🇺🇸
jkcunningham
2026-10-19 04:03:07
(1 day ago)
Scans for os/system endpoints. Vpn node. Open proxy.
Bad Web Bot
Port Scan
VPN IP
Open Proxy
🇩🇪
LRob
2026-10-18 12:38:39
(2 days ago)
Not following 301 redirects — wasted requests | method: GET | path: /atce-energies.zip | ua: -
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-09-25 10:30:14
(3 weeks ago)
[Fri Sep 25 20:30:13.317971 2026] [security2:error] [pid 646311] [client 74.208.56.62:43638] [client ...
show more
[Fri Sep 25 20:30:13.317971 2026] [security2:error] [pid 646311] [client 74.208.56.62:43638] [client 74.208.56.62] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "iaki.com.au"] [uri "/.env"] [unique_id "arZNNYCee_yzPk8RK2txSgAAAAQ"]
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:07:31
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:07:27.779739 2026] [security2:error] [pid 10000:tid 10000] [client 74.208.56.62:41750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mroxygen.org"] [uri "/wp-config.php.bak"] [unique_id "arLf_ytTW3sRP3KnP5nsqAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:16:46
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:16:41.718240 2026] [security2:error] [pid 15339:tid 15339] [client 74.208.56.62:33788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrpinman.com"] [uri "/wp-config.php.bak"] [unique_id "arLUGXCGxm9SOD86v50BgQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:50:41
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:50:35.885959 2026] [security2:error] [pid 17804:tid 17851] [client 74.208.56.62:35648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "juantrece.com"] [uri "/wp-config.php.bak"] [unique_id "arKVu0TpoMKtXIni6DS9oQAAAMU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-22 04:00:04
(4 weeks ago)
suspicious request in access.log
Web App Attack
🇩🇪
Phenix Info
2026-09-21 10:15:59
(4 weeks ago)
SmallGuard.fr/Prestashop Empty User Agent
Web App Attack
🇺🇸
TPI-Abuse
2025-07-17 20:24:33
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 16:24:29.149416 2025] [security2:error] [pid 20903:tid 20903] [client 74.208.56.62:45584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "medics-group.com"] [uri "/wp-config.php.old"] [unique_id "aHlb_b6d3WhT-bkYVdYH7wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-16 23:05:15
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 19:05:11.608290 2025] [security2:error] [pid 324:tid 324] [client 74.208.56.62:55980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "neo-zone.net"] [uri "/wp-config.php.old"] [unique_id "aHgwJ16WL4IGo0QpfhxCpAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-16 05:01:00
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 01:00:54.539928 2025] [security2:error] [pid 1671:tid 1671] [client 74.208.56.62:50108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/wp-config.php1"] [unique_id "aHcyBk0bYBNeSDoBNek-zAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-15 04:20:49
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-13 23:57:17
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 19:57:11.611470 2025] [security2:error] [pid 2073:tid 2073] [client 74.208.56.62:59630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "finishlineenterprisesllc.com"] [uri "/wp-config.php.old"] [unique_id "aHRH13gYZrY_VgE3mtFdjgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-07-13 21:58:35
(1 year ago)
Bot / scanning and/or hacking attempts: GET /wp-config.php.save HTTP/2.0, GET /wp-config.php.save HT ...
show more
Bot / scanning and/or hacking attempts: GET /wp-config.php.save HTTP/2.0, GET /wp-config.php.save HTTP/1.1, [1/1] done, GET /wp-config.php.orig HTTP/1.1, GET /wp-config.php.orig HTTP/2.0, GET /wp-config.php.old HTTP/1.1, GET /wp-config.php_ HTTP/2.0, GET /wp-config.php_ HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-07-13 05:06:02
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.56.62 (infong743.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 01:05:56.179304 2025] [security2:error] [pid 19369:tid 19369] [client 74.208.56.62:54872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cbcconsult.com"] [uri "/wp-config.php.old"] [unique_id "aHM-tEFk2Uvd3vZXqY2fzAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
