This IP address has been reported a total of
36
times from
27 distinct
sources.
74.249.78.162 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated: 15 requests with error status in 120s window from 74.249.78.162.
Evidence: /___proxy_subd ...
show moreAutomated: 15 requests with error status in 120s window from 74.249.78.162.
Evidence: /___proxy_subdomain_whm/login/:404,/___proxy_subdomain_whm/login/:404,/dump.sql:301,/.htpasswd:301,/app/config/parameters.yml:301,/config.php:301,/.DS_Store:301,/actuator/env:301,/config/database.yml:301,/.aws/credentials:301,/wp-config.php:301,/.env.backup:301,/.env.production:301,/.env.local:301,/.git/config:301
show less
Blocked by UFW on vps2 [2087/tcp]
Source port: 53978
TTL: 48
Packet length: 60
TOS: 0x00
This repor ...
show moreBlocked by UFW on vps2 [2087/tcp]
Source port: 53978
TTL: 48
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
(mod_security) mod_security (id:210492) triggered by 74.249.78.162 (-): 1 in the last 300 secs; Port ...
show more(mod_security) mod_security (id:210492) triggered by 74.249.78.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 22:35:41.591922 2026] [security2:error] [pid 27884:tid 27884] [client 74.249.78.162:53963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.214"] [uri "/.git/HEAD"] [unique_id "ah-S_XnwC2DrJEeI87IlQwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /.env.backup HTTP/1.1, GET /.env.local HTTP/1.1, GET /.e ...
show moreBot / scanning and/or hacking attempts: GET /.env.backup HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env HTTP/1.1
show less
(mod_security) mod_security (id:210492) triggered by 74.249.78.162 (US/United States/-): 5 in the la ...
show more(mod_security) mod_security (id:210492) triggered by 74.249.78.162 (US/United States/-): 5 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC
show less
CrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-eve ...
show moreCrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-event detection. ASN: MICROSOFT-CORP-MSN-AS-BLOCK. Country: US. Timestamp: 2026-06-03T01:48:02+00:00.
show less
Port Scan on Honeypot | Ports: 8080/HTTP-proxy, 80/HTTP | Proto: TCP(2) | Flags: all SYN | TTL: 45-4 ...
show morePort Scan on Honeypot | Ports: 8080/HTTP-proxy, 80/HTTP | Proto: TCP(2) | Flags: all SYN | TTL: 45-46 | Len: 60B(2x) | Win: 64240(2) | F2B/ufw-honeypot@2026-06-03T01:41:33Z
show less
Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ...
show moreHoneypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud
show less
Port Scan
Bad Web Bot
Showing 1 to
15
of 36 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩