🇺🇸
TPI-Abuse
2026-05-22 12:45:07
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 91.246.51.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 91.246.51.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 08:44:56.826008 2026] [security2:error] [pid 9800:tid 9800] [client 91.246.51.79:31889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "professionalpianomoversinc.com.anthonyanimalclinic.net"] [uri "/wp-config.php.bak"] [unique_id "ahBPyDU1UgUI8T335Rfn2wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 21:28:26
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 91.246.51.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 91.246.51.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 17:28:21.942588 2026] [security2:error] [pid 6772:tid 6772] [client 91.246.51.79:24047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avalderlaw.com"] [uri "/wp-config.php~"] [unique_id "ag4ndbYAs1JwcspYShR0RgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 20:42:26
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 91.246.51.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 91.246.51.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 16:42:18.068253 2026] [security2:error] [pid 12604:tid 12612] [client 91.246.51.79:56369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.property-management.property-management-companies-chicago.com"] [uri "/wp-config.php.old"] [unique_id "ag4cqg4jH5_3PIZQKEInsAAAAQU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 18:53:33
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 91.246.51.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 91.246.51.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 14:53:26.619657 2026] [security2:error] [pid 30421:tid 30421] [client 91.246.51.79:24405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "majesticsolutions.co"] [uri "/wp-config.php~"] [unique_id "ag4DJoMBBc3l8ujG6cxI9wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 15:44:41
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 91.246.51.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 91.246.51.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 11:44:35.697094 2026] [security2:error] [pid 18623:tid 18623] [client 91.246.51.79:38297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.escapegeorgesrouquier.williamgilcher.com"] [uri "/wp-config.php~"] [unique_id "ag3W49To1mf_5nEgqeGOHgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 13:00:51
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 91.246.51.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 91.246.51.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 09:00:45.871010 2026] [security2:error] [pid 23358:tid 23358] [client 91.246.51.79:47619] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dixiegeek.cosentient.com"] [uri "/wp-config.txt"] [unique_id "ag2wfTEwc5NNZNyswi9zZgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-05-15 15:06:41
(3 weeks ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
🇬🇧
Oakley
2026-05-05 08:23:43
(1 month ago)
(mod_security) mod_security (id:900209) triggered by 91.246.51.79 (US/United States/-): 5 in the las ...
show more
(mod_security) mod_security (id:900209) triggered by 91.246.51.79 (US/United States/-): 5 in the last 900 secs
show less
Web App Attack
Hacking
🇨🇭
4server
2026-04-30 20:07:07
(1 month ago)
[ThuApr3022:07:00.5941932026][security2:error][pid4107202:tid4107597][client91.246.51.79:0]ModSecuri ...
show more
[ThuApr3022:07:00.5941932026][security2:error][pid4107202:tid4107597][client91.246.51.79:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mondo-it.ch\"][uri\"/composer.lock\"][unique_id\"afO2ZHRkCKHvVzCgpm82EgAAABY\"]
show less
Hacking
Web App Attack
🇩🇪
paissangroup
2026-04-15 13:29:05
(1 month ago)
Multiple WAF Violations
Web App Attack
2025-03-31 13:42:48
(1 year ago)
This IP was involved in an brute force and password spray attack on 2025/03/31 08:41:37
Port Scan
Brute-Force
Exploited Host
Web App Attack
2025-03-28 14:15:08
(1 year ago)
This IP was involved in an brute force and password spray attack on 2025/03/28 08:09:34
Port Scan
Brute-Force
Exploited Host
Web App Attack
🇹🇼
nansen su
2024-08-15 02:48:51
(1 year ago)
Firewall Web Interface Login fail: remip="91.246.51.79" user=admin
Brute-Force
Exploited Host