🇩🇪
todix
2025-08-13 08:55:13
UTC ·
(1 year ago)
WebAttack or semilar from 74.208.58.66
Web App Attack
🇺🇸
COMPLEX
2025-08-04 01:43:54
UTC ·
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
ASN: 8560 (IONOS-AS This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.)
Protocol: HTTP/2 (HE ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
ASN: 8560 (IONOS-AS This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.)
Protocol: HTTP/2 (HEAD method)
Endpoint: /Archive.zip
show less
Bad Web Bot
🇯🇵
Valhalla
2025-07-29 14:46:16
UTC ·
(1 year ago)
/archive.zip
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-07-19 18:28:41
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 14:28:33.749118 2025] [security2:error] [pid 16348:tid 16348] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 14:28:33.749118 2025] [security2:error] [pid 16348:tid 16348] [client 74.208.58.66:42654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frame-sa.com"] [uri "/wp-config.php_old"] [unique_id "aHvj0etjZdHfoElUFzmpjQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-19 06:19:13
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 02:19:09.255030 2025] [security2:error] [pid 7598:tid 7598] [client 74 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 02:19:09.255030 2025] [security2:error] [pid 7598:tid 7598] [client 74.208.58.66:46606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stlouisdave.com"] [uri "/dive/index.php"] [unique_id "aHs43VkjeVQ_1f6SO5QmxAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-18 21:10:49
UTC ·
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-07-18 02:40:49
UTC ·
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-17 14:28:58
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 10:28:50.353954 2025] [security2:error] [pid 15919:tid 15929] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 10:28:50.353954 2025] [security2:error] [pid 15919:tid 15929] [client 74.208.58.66:46482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloradospringsmardigras.com"] [uri "/wp-config.php.old"] [unique_id "aHkIoiA9aQ8Tw4HqS3CrrAAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-17 08:00:08
UTC ·
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-17 03:08:55
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 23:08:49.829466 2025] [security2:error] [pid 31067:tid 31067] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 23:08:49.829466 2025] [security2:error] [pid 31067:tid 31067] [client 74.208.58.66:50882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "levijoneslegal.com"] [uri "/wp-config.php.old"] [unique_id "aHhpQbeBsVbZdRx5qJBUewAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-15 16:03:51
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 12:03:46.649942 2025] [security2:error] [pid 26561:tid 26561] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 12:03:46.649942 2025] [security2:error] [pid 26561:tid 26561] [client 74.208.58.66:53614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "killeramps.com"] [uri "/wp-config.php.old"] [unique_id "aHZ74mHmnHWaxCttXsc8xwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-14 03:07:39
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 23:07:33.635796 2025] [security2:error] [pid 20897:tid 20897] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 23:07:33.635796 2025] [security2:error] [pid 20897:tid 20897] [client 74.208.58.66:44892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mpservice.com.sv"] [uri "/wp-config.php.old"] [unique_id "aHR0dWLn9f8pgpVjtOrFKwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-13 07:22:16
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 03:22:08.709567 2025] [security2:error] [pid 10843:tid 10843] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 03:22:08.709567 2025] [security2:error] [pid 10843:tid 10843] [client 74.208.58.66:52888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "campconcerto.com"] [uri "/wp-config.php.old"] [unique_id "aHNeoE35RFDXKzmsVOnMZQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-13 02:00:47
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 22:00:43.475330 2025] [security2:error] [pid 25138:tid 25138] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 22:00:43.475330 2025] [security2:error] [pid 25138:tid 25138] [client 74.208.58.66:43630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.andiamocomputers.com"] [uri "/wp-config.php.old"] [unique_id "aHMTS2apgCe6ICLRb17r5AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-12 14:46:11
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 10:46:06.622328 2025] [security2:error] [pid 3097:tid 3097] [client 74 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.66 (infongp-us77.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 10:46:06.622328 2025] [security2:error] [pid 3097:tid 3097] [client 74.208.58.66:38762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saadeh.ws"] [uri "/wp-config.php1"] [unique_id "aHJ1Lv_SRX79ymKjoRcJpQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack