This IP address has been reported a total of
28
times from
24 distinct
sources.
147.78.241.74 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
United States of America
with 5
reports;
Switzerland
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
18
times;
Bad Web Bot
11
times;
Brute-Force
6
times;
Hacking
4
times;
Port Scan
3
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-28T02:54:13.000Z.
Web App Attack
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Auto ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Automated scanning
show less
147.78.241.74 - - [27/Oct/2026:04:05:13 +0000] "GET / HTTP/1.1" 444 0 "https://vpn18.thesandbox.net" ...
show more147.78.241.74 - - [27/Oct/2026:04:05:13 +0000] "GET / HTTP/1.1" 444 0 "https://vpn18.thesandbox.net" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "-"
147.78.241.74 - - [27/Oct/2026:04:05:15 +0000] "GET / HTTP/1.1" 444 0 "https://vpn18.thesandbox.net" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "-"
147.78.241.74 - - [27/Oct/2026:04:05:18 +0000] "GET / HTTP/1.1" 444 0 "https://vpn18.thesandbox.net" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "-"
...
show less
Brute-Force
Web App Attack
Anonymous
SSL Handshake Failure - Possible Attack
Hacking
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Auto ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Automated scanning
show less
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -42.589 (Bad < -10 / Very Bad < -20 ...
show moreBot/Spam/Scrapper attack detected on www.handytreff.de - Score: -42.589 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.3
show less
[MonOct2612:36:04.4925712026][security2:error][pid2409757:tid2409863][client147.78.241.74:0]ModSecur ...
show more[MonOct2612:36:04.4925712026][security2:error][pid2409757:tid2409863][client147.78.241.74:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"gm-swiss.ch\"][uri\"/images/favicon.ico\"][unique_id\"at87JCNrCxIeqjIQlL58yQAAAMo\"]\,referer:https://gm-swiss.ch
show less
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
Anonymous
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ...
show moreAttacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
show less
