🇩🇪
conseilgouz
2026-09-25 06:34:50
(2 weeks ago)
lae-17 : Block hidden directories=>/.env(/)
Hacking
🇺🇸
TPI-Abuse
2026-09-25 05:45:38
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 01:45:35.405946 2026] [security2:error] [pid 24376:tid 24376] [client 2607:f1c0:5ff:5f:74:208:56:180:47902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "televisonic.com"] [uri "/.env"] [unique_id "arYKf-9S804nvsZNuR27bQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 23:46:16
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 19:46:12.618815 2026] [security2:error] [pid 1615:tid 1615] [client 2607:f1c0:5ff:5f:74:208:56:180:34396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gracebaptisthartsville.com"] [uri "/wp-config.php.bak"] [unique_id "arMTRM9awHx_BF-by6FOIQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 23:15:51
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 19:15:44.772674 2026] [security2:error] [pid 1471103:tid 1471103] [client 2607:f1c0:5ff:5f:74:208:56:180:59506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mdivietnam.com"] [uri "/wp-config.php.bak"] [unique_id "arMMIEH0GVTf1_iHx3dpJAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:16:48
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:16:40.896808 2026] [security2:error] [pid 10843:tid 10843] [client 2607:f1c0:5ff:5f:74:208:56:180:34384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marydeal.com"] [uri "/wp-config.php.bak"] [unique_id "arLiKBh-JXwIaazn0RbXeAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:15:54
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:15:49.575868 2026] [security2:error] [pid 14289:tid 14339] [client 2607:f1c0:5ff:5f:74:208:56:180:41202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lawyerlouisiana.com"] [uri "/wp-config.php.bak"] [unique_id "arLT5Sfb_q-L5erfWJ_KigAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 17:50:11
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:50:05.066421 2026] [security2:error] [pid 15483:tid 15483] [client 2607:f1c0:5ff:5f:74:208:56:180:60040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robcohn.com"] [uri "/wp-config.php.bak"] [unique_id "arK_zbqidt1KnC57O2x-bwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 17:21:36
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:21:29.575831 2026] [security2:error] [pid 2286:tid 2286] [client 2607:f1c0:5ff:5f:74:208:56:180:45422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "misfitranch.com"] [uri "/wp-config.php.bak"] [unique_id "arK5Gd0_k1a6l3KGamsHPAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:41:10
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:41:04.345484 2026] [security2:error] [pid 4610:tid 4610] [client 2607:f1c0:5ff:5f:74:208:56:180:50452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "precjoza.com"] [uri "/wp-config.php.bak"] [unique_id "arKvoF_HVoKjynmxlCvf4gAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:51:13
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:51:10.013364 2026] [security2:error] [pid 28104:tid 28104] [client 2607:f1c0:5ff:5f:74:208:56:180:59566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "athome360.com"] [uri "/wp-config.php.bak"] [unique_id "arKV3mCSRvaLZbXiSFrZjQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:15:56
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:15:48.946393 2026] [security2:error] [pid 13548:tid 13548] [client 2607:f1c0:5ff:5f:74:208:56:180:54252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "streamlinenz.com"] [uri "/wp-config.php.bak"] [unique_id "arKNlFGfyc321o6Qsn4mIwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:14:04
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:13:54.794141 2026] [security2:error] [pid 8953:tid 8953] [client 2607:f1c0:5ff:5f:74:208:56:180:35658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "okwellbeing.com"] [uri "/wp-config.php.bak"] [unique_id "arJ_EnLSFaf_3V3-DNwwVwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-22 11:38:44
(2 weeks ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2607:f1c0:5ff:5f:74:208:56:180 - - [22/Sep/2026:13:38:38 +0200] "GET /wp-config.php.bak HTTP/2.0" 404 401 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 10:36:00
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 06:35:54.645496 2026] [security2:error] [pid 13718:tid 13795] [client 2607:f1c0:5ff:5f:74:208:56:180:55196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eastcentralalgas.com"] [uri "/wp-config.php.bak"] [unique_id "arJaCk4l_-HKySCvTYYJDgAAAgg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 08:46:25
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:180 (infong458.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 04:46:21.240066 2026] [security2:error] [pid 29095:tid 29095] [client 2607:f1c0:5ff:5f:74:208:56:180:47910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.urlpick.com"] [uri "/reusableconstructionmaterials.html/wp-config.php.bak"] [unique_id "arJAXYsm2tD1pFJkv19iMAAAAIk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
