🇺🇸
TPI-Abuse
2026-09-22 23:49:46
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 19:49:42.268201 2026] [security2:error] [pid 29794:tid 29794] [client 2607:f1c0:5ff:5f:74:208:57:250:38024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "integrabroadcast.com"] [uri "/wp-config.php.bak"] [unique_id "arMUFp_8vp1WUea8WtW0jgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 21:45:44
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 17:45:38.346289 2026] [security2:error] [pid 9495:tid 9495] [client 2607:f1c0:5ff:5f:74:208:57:250:55098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bvnboysbasketball.com"] [uri "/wp-config.php.bak"] [unique_id "arL3Api8s-bzCVg35nkWpQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
yitzhaq
2026-09-22 21:41:18
(1 week ago)
2607:f1c0:5ff:5f:74:208:57:250 - - [22/Sep/2026:23:41:16 +0200] "GET /wp-config.php.bak HTTP/1.1" 30 ...
show more
2607:f1c0:5ff:5f:74:208:57:250 - - [22/Sep/2026:23:41:16 +0200] "GET /wp-config.php.bak HTTP/1.1" 301 552 "-" "-"
2607:f1c0:5ff:5f:74:208:57:250 - - [22/Sep/2026:23:41:16 +0200] "GET /wp-config.php.bak HTTP/2.0" 404 364 "-" "-"
show less
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-09-22 21:01:32
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 17:01:28.211805 2026] [security2:error] [pid 22533:tid 22533] [client 2607:f1c0:5ff:5f:74:208:57:250:39362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rookscpa.com"] [uri "/wp-config.php.bak"] [unique_id "arLsqJfAB8FbHpe1pHDMUwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:20:04
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:19:55.116459 2026] [security2:error] [pid 16534:tid 16742] [client 2607:f1c0:5ff:5f:74:208:57:250:58858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rawsynergy.com"] [uri "/soundtherapy/wp-config.php.bak"] [unique_id "arLi604D9BfKmCVpJATcSAAAAk8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:59:51
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:59:45.778872 2026] [security2:error] [pid 23063:tid 23063] [client 2607:f1c0:5ff:5f:74:208:57:250:56086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "natursac.com"] [uri "/wp-config.php.bak"] [unique_id "arLeMRlprLApFbSf3w-YKAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:07:23
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:07:16.453747 2026] [security2:error] [pid 28569:tid 28574] [client 2607:f1c0:5ff:5f:74:208:57:250:53060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proracersecrets.com"] [uri "/wp-config.php.bak"] [unique_id "arLR5J68ubmIqLgR_mKcHAAAAUM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 15:41:20
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:41:16.826084 2026] [security2:error] [pid 21147:tid 21147] [client 2607:f1c0:5ff:5f:74:208:57:250:41396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/wp-config.php.bak"] [unique_id "arKhnCwoKYgfzMQeqdqCPgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:30:16
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:30:13.166292 2026] [security2:error] [pid 16904:tid 16904] [client 2607:f1c0:5ff:5f:74:208:57:250:51352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cartiologyfilms.com"] [uri "/wp-config.php.bak"] [unique_id "arKQ9ZIM6Z7oSkcGeaWKBwAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:01:30
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:01:26.874367 2026] [security2:error] [pid 3309:tid 3309] [client 2607:f1c0:5ff:5f:74:208:57:250:46402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caretakerspestcontrol.com"] [uri "/wp-config.php.bak"] [unique_id "arKKNkIwRzIy5levAC8cAwAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:44:41
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:44:35.476313 2026] [security2:error] [pid 30095:tid 30095] [client 2607:f1c0:5ff:5f:74:208:57:250:44550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "networkmediasoftware.com"] [uri "/wp-config.php.bak"] [unique_id "arKGQ20shWV_n74149lxyAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 12:25:23
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:25:17.692058 2026] [security2:error] [pid 12350:tid 12350] [client 2607:f1c0:5ff:5f:74:208:57:250:36018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calvaryadminservices.com"] [uri "/wp-config.php.bak"] [unique_id "arJzrcBLdkQrKI18W7_FggAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 11:46:18
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.per ...
show more
(mod_security) mod_security (id:949110) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:46:13.632912 2026] [security2:error] [pid 1795:tid 1795] [client 2607:f1c0:5ff:5f:74:208:57:250:37500] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "toxicnation.com"] [uri "/wp-config.php.bak"] [unique_id "arJqhVbVmJ3w5NcB4iVrLgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 02:34:11
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 22:34:06.735969 2026] [security2:error] [pid 16333:tid 16333] [client 2607:f1c0:5ff:5f:74:208:57:250:55822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elenacampo.com"] [uri "/.env"] [unique_id "arHpHux2PRTWr77HS8TnQgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 01:55:52
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:57:250 (infongp-us8.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 21:55:47.180417 2026] [security2:error] [pid 17712:tid 17712] [client 2607:f1c0:5ff:5f:74:208:57:250:36410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weddingfavorcandles.com"] [uri "/.env"] [unique_id "arHgI6gWkENOzJHknyDVRQAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
