🇺🇸
TPI-Abuse
2025-11-06 00:00:34
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 74.7.227.53 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 74.7.227.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 19:00:24.171218 2025] [security2:error] [pid 3330:tid 3330] [client 74.7.227.53:42948] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||genesis-castle.com|F|2"] [data ".ini.ea3.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "genesis-castle.com"] [uri "/php.ini.ea3.bak"] [unique_id "aQvlGIjQqLq5v-TrmBSEwQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-05 10:11:14
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 74.7.227.53 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.227.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 05:11:07.835008 2025] [security2:error] [pid 1191:tid 1191] [client 74.7.227.53:33938] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bayareamustangs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bayareamustangs.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aQsiu5a0xwnF1X1bOo6z0AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2025-11-05 09:54:02
(6 months ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Site.eu
2025-11-04 09:49:41
(7 months ago)
Excessive multi-domain requests
Brute-Force
🇷🇺
6o6ep
2025-11-03 20:25:12
(7 months ago)
Automatic report from firewall log
Port Scan
Hacking
Web App Attack
🇷🇺
6o6ep
2025-11-02 21:42:59
(7 months ago)
Automatic report from firewall log
Port Scan
Hacking
Web App Attack
🇫🇷
mrcrassi
2025-11-02 04:35:16
(7 months ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇷🇺
6o6ep
2025-11-01 14:29:02
(7 months ago)
Automatic report from firewall log
Port Scan
Hacking
Web App Attack
🇳🇱
i-turnradio.nl
2025-11-01 08:29:07
(7 months ago)
2025-11-01 @ 09:29:07 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
2025-10-31 13:30:00
(7 months ago)
Web Attack HTTP Request Pipeline Evasion Found
Web App Attack
🇺🇸
TPI-Abuse
2025-10-30 09:11:49
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 74.7.227.53 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.227.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 05:11:42.844868 2025] [security2:error] [pid 8160:tid 8160] [client 74.7.227.53:39340] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||michaelthompson.biz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "michaelthompson.biz"] [uri "/index.php/wp-json/wp/v2/users/1"] [unique_id "aQMrzgoXoC_aCDfXSlEm5QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-30 06:13:35
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 74.7.227.53 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.227.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 02:13:30.663067 2025] [security2:error] [pid 1040036:tid 1040036] [client 74.7.227.53:40730] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sharawi-gum.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sharawi-gum.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aQMCCqJ1Gmw_8EtvD-neRQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-30 05:35:21
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 74.7.227.53 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.227.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 01:35:17.895016 2025] [security2:error] [pid 21065:tid 21065] [client 74.7.227.53:52218] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.directcch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.directcch.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aQL5FeOB9ooz1pVPaFpASgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Kimax
2025-10-30 05:27:20
(7 months ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
TPI-Abuse
2025-10-30 04:09:18
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 74.7.227.53 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.227.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 00:09:11.455224 2025] [security2:error] [pid 15863:tid 15880] [client 74.7.227.53:54940] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.dbestcarting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.dbestcarting.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aQLk53W3As_u_v9Hoe_cagAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack