2026-11-06 20:35:07
UTC ·
(2 days ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇮🇹
CoreTech srl
2026-11-01 13:35:45
UTC ·
(1 week ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact
Hacking
🇺🇸
technojoe99
2026-11-01 03:00:20
UTC ·
(1 week ago)
Exploit scan from 74.7.242.40. GET /a HTTP/1.1.
Web App Attack
🇺🇸
cwytech
2026-10-31 15:22:26
UTC ·
(1 week ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.
Bad Web Bot
Web App Attack
🇫🇷
conseilgouz
2026-10-31 09:39:56
UTC ·
(1 week ago)
upe-88 : Bloc AI bots=>/(ai.)
Hacking
🇩🇪
ghostwarriors
2026-10-30 16:50:14
UTC ·
(1 week ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
SpamStopper
2026-10-30 16:46:16
UTC ·
(1 week ago)
Fail2Ban - WordPress Bruteforce and Badbots
Hacking
Bad Web Bot
🇺🇸
cwytech
2026-10-29 16:36:07
UTC ·
(1 week ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-10-29 07:03:34
UTC ·
(1 week ago)
31.850 requests in 1 hour (1w6d23h)
Brute-Force
Bad Web Bot
🇫🇷
security.rdmc.fr
2026-10-27 04:39:48
UTC ·
(1 week ago)
Activity from blacklisted IP
Hacking
🇪🇸
masterguru
2026-10-21 23:37:01
UTC ·
(2 weeks ago)
BAD BOT - Detected and Blocked.. Matched phrase "GPTBot" at REQUEST_HEADERS:user-agent. (1100000-122)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-21 17:33:54
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 74.7.242.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 13:33:49.686664 2026] [security2:error] [pid 23545:tid 23545] [client 74.7.242.40:60540] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 74.7.242.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 13:33:49.686664 2026] [security2:error] [pid 23545:tid 23545] [client 74.7.242.40:60540] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.settummanque.net.scoutinsignia.com|F|2"] [data ".coffeecup.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.settummanque.net.scoutinsignia.com"] [uri "/www.coffeecup.com"] [unique_id "atj3fVaVC465bxgiVX41xQAAAB4"], referer: https://www.settummanque.net.scoutinsignia.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 18:30:10
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 74.7.242.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 14:30:04.472462 2026] [security2:error] [pid 26838:tid 26838] [client 74.7.242.40:52624] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.242.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 14:30:04.472462 2026] [security2:error] [pid 26838:tid 26838] [client 74.7.242.40:52624] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||greatchristianadventure.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "greatchristianadventure.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "atezLFnqbKrXa0hTi2UITgAAAAU"], referer: https://greatchristianadventure.com/author/erinu/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
jbcrn
2026-10-18 15:53:29
UTC ·
(3 weeks ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: OpenAI, ruleset: ai.robots.txt. Requested honeypot path: /deflagration.chawan-lenth/withypot-spiritualistically/overglad-chandlery/underbillow-subscribe/Slavonism/coinmaker/causeful-volumin ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: OpenAI, ruleset: ai.robots.txt. Requested honeypot path: /deflagration.chawan-lenth/withypot-spiritualistically/overglad-chandlery/underbillow-subscribe/Slavonism/coinmaker/causeful-voluminously/Samaritan/news-aromatophor/Kakan/heretoga/amentaceous/disanimal/lively/content/eely/sapropel/unlugged/Bandhor/armarium-ammochryse/tapasvi/regnancy-sunburst/hygrology/pilikai-semiconnate/riroriro/bausond/normativeness-story/declensional-mykiss/Vogul/subsolid-sellably/titanic/tautomerism-remanage/maniple/albarello/sarrusophone/Zenaida-Betta/ringwall-pratensian/surround/funduline/reconcede-backcap/snapy-pulmonectomy/unfined/format-Actaeon/Rembrandt/unplanked/teloptic/Kantism/coinspire/houndish/proclergy/fearful/donatary-guardant/excerpt-mesmerizability/unbar/cyanuret/paroecism-multanimous/teck-calciferous/oscule/confelicity-rollable/spear/
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-17 20:00:17
UTC ·
(3 weeks ago)
Excessive multi-domain requests
Brute-Force
