🇩🇪
server_administrator
2026-06-17 16:41:48
(8 hours ago)
Automated blocking: 1184 requests in 1200s detected by server monitoring
Web App Attack
🇲🇹
neilcaruana
2026-06-17 13:34:18
(11 hours ago)
Sentinel detected an attack on port [443]
Hacking
🇹🇭
MWA SOC
2026-06-17 06:32:12
(18 hours ago)
Hacking
🇺🇸
TPI-Abuse
2026-06-16 07:29:16
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 74.7.243.218 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.243.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 03:29:09.558493 2026] [security2:error] [pid 21297:tid 21297] [client 74.7.243.218:46722] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.naturalacu.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.naturalacu.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ajD7RQNZ67fWogqO8aYn1QAAABA"], referer: http://www.naturalacu.com/author/admin/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Charlesiv
2026-06-16 06:17:18
(1 day ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
ASN: 8075 (Microsoft Corpora ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
ASN: 8075 (Microsoft Corporation)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-06-16T05:49:38Z
Ray ID: a0c7884d9ab5e774
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)
show less
Bad Web Bot
🇹🇭
MWA SOC
2026-06-16 04:50:24
(1 day ago)
Hacking
🇳🇱
Site.eu
2026-06-16 01:58:05
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
n2nguyenn2nguyen
2026-06-15 12:43:09
(2 days ago)
Blocked by YFC Security on https://brixzly.com — type: rapid_scan_attempts
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 03:35:28
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 74.7.243.218 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 74.7.243.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:35:23.267891 2026] [security2:error] [pid 17027:tid 17027] [client 74.7.243.218:58146] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||36sovereignchambers.com|F|2"] [data ".arubabetcasinofrance.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "36sovereignchambers.com"] [uri "/2026/04/14/plongee-dans-lunivers-vibrant-daruba-bet-casino-en-ligne/www.arubabetcasinofrance.com"] [unique_id "ai9y-ybYhYQgQMbuFOnwTAAAAAc"], referer: https://36sovereignchambers.com/2026/04/14/plongee-dans-lunivers-vibrant-daruba-bet-casino-en-ligne/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-14 17:23:21
(3 days ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-06-13 20:53:34
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 74.7.243.218 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 74.7.243.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 16:53:28.770323 2026] [security2:error] [pid 24381:tid 24381] [client 74.7.243.218:58606] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.cajunpicasso.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.cajunpicasso.com"] [uri "/sunnyside-of-the-blues/[email protected] "] [unique_id "ai3DSK7CFTXQs0KSn5uwPAAAABY"], referer: http://www.cajunpicasso.com/gallery/sunnyside-of-the-blues
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
aranguren.org
2026-06-12 18:05:37
(5 days ago)
74.7.243.218 - - [13/Jun/2026:04:04:57 +1000] "GET /mirrorlist HTTP/2.0" 200 456 "https://private.ar ...
show more
74.7.243.218 - - [13/Jun/2026:04:04:57 +1000] "GET /mirrorlist HTTP/2.0" 200 456 "https://private.aranguren.org/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.243.218 - - [13/Jun/2026:04:05:08 +1000] "GET /Health/ HTTP/2.0" 200 452 "https://private.aranguren.org/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.243.218 - - [13/Jun/2026:04:05:23 +1000] "GET /Health/?C=N;O=D HTTP/2.0" 200 452 "https://private.aranguren.org/Health/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.243.218 - - [13/Jun/2026:04:05:24 +1000] "GET /Health/?C=S;O=A HTTP/2.0" 200 452 "https://private.aranguren.org/Health/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.243.218 - - [13/Jun/2026:04:05:36 +1000] "GET /Health/?C=N;O=A HTTP/2.0" 200 452 "https://private.
...
show less
Bad Web Bot
🇫🇷
masterguru
2026-06-12 17:29:36
(5 days ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.218 (US/United States/-): 1 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 74.7.243.218 (US/United States/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
Charlesiv
2026-06-12 12:08:50
(5 days ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
ASN: 8075 (Microsoft Corpora ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
ASN: 8075 (Microsoft Corporation)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-06-12T10:18:12Z
Ray ID: a0a81c330db0651a
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-12 12:04:29
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 74.7.243.218 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.243.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 08:04:22.046957 2026] [security2:error] [pid 3853:tid 3925] [client 74.7.243.218:36330] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.iancaird.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.iancaird.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aiv1xg5LDiSAiA4Im3n9NQAAAkQ"], referer: https://www.iancaird.com/author/admin/
show less
Brute-Force
Bad Web Bot
Web App Attack