🇺🇸
TPI-Abuse
2025-04-23 08:29:04
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9. ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 23 04:28:57.239632 2025] [security2:error] [pid 8998:tid 8998] [client 2607:f1c0:5ff:5f:216:250:113:147:59422] [client 2607:f1c0:5ff:5f:216:250:113:147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beckersystems.com"] [uri "/wp-config.php.backup"] [unique_id "aAikyQaAbuo_WLBRCV2gSgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-23 01:45:24
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9. ...
show more
(mod_security) mod_security (id:210730) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 21:45:19.393096 2025] [security2:error] [pid 24375:tid 24375] [client 2607:f1c0:5ff:5f:216:250:113:147:49142] [client 2607:f1c0:5ff:5f:216:250:113:147] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||wildlifetaxidermy.com|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wildlifetaxidermy.com"] [uri "/wp-config.backup"] [unique_id "aAhGL0WBCC2Lm1MGY6ArAAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-22 19:07:01
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9. ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 15:06:57.222713 2025] [security2:error] [pid 4048252:tid 4048252] [client 2607:f1c0:5ff:5f:216:250:113:147:56556] [client 2607:f1c0:5ff:5f:216:250:113:147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powerkiteforum.com"] [uri "/wp-config.old"] [unique_id "aAfo0UJJew-K3UMYBjZ0PAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-21 12:25:42
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9. ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 21 08:25:36.243941 2025] [security2:error] [pid 31254:tid 31310] [client 2607:f1c0:5ff:5f:216:250:113:147:57280] [client 2607:f1c0:5ff:5f:216:250:113:147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "landmarkocchealth.com"] [uri "/wp-config.php.old"] [unique_id "aAY5QPkbvaSKDbftTuM6TwAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-21 12:00:18
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9. ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 21 08:00:12.054854 2025] [security2:error] [pid 20975:tid 20975] [client 2607:f1c0:5ff:5f:216:250:113:147:45452] [client 2607:f1c0:5ff:5f:216:250:113:147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aifstudio.com"] [uri "/wp-config.old"] [unique_id "aAYzTOkclan7ztyPhEVC-gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-20 11:45:58
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9. ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 20 07:45:53.864197 2025] [security2:error] [pid 23806:tid 23806] [client 2607:f1c0:5ff:5f:216:250:113:147:38452] [client 2607:f1c0:5ff:5f:216:250:113:147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibiocat.com"] [uri "/wp-config.php.bak"] [unique_id "aATecUZTmSscDuAZfj8j0wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-20 11:06:10
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9. ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 20 07:06:07.928707 2025] [security2:error] [pid 10883:tid 10883] [client 2607:f1c0:5ff:5f:216:250:113:147:38820] [client 2607:f1c0:5ff:5f:216:250:113:147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zodiacgate.com"] [uri "/wp-config.php.bak"] [unique_id "aATVH_uHcc1fLYNQyU_yDgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-20 02:26:40
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9. ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 19 22:26:32.309768 2025] [security2:error] [pid 2250006:tid 2250006] [client 2607:f1c0:5ff:5f:216:250:113:147:58630] [client 2607:f1c0:5ff:5f:216:250:113:147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aholsniffsglue.com"] [uri "/wp-config.php.bak"] [unique_id "aARbWH2y9Wmn0HpiHL-Y7gAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-19 12:05:41
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9. ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 19 08:05:35.468275 2025] [security2:error] [pid 12366:tid 12372] [client 2607:f1c0:5ff:5f:216:250:113:147:46140] [client 2607:f1c0:5ff:5f:216:250:113:147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stoborough.com"] [uri "/wp-config.php.bak"] [unique_id "aAORj08039w0LiX9QTHTvQAAAMQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-18 13:03:29
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9. ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 18 09:03:21.807218 2025] [security2:error] [pid 3817965:tid 3817965] [client 2607:f1c0:5ff:5f:216:250:113:147:57246] [client 2607:f1c0:5ff:5f:216:250:113:147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unfinishedepic.com"] [uri "/wp-config.php.bak"] [unique_id "aAJNmbHEtb07audjAxB1TQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-18 04:13:09
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9. ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:216:250:113:147 (infongslxa-9.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 18 00:13:03.277551 2025] [security2:error] [pid 10860:tid 10860] [client 2607:f1c0:5ff:5f:216:250:113:147:37986] [client 2607:f1c0:5ff:5f:216:250:113:147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hughhart.com"] [uri "/wp-config.php.bk"] [unique_id "aAHRT2yyBcIFd6z56TpZrQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack