🇬🇧
AvonleaConsulting
2025-08-16 12:55:07
(10 months ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇩🇪
Mr-Money
2025-08-11 04:42:35
(11 months ago)
74.208.58.142 - - [11/Aug/2025:06:42:35 +0200] "HEAD /archive.zip HTTP/1.1" 301 181 "-" "-"
...
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-07-19 18:00:18
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 14:00:13.278611 2025] [security2:error] [pid 10537:tid 10571] [client 74.208.58.142:54566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iacsb.com"] [uri "/wp-config.php_orig"] [unique_id "aHvdLZm670BOIMa1HYE14wAAAUM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-19 08:19:05
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 04:19:02.501177 2025] [security2:error] [pid 19095:tid 19095] [client 74.208.58.142:52954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "markrikey.com"] [uri "/wp-config.php_old"] [unique_id "aHtU9rnrnwuEHYDgrPEYHQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2025-07-19 02:44:18
(11 months ago)
(mod_security) mod_security (id:949110) triggered by 74.208.58.142 (US/United States/infong1184.perf ...
show more
(mod_security) mod_security (id:949110) triggered by 74.208.58.142 (US/United States/infong1184.perfora.net): N in the last X secs
show less
Web App Attack
2025-07-18 16:30:35
(11 months ago)
Failed login attempt detected by Fail2Ban in recidive jail
Brute-Force
🇺🇸
TPI-Abuse
2025-07-18 15:49:52
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 11:49:47.420835 2025] [security2:error] [pid 13374:tid 13374] [client 74.208.58.142:56354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powersystemprotection.co.uk"] [uri "/wp-config.php.old"] [unique_id "aHptG9L1OWqN8tqk7Wk59QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 06:54:39
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 02:54:33.463750 2025] [security2:error] [pid 25813:tid 25813] [client 74.208.58.142:54606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lgbtqhistoryinaustin.org"] [uri "/wp-config.php1"] [unique_id "aHnvqdzex3Gz9Q13lrzk2wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-18 04:00:07
(11 months ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 00:23:00
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 20:22:55.977174 2025] [security2:error] [pid 28360:tid 28360] [client 74.208.58.142:35652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "klam.nyc"] [uri "/wp-config.php.old"] [unique_id "aHmT3wFsqhZKpdZEAAKn_wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-17 09:59:27
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 05:59:22.327056 2025] [security2:error] [pid 14322:tid 14322] [client 74.208.58.142:48132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kicking2achieve.org"] [uri "/wp-config.php1"] [unique_id "aHjJeleT7L1c0_R7Pg0tCAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-15 23:48:10
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 19:48:03.626141 2025] [security2:error] [pid 8615:tid 8615] [client 74.208.58.142:34606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yellowbrickfoundation.com"] [uri "/wp-config.php1"] [unique_id "aHbos3OT8EiKsLHNWlHH_AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2025-07-15 19:36:53
(11 months ago)
[Tue Jul 15 21:36:52.407412 2025] [security2:error] [pid 891386:tid 891411] [client 74.208.58.142:53 ...
show more
[Tue Jul 15 21:36:52.407412 2025] [security2:error] [pid 891386:tid 891411] [client 74.208.58.142:53792] [client 74.208.58.142] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmn.on.ca"] [uri "/wp-config.php.old"] [unique_id "aHat1O22iWR4w_lB4a3AVQAAABc"]
[Tue Jul 15 21:36:53.090974 2025] [security2:error] [pid 820568:tid 820585] [client 74.208.58.142:53806] [client 74.208.58.142] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"]
...
show less
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-15 13:55:54
(11 months ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-15 09:47:54
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.142 (infong1184.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 05:47:48.943157 2025] [security2:error] [pid 3105:tid 3105] [client 74.208.58.142:34508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edwardchrisman.com"] [uri "/wp-config.php1"] [unique_id "aHYjxCZkiqY4HYgFFdqLwQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack