🇺🇸
TPI-Abuse
2026-09-07 19:35:07
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazon ...
show more
(mod_security) mod_security (id:210492) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:35:01.879057 2026] [security2:error] [pid 22886:tid 22886] [client 52.73.41.187:14308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.abneyfoundation.org"] [uri "/wp-config.php.swp"] [unique_id "ap8R5fPGpzCZyEbFh3rQDgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 19:09:05
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazon ...
show more
(mod_security) mod_security (id:210492) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:08:59.324292 2026] [security2:error] [pid 28510:tid 28510] [client 52.73.41.187:16077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bryteandbroderick.org"] [uri "/.env.save"] [unique_id "ap8Lyy5EXBgXFjM6MMdzJwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 15:56:45
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazon ...
show more
(mod_security) mod_security (id:210492) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 11:56:38.002583 2026] [security2:error] [pid 17587:tid 17587] [client 52.73.41.187:57209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "montgomeryhistoricalsociety.org"] [uri "/wp-config.php.dist"] [unique_id "ap7etgzVn1axt8lTwIMDTAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 11:20:46
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazon ...
show more
(mod_security) mod_security (id:210492) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 07:20:39.860621 2026] [security2:error] [pid 24067:tid 24067] [client 52.73.41.187:21413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.assec.org"] [uri "/wp-config.php.save"] [unique_id "ap6eB4slFM7cW7ou_LqvUgAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 09:09:11
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazon ...
show more
(mod_security) mod_security (id:210492) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 05:09:03.793858 2026] [security2:error] [pid 27370:tid 27370] [client 52.73.41.187:56578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "afscmelocal2794.com"] [uri "/wp-config.php.txt"] [unique_id "ap5_L3FX54c_EgGKvv_r1QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 04:05:10
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazon ...
show more
(mod_security) mod_security (id:210492) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 00:05:06.136991 2026] [security2:error] [pid 1775986:tid 1776060] [client 52.73.41.187:50348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sportsoutreachnc.org"] [uri "/wp-config.php.old"] [unique_id "ap438lAY7FEzOcUqwbb4WAAAAYs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 00:04:19
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazon ...
show more
(mod_security) mod_security (id:210492) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 20:04:16.621767 2026] [security2:error] [pid 9026:tid 9026] [client 52.73.41.187:30575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.h-vpastoralcharge.org"] [uri "/wp-config.php~"] [unique_id "ap3_gPXyNQ0LMbnU1tovngAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 16:57:02
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazon ...
show more
(mod_security) mod_security (id:210730) triggered by 52.73.41.187 (ec2-52-73-41-187.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 12:56:54.691541 2026] [security2:error] [pid 24294:tid 24294] [client 52.73.41.187:33292] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||caminorfoundation.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "caminorfoundation.org"] [uri "/dump.sql"] [unique_id "ap2bVqtO3r-PBwuDelk8FAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-06 16:33:46
(1 day ago)
Multiple WAF Violations
Web App Attack
🇫🇷
Octopuce
2026-09-06 16:00:07
(1 day ago)
Aggressive web search of vulnerable pages: /phpMyAdmin-5.0/ /pma/ /phpMyAdmin/setup/ /phpmy/ /phpmya ...
show more
Aggressive web search of vulnerable pages: /phpMyAdmin-5.0/ /pma/ /phpMyAdmin/setup/ /phpmy/ /phpmyadmin/ /phpmyadmin/index.php /phpmyadmin/scr ...
show less
Web App Attack
