🇺🇸
TPI-Abuse
2026-09-22 22:44:31
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.a ...
show more
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 18:44:25.121366 2026] [security2:error] [pid 14652:tid 14669] [client 31.11.36.237:37878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cargomarexpress.com"] [uri "/wp-config.php.bak"] [unique_id "arMEye_5WURTl7jYcwVyTwAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
tecnicorioja
2026-09-22 22:01:29
(1 day ago)
(Mod_security)
Web App Attack
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-22 21:07:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.a ...
show more
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 17:07:11.297260 2026] [security2:error] [pid 18481:tid 18481] [client 31.11.36.237:22160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackandwright.com"] [uri "/wp-config.php.bak"] [unique_id "arLt_x6va3MRpYes85dXPAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:00:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.a ...
show more
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:00:20.463594 2026] [security2:error] [pid 2314:tid 2383] [client 31.11.36.237:33996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leaderoftheopposition.com"] [uri "/wp-config.php.bak"] [unique_id "arLQRI23dvfgmqizhPV7ogAAAMs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 17:46:03
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.a ...
show more
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:45:58.246871 2026] [security2:error] [pid 27514:tid 27514] [client 31.11.36.237:31622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eckerberg.net"] [uri "/wp-config.php.bak"] [unique_id "arK-1lPK64n3mVz16eB5UAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
SkyDancer
2026-09-22 17:38:47
(1 day ago)
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ...
show more
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-09-22 16:18:57
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.a ...
show more
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:18:54.464145 2026] [security2:error] [pid 6468:tid 6468] [client 31.11.36.237:43572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnmorogiello.com"] [uri "/wp-config.php.bak"] [unique_id "arKqbkBJ607QJXfmEsEIIwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 15:53:33
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.a ...
show more
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:53:29.361517 2026] [security2:error] [pid 7394:tid 7394] [client 31.11.36.237:37586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "geckoturner.com"] [uri "/wp-config.php.bak"] [unique_id "arKkeRwFgvgPXzp9ARU12gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 15:30:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.a ...
show more
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:29:59.806844 2026] [security2:error] [pid 6181:tid 6181] [client 31.11.36.237:35072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tristarus.com"] [uri "/wp-config.php.bak"] [unique_id "arKe96YHQ12n_XlqLIX0swAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:10:18
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.a ...
show more
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:10:15.242571 2026] [security2:error] [pid 29873:tid 29873] [client 31.11.36.237:39496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pecholobo.com"] [uri "/wp-config.php.bak"] [unique_id "arKMR07H6x9p6_qdAkMs4wAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 12:53:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.a ...
show more
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:53:24.748187 2026] [security2:error] [pid 28949:tid 28949] [client 31.11.36.237:23986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "phoboschildren.com"] [uri "/wp-config.php.bak"] [unique_id "arJ6RM1qayMmk575d4JxuwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 12:23:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.a ...
show more
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:23:15.854212 2026] [security2:error] [pid 24393:tid 24393] [client 31.11.36.237:20050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skulldump.com"] [uri "/wp-config.php.bak"] [unique_id "arJzMzNaGq_K8zAok2IpQAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 12:07:18
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.a ...
show more
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:07:12.755720 2026] [security2:error] [pid 17228:tid 17228] [client 31.11.36.237:41834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jonathanfriend.com"] [uri "/wp-config.php.bak"] [unique_id "arJvcFzJSzXFNTcsNIsZjgAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 08:58:38
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.a ...
show more
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 04:58:34.726212 2026] [security2:error] [pid 13719:tid 13841] [client 31.11.36.237:37220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ozworkshop.com"] [uri "/wp-config.php.bak"] [unique_id "arJDOicExj3DI8hY61HEAgAAAlM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 08:25:13
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.a ...
show more
(mod_security) mod_security (id:210492) triggered by 31.11.36.237 (host237-36-11-31.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 04:25:05.308312 2026] [security2:error] [pid 16513:tid 16513] [client 31.11.36.237:23978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinnairdenterprisesllc.com"] [uri "/wp-config.php.bak"] [unique_id "arI7YYgsCJHABKEuKyDxvQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
