🇩🇪
iNetWorker
2026-11-08 15:50:13
UTC ·
(5 days ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 12:16:23
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 74.7.227.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 08:16:17.082173 2026] [security2:error] [pid 11421:tid 11421] [client 74.7.227.157:37572] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 74.7.227.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 08:16:17.082173 2026] [security2:error] [pid 11421:tid 11421] [client 74.7.227.157:37572] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||phantomkennels.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "phantomkennels.com"] [uri "/[email protected] "] [unique_id "auM5Ed-unI6_YzqeTMVBNQAAABY"], referer: https://phantomkennels.com/stormsurge.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Charlesiv
2026-10-27 12:07:32
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
ASN: 8075 (Microsoft Corporation)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-10-27T11:25:18Z
Ray ID: a51156dd985a6118
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, li ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
ASN: 8075 (Microsoft Corporation)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-10-27T11:25:18Z
Ray ID: a51156dd985a6118
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)
show less
Bad Web Bot
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-10-27 01:32:23
UTC ·
(2 weeks ago)
[Mon Oct 26 19:28:11.132501 2026] [authz_core:error] [pid 2789:tid 140256878433856] [client 74.7.227.157:45284] AH01630: client denied by server configuration: /var/www/horde/
[Mon Oct 26 19:32:22.676709 2026] [authz_core:error] [pid 2721:tid 1402568 ...
show more
[Mon Oct 26 19:28:11.132501 2026] [authz_core:error] [pid 2789:tid 140256878433856] [client 74.7.227.157:45284] AH01630: client denied by server configuration: /var/www/horde/
[Mon Oct 26 19:32:22.676709 2026] [authz_core:error] [pid 2721:tid 140256886826560] [client 74.7.227.157:45914] AH01630: client denied by server configuration: /var/www/public_html/www/
[Mon Oct 26 19:32:22.681996 2026] [authz_core:error] [pid 2721:tid 140256886826560] [client 74.7.227.157:45914] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/RMBS-Server-Error.html
...
show less
Bad Web Bot
🇮🇹
CoreTech srl
2026-10-25 09:03:57
UTC ·
(2 weeks ago)
cloudlinux2 fail2ban: 2026-10-25 09:59:18,763 fail2ban.filter [1922]: INFO [plesk-modsecurity] Found 85.143.254.38 - 2026-10-25 09:59:18cloudlinux2 fail2ban: 2026-10-25 09:59:18,931 fail2ban.filter [1922]: INFO [plesk-modsecurit ...
show more
cloudlinux2 fail2ban: 2026-10-25 09:59:18,763 fail2ban.filter [1922]: INFO [plesk-modsecurity] Found 85.143.254.38 - 2026-10-25 09:59:18cloudlinux2 fail2ban: 2026-10-25 09:59:18,931 fail2ban.filter [1922]: INFO [plesk-modsecurity] Found 85.143.254.38 - 2026-10-25 09:59:18cloudlinux2 fail2ban: 2026-10-25 09:59:21,101 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 63.135.161.99 - 2026-10-25 09:59:20cloudlinux2 fail2ban: 2026-10-25 09:59:53,789 fail2ban.filter [1922]: INFO [plesk-modsecurity] Found 74.7.227.157 - 2026-10-25 09:59:53cloudlinux2 fail2ban: 2026-10-25 10:00:20,923 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 196.188.126.9 - 2026-10-25 10:00:19cloudlinux2 fail2ban: 2026-10-25 10:01:13,524 fail2ban.filter [1922]: INFO [plesk-apache] Found 213.160.71.82 - 2026-10-25 10:01:13cloudlinux2 fail2ban: 2026-10-25 10:01:35,603 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.132.227.77 - 2026-10-25 10:01:35cloudli
show less
Web App Attack
🇩🇪
milcraft.nl
2026-10-24 05:04:25
UTC ·
(2 weeks ago)
Repeated exploration of WordPress REST, GraphQL, feed, and author endpoints, typical of enumeration and scanner behavior. Activity is consistent with brute-force activity.
Hacking
Brute-Force
Bad Web Bot
🇺🇸
Charlesiv
2026-10-23 12:13:26
UTC ·
(3 weeks ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
ASN: 8075 (Microsoft Corporation)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-10-23T11:40:24Z
Ray ID: a4f0777ecd21135b
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
ASN: 8075 (Microsoft Corporation)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-10-23T11:40:24Z
Ray ID: a4f0777ecd21135b
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)
show less
Bad Web Bot
🇩🇪
milcraft.nl
2026-10-20 07:19:25
UTC ·
(3 weeks ago)
Repeated exploration of WordPress REST, GraphQL, feed, and author endpoints, typical of enumeration and scanner behavior. Activity is consistent with brute-force activity.
Hacking
Brute-Force
Bad Web Bot
🇩🇪
jbcrn
2026-10-20 01:00:19
UTC ·
(3 weeks ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: OpenAI, ruleset: ai.robots.txt. Requested honeypot path: /deflagration.secondly-hydrophobous/paviser-specimen/gos/prophylactical-polesetter/comment-uncognizable/chiffonier/packcloth/curuba- ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: OpenAI, ruleset: ai.robots.txt. Requested honeypot path: /deflagration.secondly-hydrophobous/paviser-specimen/gos/prophylactical-polesetter/comment-uncognizable/chiffonier/packcloth/curuba-sticheron/strike/benzanilide/content/parochialism-Numa/putredinal/listing/Croaker-talonid/caprifig/Mahdism/thereabove/guarder/brushlike/snaffle/syncline/stodgery/praiseful/nickeling/Arnebia-excerpt/unhonied/Alopiidae/Nachitoches/vitrine/megabar/thyreosis/unpartizan/dibenzyl-Corinna/cabana-antipeptone/worble-Sabbathism/detail-stovewood/saltatorian-buzzy/harlequinic-Djuka/photodromy/Zincalo/fifish-occasioner/Peruginesque/biparted/Centrotus/Hudsonia/downlie/goddessship-Thamnophis/Thraupidae-emptor/boondoggler-cat/debunker/ungown-umpirage/counsel/satisfy/sclerophyll-tag/pseudoataxia/unwaded/inolith-misreform/icterical-recoach/immensely/sell/chevi
show less
Bad Web Bot
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-10-19 15:02:11
UTC ·
(3 weeks ago)
[Sat Oct 17 13:13:21.760811 2026] [authz_core:error] [pid 174498:tid 139747958482496] [client 74.7.227.157:39494] AH01630: client denied by server configuration: proxy:h2://abstracts-rmbs.org/sitemap_index.xml
[Sun Oct 18 13:16:39.846093 2026] [authz ...
show more
[Sat Oct 17 13:13:21.760811 2026] [authz_core:error] [pid 174498:tid 139747958482496] [client 74.7.227.157:39494] AH01630: client denied by server configuration: proxy:h2://abstracts-rmbs.org/sitemap_index.xml
[Sun Oct 18 13:16:39.846093 2026] [authz_core:error] [pid 203070:tid 139747799021120] [client 74.7.227.157:59208] AH01630: client denied by server configuration: proxy:h2://abstracts-rmbs.org/sitemap_index.xml
[Mon Oct 19 09:02:11.143912 2026] [authz_core:error] [pid 365803:tid 139747757057600] [client 74.7.227.157:35530] AH01630: client denied by server configuration: proxy:h2://abstracts-rmbs.org/
...
show less
Bad Web Bot
🇳🇱
Site.eu
2026-10-19 03:14:14
UTC ·
(3 weeks ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Mangelot Hosting
2026-10-18 07:09:46
UTC ·
(3 weeks ago)
(php_404_scan) srv101 Missing PHP file scan 74.7.227.157 (US/United States/-): 20 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇳🇱
Site.eu
2026-10-17 10:48:00
UTC ·
(3 weeks ago)
Excessive multi-domain requests
Brute-Force
🇫🇮
paissangroup
2026-10-16 15:03:57
UTC ·
(4 weeks ago)
Multiple WAF Violations
Web App Attack
🇧🇪
cmbplf
2026-10-16 09:17:56
UTC ·
(4 weeks ago)
31.634 requests in 1 hour (1w6d22h)
Brute-Force
Bad Web Bot