🇺🇸
TPI-Abuse
2026-09-22 08:22:45
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 04:22:40.626028 2026] [security2:error] [pid 15355:tid 15355] [client 2607:f440::4227:6d09:50730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "morethanasignature.com"] [uri "/wp-config.php.bak"] [unique_id "arI60EfYHZieeBZX_ki42wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 04:47:34
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 00:47:28.714730 2026] [security2:error] [pid 6207:tid 6207] [client 2607:f440::4227:6d09:51807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robslasercreations.com"] [uri "/.env"] [unique_id "arIIYGI7LeXpJ9By0IgGvQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 02:11:17
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 22:11:09.263114 2026] [security2:error] [pid 32720:tid 32720] [client 2607:f440::4227:6d09:52061] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stpny.com"] [uri "/.env"] [unique_id "arHjvSyGpglNc-_X-bHQtQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-21 16:14:16
(19 hours ago)
This address requests our sites over plain http, is answered with a redirect to https, and never fol ...
show more
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: /seed.txt | 2026-09-21 16:14 UTC
show less
Bad Web Bot
🇫🇮
kumiko
2025-08-21 07:12:43
(1 year ago)
[2025-08-21 10:12:41] File probing [6 in a quick succession]
"HEAD /files.zip HTTP/1.1" 301
"HEAD ...
show more
[2025-08-21 10:12:41] File probing [6 in a quick succession]
"HEAD /files.zip HTTP/1.1" 301
"HEAD /files.zip HTTP/2.0" 301
"HEAD /files.zip HTTP/2.0" 403
"HEAD /docs.zip HTTP/2.0" 301
"HEAD /docs.zip HTTP/2.0" 403
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-19 09:32:21
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 05:32:16.039711 2025] [security2:error] [pid 10695:tid 10695] [client 2607:f440::4227:6d09:51186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "armrms.com"] [uri "/wp-config.php_old"] [unique_id "aHtmIK5MUHKW_kwSGivDCAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-19 06:35:34
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 02:35:27.364931 2025] [security2:error] [pid 14163:tid 14163] [client 2607:f440::4227:6d09:57420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bokharienterprises.com"] [uri "/wp-config.php_old"] [unique_id "aHs8r2woc193Toh978bm5gAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 22:25:28
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 18:25:25.196342 2025] [security2:error] [pid 27285:tid 27285] [client 2607:f440::4227:6d09:65315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saratogaequity.com"] [uri "/wp-config.php_orig"] [unique_id "aHrJ1dBLeGkbZMg1NM4aowAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 11:59:32
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 07:59:27.915696 2025] [security2:error] [pid 23637:tid 23647] [client 2607:f440::4227:6d09:51521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ceresfund.com"] [uri "/wp-config.php.old"] [unique_id "aHo3H1bcEr7wlP70f1otRgAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-17 17:50:23
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 13:50:16.183936 2025] [security2:error] [pid 10805:tid 10805] [client 2607:f440::4227:6d09:55496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clearlakelots.com"] [uri "/wp-config.php.old"] [unique_id "aHk32JdnKZA0lReu51lOzgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2025-07-17 16:01:04
(1 year ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇩🇪
LRob
2025-07-17 15:45:20
(1 year ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
🇺🇸
TPI-Abuse
2025-07-17 08:04:33
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 04:04:28.750611 2025] [security2:error] [pid 674:tid 674] [client 2607:f440::4227:6d09:62486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "infinityartistsgroup.com"] [uri "/wp-config.php1"] [unique_id "aHiujNJbIueUkBAUwBcktAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-17 05:56:48
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 01:56:41.513328 2025] [security2:error] [pid 18322:tid 18322] [client 2607:f440::4227:6d09:57936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gonzalez.com"] [uri "/wp-config.php1"] [unique_id "aHiQme8gEQSkMTqhgl6qjQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-17 04:30:02
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2607:f440::4227:6d09 (www4.g12.pair.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 00:29:58.690594 2025] [security2:error] [pid 9759:tid 9759] [client 2607:f440::4227:6d09:51710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eastbrooktech.com"] [uri "/wp-config.php1"] [unique_id "aHh8RvUhbqXXZKg3x2mMmAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
