2026-10-20 00:00:08
(1 day ago)
suspicious request in access.log
Web App Attack
2026-10-19 13:19:43
(2 days ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 12:50:57
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 74.208.57.154 (infong662.perfora.net): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.57.154 (infong662.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 08:50:52.773089 2026] [security2:error] [pid 28877:tid 28877] [client 74.208.57.154:44378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "365santa.org"] [uri "/.env"] [unique_id "atYSLOWD_KNA06FKdipWcAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-19 11:44:45
(2 days ago)
Probing for exposed secret / credential files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 08:46:26
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 74.208.57.154 (infong662.perfora.net): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.57.154 (infong662.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 04:46:18.521407 2026] [security2:error] [pid 17803:tid 17811] [client 74.208.57.154:47860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "legalreporting.com"] [uri "/.env"] [unique_id "atXY2vmh4frGWRia04_hwAAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-10-19 04:23:13
(2 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇩🇪
LRob
2026-10-19 03:16:03
(2 days ago)
Secret file probe | method: GET | path: /.env | ua: -
Hacking
Web App Attack
🇫🇷
IRISIO
2026-09-25 07:14:32
(3 weeks ago)
scans/SQL injection/spam posts : 2 queries
Web App Attack
SQL Injection
🇺🇸
TPI-Abuse
2026-09-22 18:01:40
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 74.208.57.154 (infong662.perfora.net): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.57.154 (infong662.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 14:01:33.804725 2026] [security2:error] [pid 26794:tid 26794] [client 74.208.57.154:51216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windisfun.com"] [uri "/wp-config.php.bak"] [unique_id "arLCfXYIFJyWLgqXUmU3sQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 15:15:16
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 74.208.57.154 (infong662.perfora.net): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.57.154 (infong662.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:15:07.687364 2026] [security2:error] [pid 23290:tid 23290] [client 74.208.57.154:54344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "backstore.com"] [uri "/stressless-chair/Ekornes-Stressless-Chair.htm/wp-config.php.bak"] [unique_id "arKbe3yFV3DIBdCjnpak5gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:41:20
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 74.208.57.154 (infong662.perfora.net): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.57.154 (infong662.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:41:16.817997 2026] [security2:error] [pid 16325:tid 16325] [client 74.208.57.154:55244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tttns.com"] [uri "/about-jason//wp-config.php.bak"] [unique_id "arKTjNBZgWel3ihCGH81rAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 12:31:33
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 74.208.57.154 (infong662.perfora.net): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.57.154 (infong662.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:31:30.052975 2026] [security2:error] [pid 16757:tid 16757] [client 74.208.57.154:59610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "misterflores.com"] [uri "/wp-config.php.bak"] [unique_id "arJ1In3YOzbm8i7SuLZq8wAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Mr-Money
2025-08-19 04:39:15
(1 year ago)
74.208.57.154 - - [19/Aug/2025:06:39:15 +0200] "HEAD /new.zip HTTP/1.1" 404 124 "-" "-"
...
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
octageeks.com
2025-08-06 04:09:25
(1 year ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇩🇪
todix
2025-07-28 00:11:34
(1 year ago)
WebAttack or semilar from 74.208.57.154
Web App Attack
