🇳🇱
Site.eu
2026-09-17 04:20:27
(42 minutes ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-17 00:47:40
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.235.255.222 (172-235-255-222.ip.linodeuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 172.235.255.222 (172-235-255-222.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 20:47:33.981574 2026] [security2:error] [pid 23130:tid 23130] [client 172.235.255.222:55627] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.itre.org"] [uri "/wp-config.php"] [unique_id "aqs4pbf_ReDo_krKSX1xiQAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-16 23:37:39
(5 hours ago)
Banned by Fail2Ban on server
Web App Attack
🇨🇭
backslash
2026-09-16 21:51:00
(7 hours ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-16 21:43:40
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.235.255.222 (172-235-255-222.ip.linodeuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 172.235.255.222 (172-235-255-222.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 17:43:33.565158 2026] [security2:error] [pid 13179:tid 13190] [client 172.235.255.222:56029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aafm.org"] [uri "/wp-config.php"] [unique_id "aqsNhUD582pF_tuHJWGWlwAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 20:04:32
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.235.255.222 (172-235-255-222.ip.linodeuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 172.235.255.222 (172-235-255-222.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 16:04:29.148842 2026] [security2:error] [pid 12844:tid 12844] [client 172.235.255.222:61686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.creartest.com"] [uri "/wp-config.php"] [unique_id "aqr2TSSJNIh0HYs_4BhbcAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-16 19:45:08
(9 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-16 19:30:09
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.235.255.222 (172-235-255-222.ip.linodeuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 172.235.255.222 (172-235-255-222.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 15:30:04.473654 2026] [security2:error] [pid 1208:tid 1208] [client 172.235.255.222:57709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ken-parker.com"] [uri "/wp-config.php"] [unique_id "aqruPGn3ho8J53FSawzDxQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
bazter.pro
2026-09-16 19:25:15
(9 hours ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 18:15:45
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.235.255.222 (172-235-255-222.ip.linodeuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 172.235.255.222 (172-235-255-222.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 14:15:41.353520 2026] [security2:error] [pid 24848:tid 24848] [client 172.235.255.222:65224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnmorogiello.com"] [uri "/wp-config.php"] [unique_id "aqrczYxetWJPQXT2GyQEVgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 17:59:45
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.235.255.222 (172-235-255-222.ip.linodeuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 172.235.255.222 (172-235-255-222.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 13:59:39.704842 2026] [security2:error] [pid 24647:tid 24647] [client 172.235.255.222:60761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dualspiralsystems.com"] [uri "/wp-config.php"] [unique_id "aqrZC8aRG4qbvWFwTqFDkAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 17:38:45
(11 hours ago)
(mod_security) mod_security (id:210730) triggered by 172.235.255.222 (172-235-255-222.ip.linodeuserc ...
show more
(mod_security) mod_security (id:210730) triggered by 172.235.255.222 (172-235-255-222.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 13:38:42.576432 2026] [security2:error] [pid 16831:tid 16831] [client 172.235.255.222:62681] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gamepart.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "aqrUIrREIQGBePB6jCec4AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Awack
2026-09-16 17:20:24
(11 hours ago)
Webshell filename probing (Sym.php, evil.php, flame.php, anons79.php, 777.php, init.php) against a W ...
show more
Webshell filename probing (Sym.php, evil.php, flame.php, anons79.php, 777.php, init.php) against a WordPress site. Cloud VPS host (Linode). Blocked at WAF/CDN and firewall.
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 16:58:29
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.235.255.222 (172-235-255-222.ip.linodeuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 172.235.255.222 (172-235-255-222.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 12:58:23.504141 2026] [security2:error] [pid 3606:tid 3606] [client 172.235.255.222:54326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.testrong.com"] [uri "/wp-config.php"] [unique_id "aqrKr3yAujsKlzG62lD7ygAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-09-16 16:42:45
(12 hours ago)
URL Probing: /0.php
Web App Attack