🇺🇸
TPI-Abuse
2026-09-22 21:04:59
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 17:04:55.150247 2026] [security2:error] [pid 5699:tid 5699] [client 2607:f298:5:118a::5dc:aa6f:46800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "puckerbikini.com"] [uri "/wp-config.php.bak"] [unique_id "arLtd29ZPYjNdSDd0XcM3AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:47:03
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:46:58.454974 2026] [security2:error] [pid 28648:tid 28648] [client 2607:f298:5:118a::5dc:aa6f:46566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thunderbirdchimes.com"] [uri "/wp-config.php.bak"] [unique_id "arLbMl5MQMWOVaDoMGFrDAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:12:50
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:12:46.150112 2026] [security2:error] [pid 29598:tid 29598] [client 2607:f298:5:118a::5dc:aa6f:35600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hatsizes.com"] [uri "/wp-config.php.bak"] [unique_id "arLTLu41M8DtcGo0WmGm9gAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 18:18:34
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 14:18:26.832404 2026] [security2:error] [pid 1707:tid 1707] [client 2607:f298:5:118a::5dc:aa6f:38974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carolinafootprints.com"] [uri "/wp-config.php.bak"] [unique_id "arLGcoFV2a09AotcmVQimgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 17:49:37
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:49:34.203351 2026] [security2:error] [pid 16833:tid 16833] [client 2607:f298:5:118a::5dc:aa6f:39346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "geriking.com"] [uri "/wp-config.php.bak"] [unique_id "arK_rrcxxhd12ZexZFN4rQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:24:45
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:24:42.179135 2026] [security2:error] [pid 2304:tid 2304] [client 2607:f298:5:118a::5dc:aa6f:58484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "parkgrant.com"] [uri "/wp-config.php.bak"] [unique_id "arKrymDfz4i6RKdsCt1yFwAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 15:44:40
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:44:37.585236 2026] [security2:error] [pid 25908:tid 25908] [client 2607:f298:5:118a::5dc:aa6f:58802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "suedblick.com"] [uri "/wp-config.php.bak"] [unique_id "arKiZYeYmHF7FYA4EPVdNwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:45:46
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:45:38.611422 2026] [security2:error] [pid 28956:tid 28956] [client 2607:f298:5:118a::5dc:aa6f:60784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "willowriver3.com"] [uri "/wp-config.php.bak"] [unique_id "arKUkscgCc8cfmwBBI0gqAAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 12:13:23
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:13:16.937820 2026] [security2:error] [pid 5897:tid 5897] [client 2607:f298:5:118a::5dc:aa6f:45488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.animz.com"] [uri "/wp-config.php.bak"] [unique_id "arJw3BZj0DW6gEqWsG9IJQAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 11:37:52
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f298:5:118a::5dc:aa6f (nybergmedical.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:37:48.107467 2026] [security2:error] [pid 23234:tid 23234] [client 2607:f298:5:118a::5dc:aa6f:53130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edensgroup.com"] [uri "/wp-config.php.bak"] [unique_id "arJojN5X4UFPC4D2XMuILwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
