2025-12-05 08:00:35
(6 months ago)
Failed Wordpress Logins
Web App Attack
🇺🇸
TPI-Abuse
2025-04-22 10:58:45
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 06:58:39.926536 2025] [security2:error] [pid 3483008:tid 3483008] [client 67.222.39.92:39254] [client 67.222.39.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "californiabrokers.net"] [uri "/wp-config.old"] [unique_id "aAd2X9DmIEccfjp4NtwSwQAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-21 19:49:20
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 21 15:49:16.944029 2025] [security2:error] [pid 13079:tid 13079] [client 67.222.39.92:54376] [client 67.222.39.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssion.com"] [uri "/wp-config.php.old"] [unique_id "aAahPH-vObdai8nbr60h5wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-21 17:52:58
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 21 13:52:52.264690 2025] [security2:error] [pid 29211:tid 29211] [client 67.222.39.92:60472] [client 67.222.39.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ww-bbs.com"] [uri "/wp-config.php.old"] [unique_id "aAaF9FhhdYMxizFmnpH8fwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2025-04-20 05:28:43
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 67.222.39.92 (US/United States/box20 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 67.222.39.92 (US/United States/box2062.bluehost.com): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-04-20 05:21:57
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 20 01:21:53.885665 2025] [security2:error] [pid 20794:tid 20794] [client 67.222.39.92:35518] [client 67.222.39.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theoaktree.org"] [uri "/wp-config.php.bak"] [unique_id "aASEcS41AuUnLGJk4QQewgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-20 01:51:32
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 19 21:51:24.924301 2025] [security2:error] [pid 2236398:tid 2236398] [client 67.222.39.92:32040] [client 67.222.39.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "capitalentertainment.biz"] [uri "/wp-config.php.bak"] [unique_id "aARTHImXFzmYHEYtPlvvbQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-20 01:29:54
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 19 21:29:47.465553 2025] [security2:error] [pid 30623:tid 30623] [client 67.222.39.92:25092] [client 67.222.39.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alessiosilvestrin.com"] [uri "/wp-config.php.bak"] [unique_id "aAROC090_JtyWuYeZ6eFlAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-04-20 01:11:38
(1 year ago)
Malicious activity detected
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-04-20 00:14:13
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 19 20:14:09.705318 2025] [security2:error] [pid 5911:tid 6008] [client 67.222.39.92:10520] [client 67.222.39.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "busybeerestaurant.com"] [uri "/wp-config.php.bak"] [unique_id "aAQ8Ub_EhCgoK1ATCaAVrwAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-19 22:19:38
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 19 18:19:34.438700 2025] [security2:error] [pid 29505:tid 29505] [client 67.222.39.92:52668] [client 67.222.39.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yankeetownfishing.com"] [uri "/wp-config.php.bak"] [unique_id "aAQhdqi1avbaeaBshbBxEwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-19 21:45:48
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 19 17:45:43.828054 2025] [security2:error] [pid 4151303:tid 4151303] [client 67.222.39.92:54704] [client 67.222.39.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wisconsinstatehuntingexpo.com"] [uri "/wp-config.php.bak"] [unique_id "aAQZh7fgSv3aCc30pZCnXQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-18 04:47:21
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 18 00:47:15.989803 2025] [security2:error] [pid 348022:tid 348022] [client 67.222.39.92:52060] [client 67.222.39.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eezinet.com"] [uri "/wp-config.php.bak"] [unique_id "aAHZUyIj4CEoDEuDfROyYgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2025-04-18 04:42:00
(1 year ago)
IPBlock protected site ID [1365-l].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-18 00:57:50
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 67.222.39.92 (box2062.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 17 20:57:42.481569 2025] [security2:error] [pid 9111:tid 9111] [client 67.222.39.92:18662] [client 67.222.39.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pamolson.org"] [uri "/wp-config.php.bak"] [unique_id "aAGjhpyUp6_PphMh1N6FhwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack