🇺🇸
TPI-Abuse
2026-09-22 21:45:10
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 17:45:04.567151 2026] [security2:error] [pid 16540:tid 16767] [client 2607:f1c0:5ff:5f:74:208:56:232:58312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bluetigertees.com"] [uri "/wp-config.php.bak"] [unique_id "arL24D36R1s4A4SP4YidugAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 21:09:31
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 17:09:23.718190 2026] [security2:error] [pid 8107:tid 8107] [client 2607:f1c0:5ff:5f:74:208:56:232:54052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "comparevision.com"] [uri "/wp-config.php.bak"] [unique_id "arLug0GN9mS0kzgXKdzCgwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:30:03
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:29:54.855587 2026] [security2:error] [pid 20085:tid 20085] [client 2607:f1c0:5ff:5f:74:208:56:232:51964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rimworld.com"] [uri "/notra//wp-config.php.bak"] [unique_id "arLlQkRoTCPQOV6Mg4j-AgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-22 19:48:47
(3 hours ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2607:f1c0:5ff:5f:74:208:56:232 - - [22/Sep/2026:21:48:47 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 454 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:15:20
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:15:16.769847 2026] [security2:error] [pid 29595:tid 29595] [client 2607:f1c0:5ff:5f:74:208:56:232:42426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deubellzebub.com"] [uri "/wp-config.php.bak"] [unique_id "arLTxOBARBkU_lwrP8PsuQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 17:21:44
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:21:37.430765 2026] [security2:error] [pid 21246:tid 21246] [client 2607:f1c0:5ff:5f:74:208:56:232:60710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "limeroc.com"] [uri "/wp-config.php.bak"] [unique_id "arK5IbZIvQgKbRqc0z_zkgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:21:46
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:21:41.275216 2026] [security2:error] [pid 21471:tid 21471] [client 2607:f1c0:5ff:5f:74:208:56:232:37822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accommodation-perthairport.com"] [uri "/wp-config.php.bak"] [unique_id "arKrFa6kAZZ4EHIRDBVmBQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 15:29:45
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:29:40.692671 2026] [security2:error] [pid 2092:tid 2092] [client 2607:f1c0:5ff:5f:74:208:56:232:53464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rhysryan.com"] [uri "/wp-config.php.bak"] [unique_id "arKe5IZTVuVhalPzUOlHrQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:50:59
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:50:54.995797 2026] [security2:error] [pid 19447:tid 19447] [client 2607:f1c0:5ff:5f:74:208:56:232:54874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "persnicketyinc.com"] [uri "/wp-config.php.bak"] [unique_id "arKHvo0ECo1YwJ_Xh76NswAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:14:15
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:14:10.919895 2026] [security2:error] [pid 13716:tid 13748] [client 2607:f1c0:5ff:5f:74:208:56:232:47626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "surdick.com"] [uri "/wp-config.php.bak"] [unique_id "arJ_IqJdpEbRpM-GHp8DZAAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 11:53:21
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:53:14.411867 2026] [security2:error] [pid 6395:tid 6395] [client 2607:f1c0:5ff:5f:74:208:56:232:44246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "basselier.com"] [uri "/wp-config.php.bak"] [unique_id "arJsKpWzqiaGJv0REKrXmAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 09:45:50
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:45:43.218212 2026] [security2:error] [pid 22776:tid 22776] [client 2607:f1c0:5ff:5f:74:208:56:232:41920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rayeliotschwartz.com"] [uri "/wp-config.php.bak"] [unique_id "arJOR75SIHsCW6eLnvoSWgAAADw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 04:11:13
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 00:11:07.960074 2026] [security2:error] [pid 23438:tid 23438] [client 2607:f1c0:5ff:5f:74:208:56:232:34762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "personalizedbabyshowernapkins.com"] [uri "/.env"] [unique_id "arH_22tGxQm_zLoyomuqBAAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 03:00:10
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 23:00:06.698795 2026] [security2:error] [pid 23587:tid 23587] [client 2607:f1c0:5ff:5f:74:208:56:232:60020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "footballxp.com"] [uri "/.env"] [unique_id "arHvNgFoadmRv_xmabJYtQAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 01:56:23
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfo ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:56:232 (infong845.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 21:56:19.461311 2026] [security2:error] [pid 30643:tid 30643] [client 2607:f1c0:5ff:5f:74:208:56:232:34978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pswebsite.com"] [uri "/.env"] [unique_id "arHgQ8FLInW1nhfSpMpCTwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
