🇺🇸
TPI-Abuse
2026-09-22 15:33:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home. ...
show more
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:33:34.322193 2026] [security2:error] [pid 26546:tid 26546] [client 46.242.245.21:52077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hawaiivacations.com"] [uri "/wp-config.php.bak"] [unique_id "arKfzolN9f_x5NPD81vZ9QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:00:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home. ...
show more
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:00:34.254792 2026] [security2:error] [pid 25048:tid 25048] [client 46.242.245.21:56785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dreamingofatlantis.com"] [uri "/wp-config.php.bak"] [unique_id "arKKAtLBBYjjjotUx2fg2gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-22 13:37:40
(1 day ago)
Automatically blocked after 1 security event. Observed repeated web application attack probes. Sourc ...
show more
Automatically blocked after 1 security event. Observed repeated web application attack probes. Source: Cloudflare security controls.
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 12:50:09
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 46.242.245.21 (cloudserver3236601-3236632.home. ...
show more
(mod_security) mod_security (id:210730) triggered by 46.242.245.21 (cloudserver3236601-3236632.home.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:50:00.382290 2026] [security2:error] [pid 14727:tid 14727] [client 46.242.245.21:52939] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||alpinexport.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alpinexport.com"] [uri "/wp-config.php.bak"] [unique_id "arJ5eI3Wc-VpABXA0rGrRgAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 10:45:17
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home. ...
show more
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 06:45:09.090390 2026] [security2:error] [pid 31289:tid 31289] [client 46.242.245.21:42753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stenbot.com"] [uri "/wp-config.php.bak"] [unique_id "arJcNThcGxEV9B65m02hNQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 04:11:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home. ...
show more
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 00:11:03.324135 2026] [security2:error] [pid 27738:tid 27757] [client 46.242.245.21:50293] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accsesame.com"] [uri "/.env"] [unique_id "arH_1-4HIJHxkuN1ahfz8wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ps-center
2025-05-01 10:01:28
(1 year ago)
MYH: Web Attack GET /wp-config.php~
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2025-05-01 07:07:31
(1 year ago)
46.242.245.21 - - [01/May/2025:10:07:31 +0300] "GET /wp-config.php.org HTTP/1.1" 404 270 "-" "-"
...
Web App Attack
🇺🇸
TPI-Abuse
2025-05-01 04:00:20
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home. ...
show more
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 01 00:00:13.051588 2025] [security2:error] [pid 54468:tid 54468] [client 46.242.245.21:60837] [client 46.242.245.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schlegelcreative.com"] [uri "/wp-config.php~"] [unique_id "aBLxzXUtg1LtKh28_50u7gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2025-05-01 02:20:24
(1 year ago)
46.242.245.21 - - [01/May/2025:05:20:17 +0300] "GET /wp-config.php~ HTTP/1.1" 404 280 "-" "-"
46.242 ...
show more
46.242.245.21 - - [01/May/2025:05:20:17 +0300] "GET /wp-config.php~ HTTP/1.1" 404 280 "-" "-"
46.242.245.21 - - [01/May/2025:05:20:23 +0300] "GET /wp-config.php~ HTTP/1.1" 404 275 "-" "-"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-04-30 18:02:50
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home. ...
show more
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 30 14:02:45.136580 2025] [security2:error] [pid 3673944:tid 3673944] [client 46.242.245.21:63937] [client 46.242.245.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oualierealty.com"] [uri "/wp-config.phpold"] [unique_id "aBJlxRUrUshHo6AXwYC9DwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Rosh
2025-04-29 04:21:19
(1 year ago)
[04/29/25 06:21:19] 1 attack: /wp-config.php1 (severity 5);
Web App Attack
🇺🇸
TPI-Abuse
2025-04-29 01:53:14
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home. ...
show more
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 28 21:53:10.024308 2025] [security2:error] [pid 14769:tid 14769] [client 46.242.245.21:57491] [client 46.242.245.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "watongalodging.com"] [uri "/wp-config.php.orig"] [unique_id "aBAxBp_CDvFJSXwfDZ511QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-28 23:23:04
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home. ...
show more
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 28 19:22:56.560719 2025] [security2:error] [pid 31485:tid 31485] [client 46.242.245.21:41623] [client 46.242.245.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "monopolimusic.com"] [uri "/wp-config.php.orig"] [unique_id "aBAN0K6zSBwJT7mvvgkbXQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-27 21:22:39
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home. ...
show more
(mod_security) mod_security (id:210492) triggered by 46.242.245.21 (cloudserver3236601-3236632.home.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 17:22:31.256142 2025] [security2:error] [pid 22013:tid 22013] [client 46.242.245.21:49281] [client 46.242.245.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anus.net"] [uri "/wp-config.php.save"] [unique_id "aA6gF4mHJinKmhFf1cId4QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack