2026-09-15 00:28:53
(2 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 08:47:19
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.am ...
show more
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 04:47:12.470034 2026] [security2:error] [pid 26541:tid 26541] [client 44.223.241.188:64645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "csme-eprr.com"] [uri "/wp-config.php.old"] [unique_id "aqURkILjhm77DCuKhEiXHQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 16:34:29
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.am ...
show more
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 12:34:23.248536 2026] [security2:error] [pid 20034:tid 20034] [client 44.223.241.188:35094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hamiltoncountyuca.org"] [uri "/wp-config.php.save"] [unique_id "aqQtjz4MKet7I1ZTX0ai2wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 15:49:18
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.am ...
show more
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 11:49:12.172452 2026] [security2:error] [pid 21966:tid 21966] [client 44.223.241.188:20166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "novavistafoundation.org"] [uri "/.env"] [unique_id "aqQi-MNb_prj0fPCoD70NwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 05:09:17
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.am ...
show more
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 01:09:11.824299 2026] [security2:error] [pid 2954182:tid 2954182] [client 44.223.241.188:30953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.scswat.org"] [uri "/wp-config.php.bak.php"] [unique_id "ap-Ydw8P8zoy3W023WnoDQAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 04:52:17
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.am ...
show more
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 00:52:12.435912 2026] [security2:error] [pid 8186:tid 8186] [client 44.223.241.188:6584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mtshastaconcerts.com"] [uri "/wp-config.php.backup"] [unique_id "ap-UfIbZh1ImG7Ugz7xv6gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 00:34:44
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.am ...
show more
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 20:34:38.990624 2026] [security2:error] [pid 6551:tid 6551] [client 44.223.241.188:49663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goldcountrygermanamericanclub.org"] [uri "/wp-config.php.bak"] [unique_id "ap9YHvuJdBid5nW6hLNqpgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 22:56:13
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.am ...
show more
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 18:56:07.123388 2026] [security2:error] [pid 11373:tid 11373] [client 44.223.241.188:7727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theateroobleck.com"] [uri "/wp-config.bak"] [unique_id "ap9BB5AOQmzUqG5cIAf2jgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 22:18:54
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.am ...
show more
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 18:18:47.415505 2026] [security2:error] [pid 4899:tid 4899] [client 44.223.241.188:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "local639.com"] [uri "/.env.old"] [unique_id "ap84R5pF4STv5ZC3P-0lXgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 20:27:11
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.am ...
show more
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 16:27:08.147898 2026] [security2:error] [pid 3657:tid 3657] [client 44.223.241.188:10153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kountz.org"] [uri "/wp-config.php.bak"] [unique_id "ap8eHHDQcDwBRxrdZAOC8gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 19:35:06
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.am ...
show more
(mod_security) mod_security (id:210730) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:34:58.814629 2026] [security2:error] [pid 20576:tid 20576] [client 44.223.241.188:42905] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.abneyfoundation.org|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.abneyfoundation.org"] [uri "/wp-config-sample.php.bak"] [unique_id "ap8R4m9nalxSgCAJRJ5StQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 19:07:50
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.am ...
show more
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:07:46.995057 2026] [security2:error] [pid 28801:tid 28801] [client 44.223.241.188:60138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bryteandbroderick.org"] [uri "/wp-config.bak"] [unique_id "ap8LglUcHbE48DpBJU52jAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 15:56:30
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.am ...
show more
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 11:56:26.008613 2026] [security2:error] [pid 6119:tid 6119] [client 44.223.241.188:59306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "montgomeryhistoricalsociety.org"] [uri "/wp-config.php.bak"] [unique_id "ap7eqjY00c7TZu3EbArlBQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 11:21:02
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.am ...
show more
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 07:20:53.474570 2026] [security2:error] [pid 27424:tid 27424] [client 44.223.241.188:32554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.assec.org"] [uri "/wp-config.php.txt"] [unique_id "ap6eFaEQhjA2QVtY7xNCBgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 09:08:55
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.am ...
show more
(mod_security) mod_security (id:210492) triggered by 44.223.241.188 (ec2-44-223-241-188.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 05:08:50.925710 2026] [security2:error] [pid 28384:tid 28384] [client 44.223.241.188:12218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "afscmelocal2794.com"] [uri "/wp-config.php.save"] [unique_id "ap5_IrF9v04SjnfZXHQw4gAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
