🇺🇸
TPI-Abuse
2026-09-08 11:41:23
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserve ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 07:41:20.057541 2026] [security2:error] [pid 22533:tid 22533] [client 2a02:c207:2302:2286::1:52140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "odinathletes.com"] [uri "/wp-config.php.bak"] [unique_id "ap_0YDS1coN0OoerT2OneAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 08:08:38
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserve ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 04:08:35.647164 2026] [security2:error] [pid 5441:tid 5441] [client 2a02:c207:2302:2286::1:52046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magacine.tv"] [uri "/wp-config.php~"] [unique_id "ap_Cg-j0SDxUkQLVWuLA7wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-09-08 03:55:25
(10 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇫🇷
tecnoacquisti.com
2026-09-08 02:47:31
(11 hours ago)
PrestaShop Security Module: WordPress probe path detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 01:41:49
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserve ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 21:41:43.407743 2026] [security2:error] [pid 22912:tid 22912] [client 2a02:c207:2302:2286::1:40330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hierrosbernal.com"] [uri "/wp-config.php.bak"] [unique_id "ap9n12I_4PB9Spuwfj8rmAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-09-08 01:01:30
(13 hours ago)
Blocked by Conn-Monitor: env-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-07 21:17:35
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserve ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 17:17:26.351268 2026] [security2:error] [pid 3169:tid 3169] [client 2a02:c207:2302:2286::1:43948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pcga.golf"] [uri "/wp-config.php.bak"] [unique_id "ap8p5saLi6DV0kmoAmU0YgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 18:52:10
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserve ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 14:52:02.674741 2026] [security2:error] [pid 3428:tid 3428] [client 2a02:c207:2302:2286::1:43360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crittergetterpestcontrol.com"] [uri "/wp-config.php.bak"] [unique_id "ap8H0sYwGsvNJXud41S7AQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 18:03:11
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserve ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 14:03:03.333063 2026] [security2:error] [pid 15237:tid 15237] [client 2a02:c207:2302:2286::1:59494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.modalguitarist.com"] [uri "/wp-config.php.bak"] [unique_id "ap78VxY4Atur71bzKQu7bAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-07 18:00:05
(20 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-09-07 17:40:27
(20 hours ago)
151 requests with url.path */debug.log
151 requests with url.path *debug.log
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-07 17:29:06
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserve ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 13:28:59.889531 2026] [security2:error] [pid 12841:tid 12841] [client 2a02:c207:2302:2286::1:56028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "morninginc.com"] [uri "/wp-config.php.bak"] [unique_id "ap70W25NQ4-VNTU1O0L09QAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 15:29:54
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserve ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:c207:2302:2286::1 (vmi3022286.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 11:29:49.040585 2026] [security2:error] [pid 612047:tid 612073] [client 2a02:c207:2302:2286::1:56574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pwihatah.plumeraproductions.com"] [uri "/wp-config.php.bak"] [unique_id "ap7YbQTxzc63XGIzqudn1QAAAQU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
