🇺🇸
TPI-Abuse
2026-10-26 16:50:59
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 74.7.241.56 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.241.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:50:55.983858 2026] [security2:error] [pid 3108:tid 3108] [client 74.7.241.56:43018] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.livingminimal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.livingminimal.com"] [uri "/wp-json/wp/v2/users/2"] [unique_id "at-E75m2pLPsHtJRbgZA8wAAACY"], referer: http://www.livingminimal.com/author/david/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-23 22:14:22
(3 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 03:18:11
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 74.7.241.56 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.241.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 23:18:04.789601 2026] [security2:error] [pid 25982:tid 25982] [client 74.7.241.56:43706] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.writebetweenthelines.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.writebetweenthelines.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "atrR7LdV-uiA2CBJxbAzkQAAAAU"], referer: https://www.writebetweenthelines.com/author/admin/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-10-21 07:30:55
(5 days ago)
"GET /wp-login.php?action=lostpassword&redirect_to=%2Freisewelten%2Fgemeinsam-geniessen%2F HTTP/2.0" ...
show more
"GET /wp-login.php?action=lostpassword&redirect_to=%2Freisewelten%2Fgemeinsam-geniessen%2F HTTP/2.0" 403 660 "/reisewelten/gemeinsam-geniessen/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +/gptbot)"
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-10-20 21:21:29
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 74.7.241.56 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.241.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 17:21:22.721946 2026] [security2:error] [pid 6354:tid 6354] [client 74.7.241.56:44054] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.greensandbeans.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.greensandbeans.us"] [uri "/wp-json/wp/v2/users/1"] [unique_id "atfbUrSHoUhiPBUM2QotSgAAAAI"], referer: https://www.greensandbeans.us/author/admin/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 17:23:58
(6 days ago)
(mod_security) mod_security (id:212290) triggered by 74.7.241.56 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:212290) triggered by 74.7.241.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 13:23:52.151749 2026] [security2:error] [pid 3080:tid 3080] [client 74.7.241.56:39778] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(?:href|src|lowsrc|url)\\\\b\\\\W+?\\\\b(?:(?:vb|java)script|shell)(?::|&colon)" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "47"] [id "212290"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||jenricker.com|F|2"] [data "Matched Data: href || '') ? 'javascript: found within REQUEST_URI: /js/' (/^https/i.test(window.location.href || '') ? 'javascript:void(false)' : 'about:blank' ) '"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "jenricker.com"] [uri "/js/' + (/^https/i.test(window.location.href || '') "] [unique_id "atejqHLHVkcyI9IIaBt0WAAAABA"], referer: https://jenricker.com/js/jquery.fancybox-1.3.4.js
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-20 00:34:07
(1 week ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
2026-10-19 23:14:28
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-10-18 16:15:20
(1 week ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
2026-10-16 13:09:12
(1 week ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
2026-10-15 22:03:25
(1 week ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
2026-10-15 21:11:15
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
jbcrn
2026-10-15 16:10:46
(1 week ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: OpenAI, ruleset: ai.robots.txt. Request ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: OpenAI, ruleset: ai.robots.txt. Requested honeypot path: /deflagration.secondly-hydrophobous/paviser-specimen/gos/prophylactical-polesetter/comment-uncognizable/chiffonier/packcloth/curuba-sticheron/strike/benzanilide/content/parochialism-Numa/putredinal/listing/Croaker-talonid/caprifig/Mahdism/thereabove/guarder/brushlike/snaffle/syncline/stodgery/praiseful/nickeling/Arnebia-excerpt/unhonied/Alopiidae/Nachitoches/vitrine/megabar/thyreosis/unpartizan/dibenzyl-Corinna/cabana-antipeptone/worble-Sabbathism/detail-stovewood/saltatorian-buzzy/harlequinic-Djuka/photodromy/Zincalo/fifish-occasioner/Peruginesque/biparted/Centrotus/Hudsonia/downlie/goddessship-Thamnophis/Thraupidae-emptor/boondoggler-cat/debunker/ungown-umpirage/counsel/satisfy/sclerophyll-tag/pseudoataxia/unjustness/prepollex/steckling/Zealander/deputy-indene/dignitari
show less
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-10-15 11:14:29
(1 week ago)
24.471 requests in 1 hour (1w6d22h)
Brute-Force
Bad Web Bot
🇩🇪
palzer.IT
2026-10-15 04:50:29
(1 week ago)
Fail2ban automatic report for plesk-apache-badbot: 74.7.241.56 - - [24/Sep/2026:18:16:36 +0200] GET ...
show more
Fail2ban automatic report for plesk-apache-badbot: 74.7.241.56 - - [24/Sep/2026:18:16:36 +0200] GET / [DOMAIN_REMOVED] 200 10576 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +[DOMAIN_REMOVED]
show less
Bad Web Bot