2025-10-04 11:14:54
(9 months ago)
WordPress Brute Force
Brute-Force
🇺🇸
TPI-Abuse
2025-07-12 09:54:50
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 05:54:42.669618 2025] [security2:error] [pid 9237:tid 9237] [client 207.246.240.125:43736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssl-grp.com"] [uri "/wp-config.php1"] [unique_id "aHIw4vzPs_xZKnYiDNZgWQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-11 22:02:42
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 18:02:36.796217 2025] [security2:error] [pid 347:tid 347] [client 207.246.240.125:52816] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pr-professional.com"] [uri "/wp-config.php1"] [unique_id "aHGJ_G0kkDo18breiOta8gAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-10 19:30:47
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 10 15:30:42.159713 2025] [security2:error] [pid 21460:tid 21460] [client 207.246.240.125:48066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "callalbany.com"] [uri "/wp-config.php.old"] [unique_id "aHAU4nn-1O7ET-lrWyvSXQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-10 06:45:27
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 10 02:45:21.745160 2025] [security2:error] [pid 21774:tid 21774] [client 207.246.240.125:42142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jonrcortright.com"] [uri "/wp-config.php.old"] [unique_id "aG9hgW91ThBgpXOgXy4bEAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-11 19:30:11
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 11 15:30:03.146393 2025] [security2:error] [pid 3403330:tid 3403330] [client 207.246.240.125:39572] [client 207.246.240.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vincentbrown.me"] [uri "/wp-config.php.save"] [unique_id "aCD6uzO3TQEIuelQ15sI-wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-11 07:24:26
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 11 03:24:20.544342 2025] [security2:error] [pid 1400376:tid 1400376] [client 207.246.240.125:42398] [client 207.246.240.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blessedcarlo.com"] [uri "/wp-config.php~"] [unique_id "aCBQpO_atEYVk1C8pL0V2QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-09 14:50:34
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 09 10:50:27.712176 2025] [security2:error] [pid 1367490:tid 1367490] [client 207.246.240.125:54538] [client 207.246.240.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "familymailboxes.com"] [uri "/wp-config.php.bak"] [unique_id "aB4WM4FwZ1yHgv90LeaAAAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-06 18:23:55
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 14:23:51.402498 2025] [security2:error] [pid 2864661:tid 2864661] [client 207.246.240.125:53462] [client 207.246.240.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fashionmenswear.com"] [uri "/wp-config.php-save"] [unique_id "aBpTtya0zr2yOX5aabXAawAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-05 22:51:45
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 05 18:51:39.000000 2025] [security2:error] [pid 1935455:tid 1935455] [client 207.246.240.125:39896] [client 207.246.240.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "naplesdogcenter.com"] [uri "/wp-config.php_bak"] [unique_id "aBlA-mqkcEWEGkBQ0XXnMAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2025-05-03 04:07:11
(1 year ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2025-05-02 09:11:26
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 02 05:11:22.195780 2025] [security2:error] [pid 1808891:tid 1808891] [client 207.246.240.125:55898] [client 207.246.240.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danged.com"] [uri "/wp-config.php.org"] [unique_id "aBSMOrJLh9WWib0hLHyXaQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-27 05:01:24
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 01:01:17.289922 2025] [security2:error] [pid 20260:tid 20284] [client 207.246.240.125:52826] [client 207.246.240.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cibernetic.com"] [uri "/wp-config.php.orig"] [unique_id "aA26HfTL7MswTcV5NBQoFgAAAUg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-26 18:26:20
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 26 14:26:17.621009 2025] [security2:error] [pid 15098:tid 15121] [client 207.246.240.125:46418] [client 207.246.240.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trident-environmental.com"] [uri "/wp-config.bak"] [unique_id "aA0lSYmGNEoO3RuUsQYEKwAAANE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-23 02:10:19
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletra ...
show more
(mod_security) mod_security (id:210492) triggered by 207.246.240.125 (fw-snet-n01.wc2.phx1.stabletransit.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 22:10:11.236976 2025] [security2:error] [pid 1861289:tid 1861289] [client 207.246.240.125:34364] [client 207.246.240.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "limbertree.com"] [uri "/wp-config.php.backup"] [unique_id "aAhMAyYZvWU-E_ZAzr4p7gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack