🇮🇹
VHosting
2025-07-19 23:35:53
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 00:11:35
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 20:11:31.278945 2025] [security2:error] [pid 21710:tid 21710] [client 207.246.240.124:46654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goldengatecorgis.org"] [uri "/wp-config.php.old"] [unique_id "aHmRMz2b3uxcC4YhoPdFowAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2025-06-08 21:01:50
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
FeG Deutschland
2025-06-02 22:59:16
(1 year ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-05-11 23:52:16
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 11 19:52:11.788393 2025] [security2:error] [pid 2849733:tid 2849733] [client 207.246.240.124:60866] [client 207.246.240.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "contrarianadvisors.com"] [uri "/wp-config.php.save"] [unique_id "aCE4KzmEOZJDXE9X3YCevAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-10 00:01:21
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 09 20:01:15.273896 2025] [security2:error] [pid 1847138:tid 1847138] [client 207.246.240.124:42190] [client 207.246.240.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artandthebible.com"] [uri "/wp-config.php~"] [unique_id "aB6XS0JvvsQs_j7sSyGMAAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-09 19:53:02
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 09 15:52:57.324284 2025] [security2:error] [pid 4190417:tid 4190417] [client 207.246.240.124:45610] [client 207.246.240.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joepaladino.com"] [uri "/wp-config.php.bak"] [unique_id "aB5dGTiML42wgF_FBrGaiwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-09 03:24:33
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 08 23:24:29.155907 2025] [security2:error] [pid 102718:tid 102718] [client 207.246.240.124:58232] [client 207.246.240.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rayeliotschwartz.com"] [uri "/wp-config.php.old"] [unique_id "aB11bZ3FsZX-Z51IIHNSzAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-08 22:14:44
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 08 18:14:41.336075 2025] [security2:error] [pid 3326060:tid 3326060] [client 207.246.240.124:34614] [client 207.246.240.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "inspiringindividualindustry.com"] [uri "/wp-config.php.bak"] [unique_id "aB0s0bHi1tXCFhghNrd1kgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-07 10:10:08
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 06:10:02.301609 2025] [security2:error] [pid 2228433:tid 2228433] [client 207.246.240.124:44100] [client 207.246.240.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cheynans.com"] [uri "/wp-config.php.bak"] [unique_id "aBsxerl8cVo6ppkTyQDaoQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-06 23:23:49
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 19:23:43.497104 2025] [security2:error] [pid 1862700:tid 1862728] [client 207.246.240.124:47930] [client 207.246.240.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wheezer.org"] [uri "/wp-config.php.bk"] [unique_id "aBqZ_yml_e5Vkz58etFCFgAAARc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-05 17:40:54
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 05 13:40:48.493851 2025] [security2:error] [pid 653194:tid 653194] [client 207.246.240.124:57884] [client 207.246.240.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acpb.net"] [uri "/wp-config.php_bak"] [unique_id "aBj4IIP3hBrb_ZgiJqQUPAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-05 16:37:16
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 05 12:37:10.877678 2025] [security2:error] [pid 3458107:tid 3458107] [client 207.246.240.124:50532] [client 207.246.240.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mitnikarch.com"] [uri "/wp-config.php-bak"] [unique_id "aBjpNk2lP81tdXZ8GPxcSgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-03 06:25:07
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 03 02:25:00.173826 2025] [security2:error] [pid 764781:tid 764781] [client 207.246.240.124:52738] [client 207.246.240.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "endriss.info"] [uri "/wp-config.php.etc"] [unique_id "aBW2vPunldZLmc2TztdFzQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-01 12:45:27
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.124 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 01 08:45:23.542154 2025] [security2:error] [pid 513225:tid 513225] [client 207.246.240.124:57334] [client 207.246.240.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goodacoustic.com"] [uri "/wp-config.php~"] [unique_id "aBNs4_xq2kpfQlT-mmF8zAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack