🇩🇪
maxpower
2026-09-22 23:19:57
(6 days ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 2001:8d8:5ff:5f:82:165:84:222 (DE/German ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 2001:8d8:5ff:5f:82:165:84:222 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2001:8d8:5ff:5f:82:165:84:222 - - [23/Sep/2026:01:19:49 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "-" "-" host=samitecnopetrol.com
show less
Port Scan
🇺🇸
TPI-Abuse
2026-09-22 20:00:32
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:00:28.159770 2026] [security2:error] [pid 32245:tid 32245] [client 2001:8d8:5ff:5f:82:165:84:222:53656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "n4ocw.com"] [uri "/wp-config.php.bak"] [unique_id "arLeXEJIbHH7BYkNaa3QRQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 18:39:50
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 14:39:42.672466 2026] [security2:error] [pid 1592:tid 1592] [client 2001:8d8:5ff:5f:82:165:84:222:32914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sfsdesignsproductions.com"] [uri "/wp-config.php.bak"] [unique_id "arLLblbUAaEd_viMbocYeAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:46:04
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:45:59.392293 2026] [security2:error] [pid 29417:tid 29417] [client 2001:8d8:5ff:5f:82:165:84:222:59168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sieder.com"] [uri "/wp-config.php.bak"] [unique_id "arKwx9D3ki5kWGxp6bmPzQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:15:53
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:15:45.248242 2026] [security2:error] [pid 1713:tid 1713] [client 2001:8d8:5ff:5f:82:165:84:222:54348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dodojuice.com"] [uri "/wp-config.php.bak"] [unique_id "arKpsW1MhFLBoAK7h6onPAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 15:41:16
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:41:08.384575 2026] [security2:error] [pid 11004:tid 11004] [client 2001:8d8:5ff:5f:82:165:84:222:47718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fashionmenswear.com"] [uri "/wp-config.php.bak"] [unique_id "arKhlEIjyOTYOIwmWSNhkAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:40:21
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:40:14.352078 2026] [security2:error] [pid 18518:tid 18518] [client 2001:8d8:5ff:5f:82:165:84:222:33316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "renomarsh.com"] [uri "/wp-config.php.bak"] [unique_id "arKFPqSvkY9Ll4j4HXtV8AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:23:11
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:23:07.037877 2026] [security2:error] [pid 12619:tid 12619] [client 2001:8d8:5ff:5f:82:165:84:222:56664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "banapest.com"] [uri "/wp-config.php.bak"] [unique_id "arKBO3rrAWOHSytMlwQRjwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 11:44:38
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:44:31.061205 2026] [security2:error] [pid 18039:tid 18039] [client 2001:8d8:5ff:5f:82:165:84:222:35212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vrbsroma.com"] [uri "/wp-config.php.bak"] [unique_id "arJqH40BbSr01jqF4WpD6gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 08:50:38
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 04:50:30.570258 2025] [security2:error] [pid 5770:tid 5770] [client 2001:8d8:5ff:5f:82:165:84:222:37654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "untraceable.org"] [uri "/wp-config.php1"] [unique_id "aHoK1j4wDM5dMsQgQlKxkAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-16 10:59:31
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 06:59:25.147073 2025] [security2:error] [pid 29727:tid 29727] [client 2001:8d8:5ff:5f:82:165:84:222:57590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rucomp.com"] [uri "/wp-config.php.old"] [unique_id "aHeGDbhGnxDgDCow1I_hwQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-11 22:55:40
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 18:55:35.809996 2025] [security2:error] [pid 12791:tid 12791] [client 2001:8d8:5ff:5f:82:165:84:222:36012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "portcitybluessociety.com"] [uri "/wp-config.php.old"] [unique_id "aHGWZzLM86MwkkLFLbsq8wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-10 04:15:06
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 10 00:15:01.071977 2025] [security2:error] [pid 32618:tid 32618] [client 2001:8d8:5ff:5f:82:165:84:222:54402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kokr.org"] [uri "/wp-config.php.old"] [unique_id "aG8-RZF35HWq0SYgVorR6QAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
ki3
2025-07-09 14:11:03
(1 year ago)
Fail2Ban: Web App Attacks and Forum Spam 2001:8d8:5ff:5f:82:165:84:222 1752070263.0(JST)
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-07 19:25:02
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:84:222 (infongp-de34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 07 15:24:57.731901 2025] [security2:error] [pid 1948:tid 1948] [client 2001:8d8:5ff:5f:82:165:84:222:45326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "internationalservicetravel.com"] [uri "/wp-config.php.save"] [unique_id "aGwfCQ9cR10arPLqa9B-jQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
