🇺🇸
TPI-Abuse
2026-09-06 06:56:29
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 02:56:21.103725 2026] [security2:error] [pid 26067:tid 26067] [client 2a00:1128:0:155::60:35376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pcga.golf"] [uri "/wp-config.php.bak"] [unique_id "ap0OlXsoqnMgY65dA6hgbAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 05:34:42
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 01:34:29.103905 2026] [security2:error] [pid 26080:tid 26080] [client 2a00:1128:0:155::60:9926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kbalan.com"] [uri "/wp-config.php.bak"] [unique_id "apz7ZcK4aKFzPUf1yjigzgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 05:11:00
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 01:10:56.940690 2026] [security2:error] [pid 19267:tid 19267] [client 2a00:1128:0:155::60:28876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webersource.com"] [uri "/wp-config.php.bak"] [unique_id "apz14GqM1yCWYha6Pn1TZAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-09-06 04:51:19
(3 hours ago)
[SunSep0606:51:16.1889032026][security2:error][pid2471881:tid2471954][client2a00:1128:0:155::60:0]Mo ...
show more
[SunSep0606:51:16.1889032026][security2:error][pid2471881:tid2471954][client2a00:1128:0:155::60:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"risparmiocasasuisse.ch\"][uri\"/wp-config.php.bak\"][unique_id\"apzxRNrerqDXSM46Yiz41gAAAM0\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 04:21:03
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 00:20:58.254437 2026] [security2:error] [pid 19997:tid 19997] [client 2a00:1128:0:155::60:47722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jonleefamily.brushmileage.org"] [uri "/wp-config.php.bak"] [unique_id "apzqKp5Y4hP8e6ZbA5cfcQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-06 02:22:08
(6 hours ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-09-06 02:15:21
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:15:12.378763 2026] [security2:error] [pid 22055:tid 22055] [client 2a00:1128:0:155::60:14268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "splashstation.org"] [uri "/wp-config.php.bak"] [unique_id "apzMsK4CTw3BxWCdIRmgOgAAADc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:08:12
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:08:08.327006 2026] [security2:error] [pid 32195:tid 32195] [client 2a00:1128:0:155::60:23344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newhopepetgrooming.leonardodecaprio.com"] [uri "/wp-config.php.bak"] [unique_id "apy8-JLQHq006ZSQ2zDXgwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 00:11:04
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 20:10:58.561187 2026] [security2:error] [pid 27231:tid 27231] [client 2a00:1128:0:155::60:1462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ucommsi.com"] [uri "/wp-config.php.bak"] [unique_id "apyvkuUDdlg6XWRlhUIw1wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-05 22:59:20
(9 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-05 22:48:19
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:48:14.504034 2026] [security2:error] [pid 15999:tid 15999] [client 2a00:1128:0:155::60:61870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fractalsky.com"] [uri "/wp-config.php.bak"] [unique_id "apycLkVWrjT9UoiMKE-6TQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-05 22:39:13
(10 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-05 22:33:11
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a00:1128:0:155::60 (torn.sui-inter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:33:06.413529 2026] [security2:error] [pid 3367639:tid 3367639] [client 2a00:1128:0:155::60:27798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dynamic-therapy-mn.com"] [uri "/wp-config.php~"] [unique_id "apyYoofXWGVCTt4_HKCgWQAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-05 21:55:38
(10 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇵🇱
strefapi_com
2026-09-05 20:18:02
(12 hours ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack