🇳🇱
homeshowdomain.nl
2026-09-26 22:01:00
(3 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-25.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-22 23:41:36
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 19:41:31.324139 2026] [security2:error] [pid 5280:tid 5280] [client 2607:f1c0:5ff:5f:74:208:59:69:33550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "happyjackmc.com"] [uri "/wp-config.php.bak"] [unique_id "arMSK9XjtnDWiR3ZBNegbwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:46:28
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:46:23.051196 2026] [security2:error] [pid 8334:tid 8334] [client 2607:f1c0:5ff:5f:74:208:59:69:51034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeanniemorrislaw.com"] [uri "/wp-config.php.bak"] [unique_id "arLpH1yKWWnDuJ6e9Gr1WwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:26:51
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:26:44.597577 2026] [security2:error] [pid 498:tid 498] [client 2607:f1c0:5ff:5f:74:208:59:69:55652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abbysue.com"] [uri "/wp-config.php.bak"] [unique_id "arLWdNxOyBLWk1KKdf5AyQAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 17:58:25
(3 weeks ago)
(mod_security) mod_security (id:949110) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.per ...
show more
(mod_security) mod_security (id:949110) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:58:16.851743 2026] [security2:error] [pid 10733:tid 10733] [client 2607:f1c0:5ff:5f:74:208:59:69:38416] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "maricotippett.com"] [uri "/wp-config.php.bak"] [unique_id "arLBuKh61v8LemNWID074QAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:34:56
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:34:50.471391 2026] [security2:error] [pid 17068:tid 17376] [client 2607:f1c0:5ff:5f:74:208:59:69:53306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aafm.us"] [uri "/certification.html/wp-config.php.bak"] [unique_id "arKuKvuecq6lxMmvzJOtZAAAAYA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:15:46
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:15:42.427607 2026] [security2:error] [pid 27386:tid 27386] [client 2607:f1c0:5ff:5f:74:208:59:69:44882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "campnecon.com"] [uri "/wp-config.php.bak"] [unique_id "arKprpvYt0FpNQwmCLafowAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:56:16
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:56:10.251177 2026] [security2:error] [pid 13628:tid 13628] [client 2607:f1c0:5ff:5f:74:208:59:69:44346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "huntingforebears.com"] [uri "/wp-config.php.bak"] [unique_id "arKXClGwgGrbnK9PU_HbUgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:20:06
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:19:59.120668 2026] [security2:error] [pid 14598:tid 14598] [client 2607:f1c0:5ff:5f:74:208:59:69:52630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daebakdesign.com"] [uri "/wp-config.php.bak"] [unique_id "arKOj-Fosto9HN9fkhZXvAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:57:58
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:57:53.369484 2026] [security2:error] [pid 1722:tid 1722] [client 2607:f1c0:5ff:5f:74:208:59:69:57076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "talkingmess.com"] [uri "/wp-config.php.bak"] [unique_id "arKJYfPACiJzMl1XKoJHaQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:42:50
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:42:42.704249 2026] [security2:error] [pid 13718:tid 13804] [client 2607:f1c0:5ff:5f:74:208:59:69:47622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sellarsmail.com"] [uri "/wp-config.php.bak"] [unique_id "arKF0k4l_-HKySCvTYY0EgAAAhE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 09:03:21
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:03:16.715209 2026] [security2:error] [pid 11473:tid 11473] [client 2607:f1c0:5ff:5f:74:208:59:69:42356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lubbockknights.com"] [uri "/wp-config.php.bak"] [unique_id "arJEVGkhz67GnJo6KPv_vwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 08:43:59
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 04:43:53.525169 2026] [security2:error] [pid 10945:tid 10945] [client 2607:f1c0:5ff:5f:74:208:59:69:46102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "consorciolegal.com"] [uri "/wp-config.php.bak"] [unique_id "arI_yTzcPD4bDj4TGQ3ooAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 03:26:03
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 23:25:56.284826 2026] [security2:error] [pid 23403:tid 23403] [client 2607:f1c0:5ff:5f:74:208:59:69:48342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "visage-nico.com"] [uri "/.env"] [unique_id "arH1RA2sPnPjPqtazhPhlwAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 01:59:10
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.per ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f1c0:5ff:5f:74:208:59:69 (infongp-us86.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 21:59:03.560685 2026] [security2:error] [pid 28416:tid 28416] [client 2607:f1c0:5ff:5f:74:208:59:69:51698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ridgecrestrealtors.com"] [uri "/.env"] [unique_id "arHg588u0rAlZZIDN0reiAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
