🇺🇸
TPI-Abuse
2026-11-08 07:00:34
UTC ·
(19 hours ago)
(mod_security) mod_security (id:225170) triggered by 74.7.242.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 02:00:30.398177 2026] [security2:error] [pid 21653:tid 21653] [client 74.7.242.15:45540] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.242.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 02:00:30.398177 2026] [security2:error] [pid 21653:tid 21653] [client 74.7.242.15:45540] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lesdaniels.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lesdaniels.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "avAeDjmR95NmJcHsf-z4XwAAAAg"], referer: http://www.lesdaniels.com/author/admin/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
HamSammich
2026-11-05 12:27:36
UTC ·
(3 days ago)
Automated sensor: 2 HTTPS connection/probe attempts over the last 24h (latest 2026-11-05T12:27Z).
Port Scan
Web App Attack
🇵🇱
sefinek.net
2026-11-02 21:13:10
UTC ·
(6 days ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) • Generated by: github.com/sefinek ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
HamSammich
2026-11-02 18:53:14
UTC ·
(6 days ago)
Automated sensor: 2 HTTPS connection/probe attempts over the last 24h (latest 2026-11-02T18:53Z).
Port Scan
Web App Attack
🇺🇸
n2nguyenn2nguyen
2026-11-01 15:10:35
UTC ·
(1 week ago)
Blocked by YFC Security on https://1904.brixzly.com — type: rapid_scan_attempts
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 00:05:00
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 74.7.242.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 20:04:55.033306 2026] [security2:error] [pid 21656:tid 21656] [client 74.7.242.15:43042] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 74.7.242.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 20:04:55.033306 2026] [security2:error] [pid 21656:tid 21656] [client 74.7.242.15:43042] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sawyerwest.com|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sawyerwest.com"] [uri "/images/Checca Site/CheccaFamily.mdb"] [unique_id "auaCJ23mGoD2ez1JKsnB4wAAAAE"], referer: https://sawyerwest.com/images/Checca%20Site/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-31 23:10:02
UTC ·
(1 week ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 18:22:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 74.7.242.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:22:35.923217 2026] [security2:error] [pid 15283:tid 15283] [client 74.7.242.15:36804] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.242.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:22:35.923217 2026] [security2:error] [pid 15283:tid 15283] [client 74.7.242.15:36804] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||websitesforauthors.design|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "websitesforauthors.design"] [uri "/wp-json/wp/v2/users/1"] [unique_id "auOO68PXGTlYxo3NejVCQAAAAA4"], referer: https://websitesforauthors.design/author/admin/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
jbcrn
2026-10-28 19:04:15
UTC ·
(1 week ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: OpenAI, ruleset: ai.robots.txt. Requested honeypot path: /deflagration.forebush/unoffensively-manageable/cerviciplex-intersporal/news-lagwort/unvenom/Columbia-vallar/scruffy/unstammering/li ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: OpenAI, ruleset: ai.robots.txt. Requested honeypot path: /deflagration.forebush/unoffensively-manageable/cerviciplex-intersporal/news-lagwort/unvenom/Columbia-vallar/scruffy/unstammering/listing/precognize/heteratomic/gameless/petardeer-klom/nuncle/opinion/hawer/peritrochium-dimplement/standpatism-servulate/exclusive/goniatitoid-Nuda/pagoda/widdle-pretransact/darkish/paranoiac/unscanty/eurylaimoid/forward/fratchy/porule/bespeaker/Opuntiales/andiroba/sacropubic-private/coperta/ananaplas/forche/liable-comburivorous/subscribe-tongueplay/fetticus/Arnaut-accumbent/excerpt/tollgate/airhead/unoperatic/overvote/cuspid/Sphaeriidae-burgensic/marbler/story-adipsia/poetastrical/unpenned/windlessly/rodsman/apollonicon-zygon/un-Doradidae/Hohenzollernism-hooksmith/cubitodigital/federalism/de/Sobralia/nonpulmonary-unconstitutionality/springmak
show less
Bad Web Bot
Web App Attack
🇦🇹
Pingger Shikkoken
2026-10-26 21:35:38
UTC ·
(1 week ago)
2026-10-26T21:35:38+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=74.7.242.15 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=37 ID=36958 DF PROTO=TCP SPT=41352 DPT=443 WINDO ...
show more
2026-10-26T21:35:38+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=74.7.242.15 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=37 ID=36958 DF PROTO=TCP SPT=41352 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-26T21:35:39+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=74.7.242.15 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=37 ID=36959 DF PROTO=TCP SPT=41352 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-26T21:35:41+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=74.7.242.15 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=37 ID=36960 DF PROTO=TCP SPT=41352 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 ...
show less
Hacking
Bad Web Bot
2026-10-26 10:20:53
UTC ·
(1 week ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇮🇹
sentinel1
2026-10-23 10:19:40
UTC ·
(2 weeks ago)
Sentinel: [Honeypot] status=200 [GET] trap.nexus-orbital.com/ -> 200
Web App Attack
🇳🇱
Site.eu
2026-10-22 02:09:10
UTC ·
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
palzer.IT
2026-10-20 08:06:19
UTC ·
(2 weeks ago)
Report for plesk-apache-badbot: 74.7.242.15 - - [20/Oct/2026:10:06:16 +0200] GET /sitemap_index.xml [DOMAIN_REMOVED] 200 5953 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +[DOMAIN_REMOVED]
Bad Web Bot
🇮🇹
eliosbrocchi
2026-10-19 11:30:45
UTC ·
(2 weeks ago)
74.7.242.15 - - [19/Oct/2026:13:30:44 +0200] "GET / HTTP/2.0" 401 372 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
...
VPN IP
