🇺🇸
TPI-Abuse
2026-09-22 16:13:57
(16 minutes ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:13:50.661942 2026] [security2:error] [pid 15194:tid 15194] [client 2001:8d8:5ff:5f:82:165:86:143:47492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "harrygant.com"] [uri "/wp-config.php.bak"] [unique_id "arKpPhUQ_tFPKAVD7SwSgAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 15:30:27
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:30:24.212003 2026] [security2:error] [pid 22359:tid 22359] [client 2001:8d8:5ff:5f:82:165:86:143:43448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rockitfish.com"] [uri "/wp-config.php.bak"] [unique_id "arKfECw4bAF0OcQ-wIRZjwAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:11:39
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:11:33.171263 2026] [security2:error] [pid 1543:tid 1543] [client 2001:8d8:5ff:5f:82:165:86:143:55810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amywoodruff.com"] [uri "/wp-config.php.bak"] [unique_id "arJ-hWICwpVE6Bx89VlL9QAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 12:28:28
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:28:24.633744 2026] [security2:error] [pid 10355:tid 10372] [client 2001:8d8:5ff:5f:82:165:86:143:53998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "landmarkocchealth.com"] [uri "/wp-config.php.bak"] [unique_id "arJ0aEuhmVvAkx9VhaIBVwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 10:34:02
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 06:33:56.613028 2026] [security2:error] [pid 14038:tid 14038] [client 2001:8d8:5ff:5f:82:165:86:143:57558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aslproud.com"] [uri "/wp-config.php.bak"] [unique_id "arJZlKEFoarykPt7K3p8igAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 09:39:50
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:39:46.866420 2026] [security2:error] [pid 11530:tid 11530] [client 2001:8d8:5ff:5f:82:165:86:143:40628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "biblicalartifact.com"] [uri "/wp-config.php.bak"] [unique_id "arJM4jGhKProoOgzjNzcegAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 02:40:04
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 22:39:56.974417 2026] [security2:error] [pid 30211:tid 30211] [client 2001:8d8:5ff:5f:82:165:86:143:40732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mailperform.com"] [uri "/.env"] [unique_id "arHqfIyXeooryzICVz2xEgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ParaBug
2025-08-15 08:22:02
(1 year ago)
2001:8d8:5ff:5f:82:165:86:143 - - [15/Aug/2025:10:22:01 +0200] "HEAD /files.zip HTTP/1.1" 301 181 "- ...
show more
2001:8d8:5ff:5f:82:165:86:143 - - [15/Aug/2025:10:22:01 +0200] "HEAD /files.zip HTTP/1.1" 301 181 "-" "-"
...
show less
Phishing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 11:09:12
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 07:09:07.650256 2025] [security2:error] [pid 8858:tid 8858] [client 2001:8d8:5ff:5f:82:165:86:143:55984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "backstore.com"] [uri "/wp-config.php.old"] [unique_id "aHorU88FJSgDaplH6YLIZQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-16 13:25:43
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 09:25:36.316178 2025] [security2:error] [pid 28568:tid 28591] [client 2001:8d8:5ff:5f:82:165:86:143:34540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saryagroup.pershia.net"] [uri "/wp-config.php1"] [unique_id "aHeoUMlkFbOlCOf_uD_H5QAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-14 07:32:48
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 03:32:44.379309 2025] [security2:error] [pid 7909:tid 7909] [client 2001:8d8:5ff:5f:82:165:86:143:57102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "genevainvestors.com"] [uri "/wp-config.php.orig"] [unique_id "aHSynELI63NZP9GQKeCTmAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-13 16:16:01
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 12:15:53.710522 2025] [security2:error] [pid 14602:tid 14602] [client 2001:8d8:5ff:5f:82:165:86:143:44548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.danzadance.org"] [uri "/wp-config.php.old"] [unique_id "aHPbuave6MWfnkTd97TPrAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-12 15:38:48
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 11:38:45.305622 2025] [security2:error] [pid 6087:tid 6087] [client 2001:8d8:5ff:5f:82:165:86:143:37336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arthouse-creative.com"] [uri "/wp-config.php1"] [unique_id "aHKBhXArhVBKxwFr2b9t-AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-12 09:37:46
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 05:37:38.247519 2025] [security2:error] [pid 6247:tid 6247] [client 2001:8d8:5ff:5f:82:165:86:143:54650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jimsvet.com"] [uri "/wp-config.php.old"] [unique_id "aHIs4tb2C7zhzd3lAlT0jAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-12 15:26:20
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:86:143 (infongq-eu66.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 12 11:26:14.253945 2025] [security2:error] [pid 43050:tid 43050] [client 2001:8d8:5ff:5f:82:165:86:143:38958] [client 2001:8d8:5ff:5f:82:165:86:143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "susanleeward.com"] [uri "/wp-config.php.backup"] [unique_id "aCITFjcIYbH6Cx2fSVqPtwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
