🇬🇷
setupgr
2026-06-18 06:21:42
(2 days ago)
(mod_security) mod_security (id:100011) triggered by 202.46.62.74 (CN/China/Shanghai/Changqiao (Xuhu ...
show more
(mod_security) mod_security (id:100011) triggered by 202.46.62.74 (CN/China/Shanghai/Changqiao (Xuhui Qu)/-/[AS55967 BAIDU Beijing Baidu Netcom Science and Technology Co., Ltd.]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 18 09:21:41.331970 2026] [security2:error] [pid 2210294:tid 2210350] [remote 202.46.62.74:49639] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/403.shtml"] [unique_id "ajOOdbhY-m9nTIYxKGRpdAABkBQ"]
show less
Port Scan
🇪🇸
librebit
2026-06-16 07:03:13
(4 days ago)
Brute force
Brute-Force
🇵🇱
bmino.pl
2026-06-16 01:46:20
(4 days ago)
Autoban IP(2): 202.46.62.74 - Hostname: Beijing Baidu Netcom Science and Technology Co., Ltd. - City ...
show more
Autoban IP(2): 202.46.62.74 - Hostname: Beijing Baidu Netcom Science and Technology Co., Ltd. - City: Changqiao - Region: Shanghai - Country: China - Location: 31.168,121.418 - Organization: 263 Shanghai Communications Ltd. - failed attempts.
show less
Bad Web Bot
🇩🇪
Skyrider
2026-06-15 15:33:29
(4 days ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-06-14 14:27:16
(5 days ago)
(mod_security) mod_security (id:100011) triggered by 202.46.62.74: 1 in the last 86400 secs; Ports: ...
show more
(mod_security) mod_security (id:100011) triggered by 202.46.62.74: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 17:27:12.481053 2026] [security2:error] [pid 921871:tid 1395169] [remote 202.46.62.74:13933] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/403.shtml"] [unique_id "ai66QO2clReoPvlJKlg0PwAAyyA"]
show less
Port Scan
🇩🇪
Skyrider
2026-06-14 12:34:03
(5 days ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-06-14 10:01:25
(5 days ago)
Web App Attack
Web App Attack
🇩🇪
Skyrider
2026-06-13 11:40:15
(6 days ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇩🇪
Skyrider
2026-06-11 13:54:28
(1 week ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇩🇪
Skyrider
2026-06-10 12:10:27
(1 week ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇵🇱
bmino.pl
2026-06-09 23:00:54
(1 week ago)
Autoban IP(2): 202.46.62.74 - Hostname: Beijing Baidu Netcom Science and Technology Co., Ltd. - City ...
show more
Autoban IP(2): 202.46.62.74 - Hostname: Beijing Baidu Netcom Science and Technology Co., Ltd. - City: Changqiao - Region: Shanghai - Country: China - Location: 31.168,121.418 - Organization: 263 Shanghai Communications Ltd. - failed attempts.
show less
Bad Web Bot
🇫🇷
Sklurk
2026-06-09 15:33:04
(1 week ago)
Web App Attack
Web App Attack
🇩🇪
Skyrider
2026-06-09 11:19:46
(1 week ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 15:42:27
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 202.46.62.74 (ptr.cnsat.com.cn): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 202.46.62.74 (ptr.cnsat.com.cn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 11:42:18.602355 2026] [security2:error] [pid 14919:tid 14919] [client 202.46.62.74:10259] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||chatgptfrance.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chatgptfrance.net"] [uri "/wp-json/wp/v2/users/52"] [unique_id "aibi2tGLhIahqFd4BFyUvQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2026-06-08 07:34:57
(1 week ago)
202.46.62.74 - - [08/Jun/2026:01:34:56 -0600] "GET /xmlrpc.php?rsd HTTP/2.0" 200 768 "-" "Mozilla/5. ...
show more
202.46.62.74 - - [08/Jun/2026:01:34:56 -0600] "GET /xmlrpc.php?rsd HTTP/2.0" 200 768 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36"
...
show less
Web App Attack