🇺🇸
TPI-Abuse
2026-10-19 22:53:55
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 74.208.59.88 (infong-us10.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 18:53:49.223173 2026] [security2:error] [pid 8262:tid 8289] [client 74. ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.59.88 (infong-us10.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 18:53:49.223173 2026] [security2:error] [pid 8262:tid 8289] [client 74.208.59.88:53606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "annybelle.org"] [uri "/.env"] [unique_id "ataffUp3WKgyXTzIR-OZLwAAAVY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-19 15:30:02
UTC ·
(3 weeks ago)
suspicious request in access.log
Web App Attack
2026-10-19 10:27:28
UTC ·
(3 weeks ago)
Probing for exposed secret / credential files
Hacking
Web App Attack
🇺🇸
OceanTreasure
2026-10-16 21:22:25
UTC ·
(4 weeks ago)
tcp/80; Automated ZIP archive enumeration scan: "GET /sajninon.com.zip" @ 2026-10-16T21:22:25Z [proxy]
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 10:23:50
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 74.208.59.88 (infong-us10.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 06:23:43.624836 2026] [security2:error] [pid 21959:tid 21959] [client 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.59.88 (infong-us10.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 06:23:43.624836 2026] [security2:error] [pid 21959:tid 21959] [client 74.208.59.88:46528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bendersite.com"] [uri "/.env"] [unique_id "arZLr5M-RAjHO7JC9OiVcQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 04:28:22
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 74.208.59.88 (infong-us10.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 00:28:18.907678 2026] [security2:error] [pid 31330:tid 31330] [client 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.59.88 (infong-us10.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 00:28:18.907678 2026] [security2:error] [pid 31330:tid 31330] [client 74.208.59.88:36156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "handmrenovationsllc.com"] [uri "/.env.bak"] [unique_id "arX4Yk1Uak8An69PnpNaFQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:19:40
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 74.208.59.88 (infong-us10.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:19:32.698320 2026] [security2:error] [pid 13253:tid 13253] [client 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 74.208.59.88 (infong-us10.perfora.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:19:32.698320 2026] [security2:error] [pid 13253:tid 13253] [client 74.208.59.88:48194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lipingdata.com"] [uri "/wp-config.php.bak"] [unique_id "arLUxB92BREdD6LF6hTSuAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-22 09:48:50
UTC ·
(1 month ago)
This address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please ...
show more
This address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /wp-config.php.bak | 2026-09-22 09:48 UTC
show less
Hacking
Web App Attack
🇦🇺
MAGIC
2025-08-25 02:11:37
UTC ·
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
SCHAPPY
2025-08-22 01:23:38
UTC ·
(1 year ago)
Brute-force attack to identify web exploits
Brute-Force
Web App Attack
2025-08-16 17:02:48
UTC ·
(1 year ago)
Attempting to access restricted files
Hacking
Brute-Force
Web App Attack
🇺🇸
rdpguard.com
2025-08-10 07:24:09
UTC ·
(1 year ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
nationaleventpros.com
2025-08-08 02:06:23
UTC ·
(1 year ago)
vulnerability scan
Web App Attack
🇩🇪
Carsten
2025-08-07 13:19:26
UTC ·
(1 year ago)
HEAD [Archive.zip]
Port Scan
🇺🇸
rdpguard.com
2025-07-29 19:59:07
UTC ·
(1 year ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
