🇺🇸
TPI-Abuse
2026-05-22 11:20:41
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.147.232.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.147.232.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 07:20:35.926214 2026] [security2:error] [pid 17412:tid 17416] [client 45.147.232.190:26417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.tomrachman.com"] [uri "/wp-config.txt"] [unique_id "ahA8A1N6lr2zvf5dKYAvkAAAAEI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 21:57:14
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.147.232.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.147.232.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 17:57:08.066799 2026] [security2:error] [pid 25143:tid 25166] [client 45.147.232.190:44571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwcmachining.com"] [uri "/wp-config.php.orig"] [unique_id "ag9_tECe6sU5aFvrkSsZdAAAAFU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 16:57:13
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.147.232.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.147.232.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 12:57:07.575856 2026] [security2:error] [pid 25964:tid 25964] [client 45.147.232.190:16731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eye7graphics.com"] [uri "/wp-config.php.bak"] [unique_id "ag85Y039qDJMRfTHC4xvEAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 18:50:49
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.147.232.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.147.232.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 14:50:42.252735 2026] [security2:error] [pid 5229:tid 5229] [client 45.147.232.190:31733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "raintechgutters.com"] [uri "/wp-config.php.bak"] [unique_id "ag4Cgj0U7oDWq7jhze5DdQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 15:37:41
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.147.232.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.147.232.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 11:37:34.205373 2026] [security2:error] [pid 4908:tid 4908] [client 45.147.232.190:17985] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arellasoc.com"] [uri "/wp-config.php~"] [unique_id "ag3VPolcMt9WE_Ne3SrUQAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 12:57:16
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.147.232.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.147.232.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:57:05.621187 2026] [security2:error] [pid 4899:tid 4899] [client 45.147.232.190:64391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madisonjazzorchestra.com"] [uri "/wp-config.php.old"] [unique_id "ag2voauSy1YR3dHmE15ZdwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 12:39:46
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.147.232.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.147.232.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:39:42.124426 2026] [security2:error] [pid 20516:tid 20516] [client 45.147.232.190:55211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cityofhaleyville.com"] [uri "/wp-config.php.save"] [unique_id "ag2rjowo6u_urxNzN7clrgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-05-16 19:45:33
(2 weeks ago)
[SatMay1621:45:29.6338412026][security2:error][pid2931337:tid2931411][client45.147.232.190:0]ModSecu ...
show more
[SatMay1621:45:29.6338412026][security2:error][pid2931337:tid2931411][client45.147.232.190:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"381\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"edomustech.com\"][uri\"/wp-content/plugins/coming-soon/readme.txt\"][unique_id\"agjJWd3bXBXcB5PAHcFPhwAAAIg\"]
show less
Hacking
Web App Attack
2026-05-04 08:17:14
(1 month ago)
45.147.232.190 - - [04/May/2026:16:17:13 +0800] "GET /wp-config.php.old HTTP/1.1" 301 - "-" "Mozilla ...
show more
45.147.232.190 - - [04/May/2026:16:17:13 +0800] "GET /wp-config.php.old HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-03-25 13:17:21
(2 months ago)
Malicious activity detected
Hacking
Web App Attack
🇨🇭
backslash
2026-03-11 19:21:01
(2 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇨🇭
backslash
2026-02-10 02:55:05
(3 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇮🇩
BPS-StatisticsIndonesia
2026-01-01 05:44:30
(5 months ago)
WP Login Scan Activities
Web App Attack
2025-11-11 11:21:05
(6 months ago)
Forum/form spam
Web Spam