🇺🇸
TPI-Abuse
2026-09-25 05:26:15
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 01:26:08.717814 2026] [security2:error] [pid 1704:tid 1704] [client 2607:f1c0:5ff:5f:74:208:56:152:35502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mycherishedteddies.com"] [uri "/.env"] [unique_id "arYF8ELKMda10sFcLMiCmwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 23:14:54
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 19:14:48.755290 2026] [security2:error] [pid 9720:tid 9720] [client 2607:f1c0:5ff:5f:74:208:56:152:50602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hogprinter.com"] [uri "/wp-config.php.bak"] [unique_id "arML6D_weM1FwOaaGiaNIAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-22 22:43:18
(5 days ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2607:f1c0:5ff:5f:74:208:56:152 - - [23/Sep/2026:00:43:17 +0200] "GET /wp-config.php.bak HTTP/2.0" 404 39186 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 18:01:44
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 14:01:40.420316 2026] [security2:error] [pid 29649:tid 29729] [client 2607:f1c0:5ff:5f:74:208:56:152:56420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dulemba.com"] [uri "/index_ColoringPages.html/wp-config.php.bak"] [unique_id "arLChDF92H0yjAQ_UaBjAAAAAIk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 17:17:34
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:17:28.084690 2026] [security2:error] [pid 14460:tid 14460] [client 2607:f1c0:5ff:5f:74:208:56:152:41978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jvcsat.com"] [uri "/wp-config.php.bak"] [unique_id "arK4KDh-_XPnmiH8L8LivQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:50:22
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:50:15.330160 2026] [security2:error] [pid 17643:tid 17643] [client 2607:f1c0:5ff:5f:74:208:56:152:54236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zenmonkeyproject.com"] [uri "/wp-config.php.bak"] [unique_id "arKxx2kJUiZRxRCYtBh4LAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:25:07
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:25:03.561501 2026] [security2:error] [pid 11033:tid 11033] [client 2607:f1c0:5ff:5f:74:208:56:152:40086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "red-jacket.com"] [uri "/wp-config.php.bak"] [unique_id "arKr307QjefrF4EYKtjzYwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 15:52:17
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:52:12.473520 2026] [security2:error] [pid 15810:tid 15906] [client 2607:f1c0:5ff:5f:74:208:56:152:49640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "munatseng.org"] [uri "/wp-config.php.bak"] [unique_id "arKkLKpUkXecfSOgmguFcQAAAdM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:08:42
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:08:38.868033 2026] [security2:error] [pid 15959:tid 15959] [client 2607:f1c0:5ff:5f:74:208:56:152:46952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yakarinc.com"] [uri "/wp-config.php.bak"] [unique_id "arKL5m1TZEyZlRsWLj42dgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 12:45:26
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:45:21.696671 2026] [security2:error] [pid 26145:tid 26145] [client 2607:f1c0:5ff:5f:74:208:56:152:40432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "winnindustries.com"] [uri "/wp-config.php.bak"] [unique_id "arJ4YUVQ8qXMRqAwb7aa2wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 11:02:47
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:02:42.166831 2026] [security2:error] [pid 22271:tid 22271] [client 2607:f1c0:5ff:5f:74:208:56:152:59516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "runnercomics.com"] [uri "/wp-config.php.bak"] [unique_id "arJgUpmH1cffgkRl3joJlwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 04:37:30
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 00:37:22.794297 2026] [security2:error] [pid 24022:tid 24022] [client 2607:f1c0:5ff:5f:74:208:56:152:55492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amychop.com"] [uri "/.env"] [unique_id "arIGAqGMLPalfxu-10OlXAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 03:48:37
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 23:48:31.847628 2026] [security2:error] [pid 16851:tid 16851] [client 2607:f1c0:5ff:5f:74:208:56:152:57682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mayiasteadman.com"] [uri "/.env"] [unique_id "arH6j-U94vS3K2C4P5SMFQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-20 04:29:32
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:152 (infong950.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 20 00:29:27.689132 2025] [security2:error] [pid 24268:tid 24268] [client 2607:f1c0:5ff:5f:74:208:56:152:35058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sherinemec-wies.com"] [uri "/wp-config.php_orig"] [unique_id "aHxwp6VL6rsHt2PIz5DtwgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-07-19 16:30:59
(1 year ago)
Failed login attempt detected by Fail2Ban in recidive jail
Brute-Force
