🇺🇸
TPI-Abuse
2026-09-08 06:50:31
(14 minutes ago)
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh. ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 02:50:27.857095 2026] [security2:error] [pid 1714850:tid 1715218] [client 2001:41d0:401:3000::4e7b:58488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "visionforandfromchildren.org"] [uri "/wp-config.php.bak"] [unique_id "ap-wM90VIYzC24HGNdGEEgAAAQY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 05:15:53
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh. ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 01:15:46.648359 2026] [security2:error] [pid 31674:tid 31674] [client 2001:41d0:401:3000::4e7b:34166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prostar.industries"] [uri "/wp-config.php.bak"] [unique_id "ap-aAqPAbe18YReDuRG9KQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 04:00:32
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh. ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 00:00:27.422935 2026] [security2:error] [pid 4391:tid 4391] [client 2001:41d0:401:3000::4e7b:51616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.kbalan.com"] [uri "/wp-config.php.bak"] [unique_id "ap-IW9RGzADaYU8XSGKrgAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 02:13:32
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh. ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 22:13:26.291165 2026] [security2:error] [pid 4042:tid 4042] [client 2001:41d0:401:3000::4e7b:52098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pleaseaddbacon.com"] [uri "/wp-config.php.bak"] [unique_id "ap9vRpGRggblNXIth53bJQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 21:37:24
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh. ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 17:37:19.165438 2026] [security2:error] [pid 424:tid 424] [client 2001:41d0:401:3000::4e7b:43602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.usaenquirer.com"] [uri "/wp-config.php.bak"] [unique_id "ap8uj6arg-EiuXWXvrZ8JwAAAGU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 20:47:45
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh. ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 16:47:38.827039 2026] [security2:error] [pid 27139:tid 27139] [client 2001:41d0:401:3000::4e7b:60624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tttns.com"] [uri "/about-jason//wp-config.php.bak"] [unique_id "ap8i6nHUTlnqy08C1iZbrwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 19:05:18
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh. ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:05:13.771495 2026] [security2:error] [pid 17218:tid 17218] [client 2001:41d0:401:3000::4e7b:33940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cnphilos.com"] [uri "/wp-config.php.bak"] [unique_id "ap8K6b0KL4ASfqg1xltFVAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 18:34:40
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh. ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 14:34:33.518964 2026] [security2:error] [pid 8541:tid 8541] [client 2001:41d0:401:3000::4e7b:35372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adlc18.org"] [uri "/wp-config.php.bak"] [unique_id "ap8DuV72y1hEeIZLcF1FxwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
strefapi_com
2026-09-07 17:22:59
(13 hours ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-09-07 16:50:39
(14 hours ago)
236 requests with url.path *debug.log
234 requests with url.path */debug.log
228 requests with ur ...
show more
236 requests with url.path *debug.log
234 requests with url.path */debug.log
228 requests with url.path *.php.bak
179 requests with url.path *.git/*
show less
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-07 16:28:47
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh. ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 12:28:41.713080 2026] [security2:error] [pid 30552:tid 30552] [client 2001:41d0:401:3000::4e7b:38110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.guitarwisdom.benshermanguitar.com"] [uri "/wp-config.php.bak"] [unique_id "ap7mOYbMFZawIgZJpDrDMQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 15:33:54
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh. ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:41d0:401:3000::4e7b (vps-c1adef4c.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 11:33:47.252013 2026] [security2:error] [pid 25112:tid 25112] [client 2001:41d0:401:3000::4e7b:46104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.spacebooger.com.mms-boss.net"] [uri "/wp-config.php.bak"] [unique_id "ap7ZW956gJD4PKt2O-Q_2gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-07 13:00:05
(18 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack