🇩🇪
www.Examensfragen.de
2025-08-26 02:15:47
UTC ·
(1 year ago)
Web Spam
Bad Web Bot
🇳🇱
ParaBug
2025-08-23 12:31:53
UTC ·
(1 year ago)
74.208.58.253 - - [23/Aug/2025:14:31:52 +0200] "HEAD /new.zip HTTP/1.1" 301 179 "-" "-"
...
Phishing
Brute-Force
Web App Attack
2025-08-21 16:00:07
UTC ·
(1 year ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
2025-08-08 07:31:33
UTC ·
(1 year ago)
[08:31:32] 4b*: Exploit attempt against non-existent file - /archive.zip
Hacking
Bad Web Bot
Web App Attack
🇬🇧
rakkor
2025-07-30 10:45:56
UTC ·
(1 year ago)
2025/07/30 11:45:55 [error] 27596#27596: *7683 open() "/var/services/web/archive.zip" failed (2: No such file or directory), client: 74.208.58.253, server: , request: "HEAD /archive.zip HTTP/1.1", host: "rakkor.com"
2025/07/30 11:45:55 [error] 27597# ...
show more
2025/07/30 11:45:55 [error] 27596#27596: *7683 open() "/var/services/web/archive.zip" failed (2: No such file or directory), client: 74.208.58.253, server: , request: "HEAD /archive.zip HTTP/1.1", host: "rakkor.com"
2025/07/30 11:45:55 [error] 27597#27597: *7686 open() "/var/services/web/Backup.zip" failed (2: No such file or directory), client: 74.208.58.253, server: , request: "HEAD /Backup.zip HTTP/1.1", host: "rakkor.com"
...
show less
Hacking
Brute-Force
Web App Attack
2025-07-23 16:30:36
UTC ·
(1 year ago)
Failed login attempt detected by Fail2Ban in recidive jail
Brute-Force
🇺🇸
TPI-Abuse
2025-07-16 10:31:34
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.253 (infong997.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 06:31:26.474036 2025] [security2:error] [pid 10439:tid 10439] [client 74 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.253 (infong997.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 06:31:26.474036 2025] [security2:error] [pid 10439:tid 10439] [client 74.208.58.253:45532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zoesaadeh.com"] [uri "/wp-config.php.old"] [unique_id "aHd_fmnIGyz_Utslth9DEQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-15 08:00:08
UTC ·
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-07-14 17:50:50
UTC ·
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-07-12 09:35:52
UTC ·
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-11 17:06:30
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.253 (infong997.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 13:06:23.815229 2025] [security2:error] [pid 30553:tid 30557] [client 74 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.253 (infong997.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 13:06:23.815229 2025] [security2:error] [pid 30553:tid 30557] [client 74.208.58.253:43964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lordennerdale.com"] [uri "/wp-config.php.old"] [unique_id "aHFEjydt4pacwCVno9h--gAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-10 13:31:57
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.253 (infong997.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 10 09:31:49.464486 2025] [security2:error] [pid 19656:tid 19656] [client 74 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.253 (infong997.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 10 09:31:49.464486 2025] [security2:error] [pid 19656:tid 19656] [client 74.208.58.253:45844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jsbarber.com"] [uri "/wp-config.php.old"] [unique_id "aG_AxX9kAeDgHPPZDPVOdgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-09 09:32:37
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.253 (infong997.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 05:32:32.111542 2025] [security2:error] [pid 8226:tid 8226] [client 74.2 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.253 (infong997.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 05:32:32.111542 2025] [security2:error] [pid 8226:tid 8226] [client 74.208.58.253:60650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drstiso.com"] [uri "/wp-config.php1"] [unique_id "aG43MNWcohNTg355v7vOkQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-08 09:19:05
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.253 (infong997.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 08 05:18:58.458170 2025] [security2:error] [pid 9732:tid 9732] [client 74.2 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.253 (infong997.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 08 05:18:58.458170 2025] [security2:error] [pid 9732:tid 9732] [client 74.208.58.253:52568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mbnetworking.com"] [uri "/wp-config.php.save"] [unique_id "aGzign1MT7QMZzN4o0bzJQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2025-06-27 23:03:01
UTC ·
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot