๐บ๐ธ
TPI-Abuse
2026-10-16 02:59:06
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:537:1000:2ea8:467d:6233:529c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:537:1000:2ea8:467d:6233:529c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 22:58:58.127929 2026] [security2:error] [pid 15568:tid 15568] [client 2400:cb00:537:1000:2ea8:467d:6233:529c:9630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rlarms.com"] [uri "/wp-config.php.bak"] [unique_id "atGS8nAfey55SSFlu-PN7gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 23:47:20
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:537:1000:2ea8:467d:6233:529c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:537:1000:2ea8:467d:6233:529c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 19:47:15.528355 2026] [security2:error] [pid 23679:tid 23679] [client 2400:cb00:537:1000:2ea8:467d:6233:529c:14221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "panama-boat-registration.com"] [uri "/wp-config.php.old"] [unique_id "atFmA5rcD-6OY6c2DgfNzQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 13:01:04
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:537:1000:2ea8:467d:6233:529c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:537:1000:2ea8:467d:6233:529c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:01:00.236997 2026] [security2:error] [pid 7715:tid 7715] [client 2400:cb00:537:1000:2ea8:467d:6233:529c:14090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bccoa.net"] [uri "/wp-config.php"] [unique_id "atDOjA1seneDvt7n5bXf_gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-29 15:03:10
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:537:1000:2ea8:467d:6233:529c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:537:1000:2ea8:467d:6233:529c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 11:03:03.585463 2026] [security2:error] [pid 13184:tid 13226] [client 2400:cb00:537:1000:2ea8:467d:6233:529c:10206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.heworeblack.com"] [uri "/.git/config"] [unique_id "apL0p5BFJFmExQZvJeCh6gAAAkg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 22:49:14
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:537:1000:2ea8:467d:6233:529c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:537:1000:2ea8:467d:6233:529c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 18:49:08.513767 2026] [security2:error] [pid 12344:tid 12344] [client 2400:cb00:537:1000:2ea8:467d:6233:529c:13127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.20dekopas.com"] [uri "/.git/config"] [unique_id "apC-5EX83CXwKR1gqzO74wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 14:29:58
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:537:1000:2ea8:467d:6233:529c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:537:1000:2ea8:467d:6233:529c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 10:29:51.905562 2026] [security2:error] [pid 19258:tid 19258] [client 2400:cb00:537:1000:2ea8:467d:6233:529c:10537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.uwsdiving.com"] [uri "/.git/config"] [unique_id "ao2m3xbJt6abTrsyYZtSQwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-08-23 22:03:43
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-22.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-08-18 11:59:46
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:537:1000:2ea8:467d:6233:529c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:537:1000:2ea8:467d:6233:529c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 07:59:39.168683 2026] [security2:error] [pid 21796:tid 21814] [client 2400:cb00:537:1000:2ea8:467d:6233:529c:12059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.condominium-property-management.com"] [uri "/.git/HEAD"] [unique_id "aoRJK6JkpZQ68ps8p2VSPAAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฏ๐ต
S.O.B.A. Dev.
2024-11-16 03:00:36
(1 year ago)
Persistent port scanning or vulnerability scanning
Port Scan