [security2:error] [pid 7745:tid 7745] [client 162.241.253.72:22216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flutepraise.com"] [uri "/wp-config.php.bak"] [unique_id "arJucqDSphd401WA0WPjwgAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 02:08:43
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 162.241.253.72 (box5774.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 22:08:36.189231 2026] [security2:error] [pid 29923:tid 29956] [client 162.241.253.72:13742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "slelectric.com"] [uri "/.env"] [unique_id "arHjJF3KBJmvVJUoBumE0wAAAUk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-23 16:50:00
(11 months ago)
Tried accessing several WordPress admin pages on a website that doesnt even use wordpress.
Web App Attack
