🇩🇪
hero2026
2026-11-12 22:30:52
UTC ·
(1 day ago)
Blocked by Fail2ban
Web App Attack
2026-11-10 23:08:24
UTC ·
(3 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
2026-11-10 22:14:24
UTC ·
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-11-03 12:29:13
UTC ·
(1 week ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 02:37:41
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 74.7.227.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:37:34.898806 2026] [security2:error] [pid 13969:tid 13969] [client 74.7.227.42:57670] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.227.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:37:34.898806 2026] [security2:error] [pid 13969:tid 13969] [client 74.7.227.42:57670] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.tckgbookkeeping.biz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tckgbookkeeping.biz"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aulI7rG8v16NZNTPwHp3LwAAAAQ"], referer: http://www.tckgbookkeeping.biz/author/admin/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-02 01:26:42
UTC ·
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇧🇪
cmbplf
2026-10-23 19:01:05
UTC ·
(3 weeks ago)
22.132 requests in 1 hour (1w6d22h)
Brute-Force
Bad Web Bot
2026-10-22 06:16:15
UTC ·
(3 weeks ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇺🇸
IndigoRidge
2026-10-20 07:15:17
UTC ·
(3 weeks ago)
74.7.227.42 - - [20/Oct/2026:03:15:12 -0400] "GET /author/scg/ HTTP/1.1" 200 71742 "https://mountaindiscovery.org/authors-sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.227.4 ...
show more
74.7.227.42 - - [20/Oct/2026:03:15:12 -0400] "GET /author/scg/ HTTP/1.1" 200 71742 "https://mountaindiscovery.org/authors-sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.227.42 - - [20/Oct/2026:03:15:13 -0400] "GET /author/5g/ HTTP/1.1" 200 71402 "https://mountaindiscovery.org/authors-sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.227.42 - - [20/Oct/2026:03:15:14 -0400] "GET /author/mag/ HTTP/1.1" 200 71687 "https://mountaindiscovery.org/authors-sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.227.42 - - [20/Oct/2026:03:15:15 -0400] "GET /author/kg/ HTTP/1.1" 200 71429 "https://mountaindiscovery.org/authors-sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.227.42 - - [20/Oct/2026:03:15:16 -040
...
show less
Web App Attack
🇳🇱
Site.eu
2026-10-19 01:18:38
UTC ·
(3 weeks ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Site.eu
2026-10-17 01:29:59
UTC ·
(4 weeks ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
LSPCCU
2026-10-15 17:04:14
UTC ·
(4 weeks ago)
TSEC Honeypot Network report. Threat score: 70/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: h0neytr4p. Context: 74.7.227.42 classified as botnet node participating in coordinated attack campaigns (high ...
show more
TSEC Honeypot Network report. Threat score: 70/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: h0neytr4p. Context: 74.7.227.42 classified as botnet node participating in coordinated attack campaigns (high confidence).
show less
DDoS Attack
Port Scan
Hacking
Brute-Force
Web App Attack
SSH
🇩🇪
palzer.IT
2026-10-15 04:50:16
UTC ·
(4 weeks ago)
Fail2ban automatic report for plesk-apache-badbot: 74.7.227.42 - - [27/Sep/2026:04:06:58 +0200] GET /sitemap_index.xml [DOMAIN_REMOVED] 200 5892 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +[DOMAIN_REMOVED]
Bad Web Bot
🇺🇸
webgobe
2026-10-12 00:34:40
UTC ·
(1 month ago)
nse-88 : Bloc AI bots=>/(ai.)
Hacking
🇺🇸
TPI-Abuse
2026-10-11 01:30:38
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 74.7.227.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:30:33.250419 2026] [security2:error] [pid 28069:tid 28069] [client 74.7.227.42:41782] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 74.7.227.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:30:33.250419 2026] [security2:error] [pid 28069:tid 28069] [client 74.7.227.42:41782] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aavondalervstorage.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aavondalervstorage.com"] [uri "/aavondalepetboarding.com"] [unique_id "asrmuVZ1ztA3eLx5RQZW-QAAAAs"], referer: https://aavondalervstorage.com/pricing.html
show less
Brute-Force
Bad Web Bot
Web App Attack
