Anonymous
2025-08-24 16:36:06
UTC ·
(1 year ago)
Account archive download attempts
Hacking
Brute-Force
🇧🇷
Sipo Chutão
2025-08-19 03:00:01
UTC ·
(1 year ago)
/wordpress.zip
Hacking
🇺🇸
Penny Packer
2025-08-14 19:42:44
UTC ·
(1 year ago)
Fail2Ban apache-tripwires
Web App Attack
🇧🇬
Stoyko Stoykov
2025-08-04 16:45:23
UTC ·
(1 year ago)
74.208.58.99 - - [04/Aug/2025:19:45:23 +0300] "HEAD /wordpress.zip HTTP/1.1" 301 0 "-" "-"
...
Hacking
Web App Attack
🇳🇿
Tripwire
2025-08-03 02:57:02
UTC ·
(1 year ago)
Scanning for backup files - /archive.zip
Web App Attack
🇺🇸
mnsf
2025-08-01 23:05:18
UTC ·
(1 year ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
🇩🇪
Vegascosmetics
2025-04-30 21:51:48
UTC ·
(1 year ago)
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
🇺🇸
TPI-Abuse
2025-04-30 01:17:11
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.99 (infongp-us79.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 29 21:17:05.376823 2025] [security2:error] [pid 29852:tid 29852] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.99 (infongp-us79.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 29 21:17:05.376823 2025] [security2:error] [pid 29852:tid 29852] [client 74.208.58.99:48124] [client 74.208.58.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "studiopilates.net"] [uri "/wp-config.php1"] [unique_id "aBF6EfwikKu8LvEQcApmvQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-29 01:36:19
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.99 (infongp-us79.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 28 21:36:14.650097 2025] [security2:error] [pid 6969:tid 6969] [client 74 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.99 (infongp-us79.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 28 21:36:14.650097 2025] [security2:error] [pid 6969:tid 6969] [client 74.208.58.99:53160] [client 74.208.58.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manvsfoodlocations.com"] [uri "/wp-config.php.orig"] [unique_id "aBAtDppR135GqQ7Rr70XqQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-04-29 00:18:51
UTC ·
(1 year ago)
Open Source CMS Configuration File Requests
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-04-28 21:26:12
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.99 (infongp-us79.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 28 17:26:08.403312 2025] [security2:error] [pid 25404:tid 25404] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.99 (infongp-us79.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 28 17:26:08.403312 2025] [security2:error] [pid 25404:tid 25404] [client 74.208.58.99:46446] [client 74.208.58.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "borzoi-pedigree.batw.net"] [uri "/wp-config.php.save"] [unique_id "aA_ycBH5ISwHbSRGJQu8WwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-27 20:56:22
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.99 (infongp-us79.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 16:56:16.716751 2025] [security2:error] [pid 23701:tid 23701] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.99 (infongp-us79.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 16:56:16.716751 2025] [security2:error] [pid 23701:tid 23701] [client 74.208.58.99:34202] [client 74.208.58.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goldenvalley1.com"] [uri "/wp-config.php.save"] [unique_id "aA6Z8KavxvJb4kL5VUOq3QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-27 19:40:25
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 74.208.58.99 (infongp-us79.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 15:40:21.002556 2025] [security2:error] [pid 28536:tid 28536] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.58.99 (infongp-us79.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 15:40:21.002556 2025] [security2:error] [pid 28536:tid 28536] [client 74.208.58.99:54554] [client 74.208.58.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adultshop61.net"] [uri "/wp-config.php.orig"] [unique_id "aA6IJWUuwy7GVnnA6RoBagAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ps-center
2025-04-27 12:21:53
UTC ·
(1 year ago)
MYH: Web Attack GET /wp-config.php.orig
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Al Coholic
2025-04-27 10:17:27
UTC ·
(1 year ago)
Detected By Fail2ban
Hacking
Bad Web Bot
Web App Attack