🇺🇸
Penny Packer
2025-08-01 10:19:38
(10 months ago)
Fail2Ban apache-tripwires
Web App Attack
🇺🇸
TPI-Abuse
2025-07-20 05:52:52
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 20 01:52:48.689951 2025] [security2:error] [pid 6230:tid 6230] [client 89.41.38.60:55018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vesalappi.com"] [uri "/wp-config.php_orig"] [unique_id "aHyEMMqiepxyk2hfedXq1gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ingroscart.it
2025-07-19 17:50:46
(10 months ago)
(mod_security) mod_security triggered on hostname [redacted] 89.41.38.60 (RO/Romania/dedi96067.whmpa ...
show more
(mod_security) mod_security triggered on hostname [redacted] 89.41.38.60 (RO/Romania/dedi96067.whmpanels.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2025-07-19 15:04:37
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 11:04:32.604402 2025] [security2:error] [pid 17646:tid 17646] [client 89.41.38.60:42818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pswebsite.com"] [uri "/wp-config.php_old"] [unique_id "aHu0AFIRoxUDUFzeZGeVwwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-07-19 07:02:32
(10 months ago)
Bot / scanning and/or hacking attempts: GET /wp-config.php.backup HTTP/2.0, GET /wp-config.php.backu ...
show more
Bot / scanning and/or hacking attempts: GET /wp-config.php.backup HTTP/2.0, GET /wp-config.php.backup HTTP/1.1, GET /wp-config.php-old HTTP/2.0, GET /wp-config.php_old HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /wp-config.php-old HTTP/1.1, [1/1] done
show less
Hacking
Web App Attack
🇭🇺
HoneyPotEu
2025-07-19 06:13:52
(10 months ago)
89.41.38.60 - - [19/Jul/2025:08:13:41 +0200] "GET /wp-config.php_old HTTP/1.1" 404 146 "-" "-"
89.41 ...
show more
89.41.38.60 - - [19/Jul/2025:08:13:41 +0200] "GET /wp-config.php_old HTTP/1.1" 404 146 "-" "-"
89.41.38.60 - - [19/Jul/2025:08:13:41 +0200] "GET /wp-config.php-old HTTP/1.1" 404 146 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-18 00:40:48
(10 months ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-16 17:56:27
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 13:56:21.067400 2025] [security2:error] [pid 32305:tid 32340] [client 89.41.38.60:50512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sportsoutreachnc.org"] [uri "/wp-config.php.old"] [unique_id "aHfnxQg7MJsIA02d6YagKAAAAUM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-16 14:30:13
(10 months ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-16 14:23:51
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 10:23:43.954429 2025] [security2:error] [pid 25227:tid 25227] [client 89.41.38.60:53276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gregmoffatt.com"] [uri "/wp-config.php.old"] [unique_id "aHe17yHIufU6FrzU2nAR1AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-16 04:49:05
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 00:48:58.606795 2025] [security2:error] [pid 3249:tid 3249] [client 89.41.38.60:36242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guarinofurnituredesigns.com"] [uri "/wp-config.php.old"] [unique_id "aHcvOqbDfa32m2t9MFyJHAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-15 11:01:48
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 07:01:42.087115 2025] [security2:error] [pid 24823:tid 24823] [client 89.41.38.60:33240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rogerandcarol.com"] [uri "/wp-config.php1"] [unique_id "aHY1FocF2eJnGT379TLQGAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-15 05:13:00
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 01:12:53.663621 2025] [security2:error] [pid 12375:tid 12375] [client 89.41.38.60:60432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manosentuayuda.org"] [uri "/wp-config.php.old"] [unique_id "aHXjVd72idjTfH7vLjYzjgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-15 03:30:45
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 23:30:40.259676 2025] [security2:error] [pid 17633:tid 17633] [client 89.41.38.60:52826] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tntserv.com"] [uri "/wp-config.php.old"] [unique_id "aHXLYNAzdnqth0x90UCqbgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-14 05:06:22
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 89.41.38.60 (dedi96067.whmpanels.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 01:06:16.046686 2025] [security2:error] [pid 25128:tid 25128] [client 89.41.38.60:35818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "happymoosegifts.com"] [uri "/wp-config.php1"] [unique_id "aHSQSJOPktYmAX_tHCrA4AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack