🇺🇸
TPI-Abuse
2026-11-10 09:43:07
UTC ·
(55 minutes ago)
(mod_security) mod_security (id:210492) triggered by 2.31.42.27 (static.27.42.31.2.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:43:02.943759 2026] [security2:error] [pid 19469:tid 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2.31.42.27 (static.27.42.31.2.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:43:02.943759 2026] [security2:error] [pid 19469:tid 19469] [client 2.31.42.27:44266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "awl-v.com"] [uri "/wordpress/wp-config.php-bak"] [unique_id "avLnJqMTUBF5LY6gMj-PJQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-10 05:20:05
UTC ·
(5 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
2026-11-06 04:18:40
UTC ·
(4 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇺🇸
TPI-Abuse
2026-11-05 18:31:25
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2.31.42.27 (static.27.42.31.2.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 13:31:17.671762 2026] [security2:error] [pid 6486:tid 64 ...
show more
(mod_security) mod_security (id:210492) triggered by 2.31.42.27 (static.27.42.31.2.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 13:31:17.671762 2026] [security2:error] [pid 6486:tid 6486] [client 2.31.42.27:42032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coroneta.com"] [uri "/wp-config.php_bk"] [unique_id "auzLdb_jnvmn5dB6knuRfgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
Coolnagour
2026-11-05 14:01:53
UTC ·
(4 days ago)
http-probing: /wp-config.php_
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 03:56:58
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2.31.42.27 (static.27.42.31.2.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:56:53.644689 2026] [security2:error] [pid 9079:tid 90 ...
show more
(mod_security) mod_security (id:210492) triggered by 2.31.42.27 (static.27.42.31.2.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:56:53.644689 2026] [security2:error] [pid 9079:tid 9079] [client 2.31.42.27:48292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oualierealty.com"] [uri "/wp-config.php_"] [unique_id "auv-hYJnCBjr9VreRo38RwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
Megasurf
2026-11-03 04:25:09
UTC ·
(1 week ago)
web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).
Web App Attack
🇫🇷
dynamix
2026-11-02 15:49:33
UTC ·
(1 week ago)
Multiple WAF Violations
Web App Attack
🇳🇱
i-turnradio.nl
2026-11-01 14:40:07
UTC ·
(1 week ago)
2026-11-01 @ 15:40:04 (CET) ~ Blocked for trying to access: /_wpeprivate/config.json
Web App Attack
2026-11-01 09:28:48
UTC ·
(1 week ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted]): (CF_ENABLE)
Port Scan
2026-11-01 07:39:12
UTC ·
(1 week ago)
fail2ban_an apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/wp-config.php_"]
Bad Web Bot
Web App Attack
🇺🇸
IndigoRidge
2026-10-30 15:12:12
UTC ·
(1 week ago)
2.31.42.27 - - [30/Oct/2026:11:12:09 -0400] "GET /phpinfo.php HTTP/1.1" 404 200 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.134 Safari/537.36"
2.31.42.27 - - [30/Oct/2026:11:12:10 -0400] "GET /inf ...
show more
2.31.42.27 - - [30/Oct/2026:11:12:09 -0400] "GET /phpinfo.php HTTP/1.1" 404 200 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.134 Safari/537.36"
2.31.42.27 - - [30/Oct/2026:11:12:10 -0400] "GET /info.php HTTP/1.1" 404 200 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.99 Safari/537.36"
2.31.42.27 - - [30/Oct/2026:11:12:11 -0400] "GET /config.php HTTP/1.1" 404 200 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; MDDRJS; rv:11.0) like Gecko"
...
show less
Web App Attack
🇩🇪
HandyTreff.de
2026-10-30 08:50:44
UTC ·
(1 week ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -38.051 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; Touch; MALNJS; rv:11.0) like Gecko
Web App Attack
Bad Web Bot
🇳🇱
Savvii
2026-10-29 09:54:50
UTC ·
(1 week ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
