JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

74.208.58.70

Neutral Activity

Abuse Confidence Score

0% Low Risk

24 reports

9 reporters · latest 1 year ago

ISP: IONOS Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8560
Hostname(s): infong1587.perfora.net
Domain Name: ionos.com
Country: 🇺🇸 United States of America
City: Lenexa, Kansas

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

74.208.58.70 has been reported 24 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

24 from 9 distinct reporters

First reported

October 20th 2024

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 afleventoffice.com.au	2025-08-13 16:41:14 UTC · (1 year ago)	HEAD /public_html.zip HTTP/1.1	Web App Attack
🇺🇸 rdpguard.com	2025-07-24 21:52:06 UTC · (1 year ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 Al Coholic	2025-07-22 22:18:26 UTC · (1 year ago)	Detected By Fail2ban	Hacking Bad Web Bot Web App Attack
Anonymous	2025-07-19 13:41:01 UTC · (1 year ago)	Bot / scanning and/or hacking attempts: GET /wp-config.php~ HTTP/1.1, GET /wp-config.php-old HTTP/1.1, GET /wp-config.php_old HTTP/1.1, GET /wp-config.php.backup HTTP/1.1	Hacking Web App Attack
🇮🇹 VHosting	2025-07-18 18:15:53 UTC · (1 year ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-07-15 11:14:44 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 07:14:39.659183 2025] [security2:error] [pid 10207:tid 10207] [client 74 ... show more (mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 07:14:39.659183 2025] [security2:error] [pid 10207:tid 10207] [client 74.208.58.70:40922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wedeliverstrippers.com"] [uri "/wp-config.php.old"] [unique_id "aHY4H1HRR3E5O0FfcJ1LoQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-13 18:26:37 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 14:26:31.154666 2025] [security2:error] [pid 1712:tid 1712] [client 74.2 ... show more (mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 14:26:31.154666 2025] [security2:error] [pid 1712:tid 1712] [client 74.208.58.70:51858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thehandyfamily.net"] [uri "/wp-config.php1"] [unique_id "aHP6V_CFr3TlBLNxHCPCagAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-13 08:48:36 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 04:48:30.318737 2025] [security2:error] [pid 23130:tid 23130] [client 74 ... show more (mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 04:48:30.318737 2025] [security2:error] [pid 23130:tid 23130] [client 74.208.58.70:40540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theoaktree.org"] [uri "/wp-config.php1"] [unique_id "aHNy3t1mIweEW-i_LOCy-wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-11 23:58:04 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 19:57:55.834987 2025] [security2:error] [pid 5910:tid 5910] [client 74.2 ... show more (mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 19:57:55.834987 2025] [security2:error] [pid 5910:tid 5910] [client 74.208.58.70:37792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mrzradio.org"] [uri "/wp-config.php1"] [unique_id "aHGlA7yjCnFmDWzLQ_tXjQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-07-11 06:40:51 UTC · (1 year ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-07-09 20:31:44 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 16:31:37.286204 2025] [security2:error] [pid 24151:tid 24151] [client 74 ... show more (mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 16:31:37.286204 2025] [security2:error] [pid 24151:tid 24151] [client 74.208.58.70:50792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "delawaremade.org"] [uri "/wp-config.php1"] [unique_id "aG7RqQRiUsdgE8Ul1RcRIQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-08 19:17:16 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 08 15:17:10.108671 2025] [security2:error] [pid 10077:tid 10077] [client 74 ... show more (mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 08 15:17:10.108671 2025] [security2:error] [pid 10077:tid 10077] [client 74.208.58.70:58856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "celebritybikinigossip.com"] [uri "/wp-config.php1"] [unique_id "aG1utpjmSobTm6JT7rkmhQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-07-08 08:46:32 UTC · (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php_ UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB	Bad Web Bot
🇺🇸 TPI-Abuse	2025-07-08 07:32:52 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 08 03:32:49.586445 2025] [security2:error] [pid 22391:tid 22391] [client 74 ... show more (mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 08 03:32:49.586445 2025] [security2:error] [pid 22391:tid 22391] [client 74.208.58.70:53748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pinetreedistrict.org"] [uri "/wp-config.php1"] [unique_id "aGzJoYA1SqrhobFYzWV9BQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-08 06:12:52 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 08 02:12:45.742203 2025] [security2:error] [pid 21856:tid 21856] [client 74 ... show more (mod_security) mod_security (id:210492) triggered by 74.208.58.70 (infong1587.perfora.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 08 02:12:45.742203 2025] [security2:error] [pid 21856:tid 21856] [client 74.208.58.70:46840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crowleywoodworking.com"] [uri "/wp-config.php1"] [unique_id "aGy23XJmPWenMEjNzdFL2gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 2400:cb00:1055:1000:f25c:28c1:5793:404f

🇮🇳 154.29.231.48

🇳🇱 130.49.10.126

🇳🇱 45.148.10.151

🇨🇳 43.143.204.91

🇸🇬 43.133.39.203

🇬🇧 35.203.211.34

🇸🇰 185.42.7.150

🇨🇳 101.96.209.234

🇺🇸 100.50.17.159

🇩🇪 93.152.221.36

🇺🇸 89.19.34.227

🇺🇸 52.90.253.21

🇫🇷 52.46.83.77

🇺🇸 50.188.204.213

🇧🇪 34.22.204.254

🇨🇳 218.23.192.91

🇧🇷 104.22.10.116

🇺🇸 66.132.224.85

🇧🇷 2804:1790:9239:500:29c6:b280:a00:80a8