🇦🇺
MAGIC
2025-08-21 01:16:04
UTC ·
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
Phenix Info
2025-08-09 11:18:05
UTC ·
(1 year ago)
SmallGuard.fr/Prestashop Empty User Agent
Web App Attack
🇺🇸
TPI-Abuse
2025-07-20 01:45:31
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 21:45:23.136622 2025] [security2:error] [pid 17572:tid 17572] [client 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 21:45:23.136622 2025] [security2:error] [pid 17572:tid 17572] [client 74.208.58.124:43014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greasythings.com"] [uri "/wp-config.php_old"] [unique_id "aHxKM9POXnAbbX2P4NxbUQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-19 23:10:52
UTC ·
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-19 12:49:32
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 08:49:25.420920 2025] [security2:error] [pid 30724:tid 30724] [client 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 08:49:25.420920 2025] [security2:error] [pid 30724:tid 30724] [client 74.208.58.124:60634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wilburmanagementgroup.com"] [uri "/wp-config.php_old"] [unique_id "aHuUVRC1l1038XInJjvemwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 09:41:19
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 05:41:12.282725 2025] [security2:error] [pid 10827:tid 10827] [client 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 05:41:12.282725 2025] [security2:error] [pid 10827:tid 10827] [client 74.208.58.124:53710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nbcnewsradio.com"] [uri "/wp-config.php1"] [unique_id "aHoWuEiaKDWNg6FVMjJUogAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-17 10:58:44
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 06:58:40.962597 2025] [security2:error] [pid 20646:tid 20646] [client 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 06:58:40.962597 2025] [security2:error] [pid 20646:tid 20646] [client 74.208.58.124:45692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrflatpeople.com"] [uri "/wp-config.php.old"] [unique_id "aHjXYKSg_kFxDfHMEEKlVgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-10 05:56:02
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 10 01:55:59.208310 2025] [security2:error] [pid 18630:tid 18630] [client 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 10 01:55:59.208310 2025] [security2:error] [pid 18630:tid 18630] [client 74.208.58.124:48698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aethena.org"] [uri "/wp-config.php1"] [unique_id "aG9V7-jODDFc8PqzaDWaIQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
canine.tools
2025-07-09 14:30:54
UTC ·
(1 year ago)
[fail2ban Auto Report] anubis block
Bad Web Bot
🇺🇸
TPI-Abuse
2025-07-09 13:35:52
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 09:35:47.121020 2025] [security2:error] [pid 16843:tid 16843] [client 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 09:35:47.121020 2025] [security2:error] [pid 16843:tid 16843] [client 74.208.58.124:34450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paguilar.com"] [uri "/wp-config.php1"] [unique_id "aG5wM2ErnqVMe8hmcqkNQgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-09 05:16:10
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 01:16:05.790411 2025] [security2:error] [pid 5102:tid 5102] [client 74. ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 01:16:05.790411 2025] [security2:error] [pid 5102:tid 5102] [client 74.208.58.124:39878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aeservices.com"] [uri "/wp-config.php.old"] [unique_id "aG37FUtVbnVoxZ8rZJS0hQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-08 00:47:14
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 07 20:47:06.763609 2025] [security2:error] [pid 8926:tid 8926] [client 74. ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 07 20:47:06.763609 2025] [security2:error] [pid 8926:tid 8926] [client 74.208.58.124:52600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seskalee.com"] [uri "/wp-config.php.save"] [unique_id "aGxqiiy1mCirmhwrA8axfAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-06 10:55:46
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 06 06:55:41.708698 2025] [security2:error] [pid 18072:tid 18072] [client 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.124 (infong1559.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 06 06:55:41.708698 2025] [security2:error] [pid 18072:tid 18072] [client 74.208.58.124:60762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dualspiralsystems.com"] [uri "/wp-config.php.save"] [unique_id "aGpWLcrg-l6-8y8lDSrBtwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Tripwire
2025-07-03 08:42:47
UTC ·
(1 year ago)
Scanning for backup files - /backup.zip
Web App Attack
🇺🇸
F242
2022-08-20 21:18:48
UTC ·
(4 years ago)
Aug 21 03:18:47 mx1 wordpress(marc-eggert.de)[6490]: XML-RPC authentication attempt for unknown user wp_updates from 74.208.58.124
...
Web App Attack