🇫🇮
stinpriza
2026-02-09 03:19:41
(3 months ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 00:07:19
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 74.7.241.33 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.241.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 19:07:13.782427 2026] [security2:error] [pid 24694:tid 24704] [client 74.7.241.33:57950] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.greaternorthmiamihistory.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.greaternorthmiamihistory.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aYklMS4yhTr09wH6I2j44QAAAIY"], referer: https://www.greaternorthmiamihistory.org/author/admin/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-08 21:05:06
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 74.7.241.33 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 74.7.241.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 16:05:01.053525 2026] [security2:error] [pid 4016:tid 4016] [client 74.7.241.33:38010] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vividlee.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vividlee.com"] [uri "/2024/7/2024_Update.bak"] [unique_id "aYj6fZL7jpP4El4RPDKZuAAAAAg"], referer: http://www.vividlee.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-08 20:00:10
(3 months ago)
Aggressive Robot or Attack DDOS
DDoS Attack
🇫🇷
claude CALVET
2026-02-08 18:25:34
(3 months ago)
gew-Joomla User : try to access forms...
Hacking
🇦🇹
Pingger Shikkoken
2026-02-08 10:41:02
(3 months ago)
2026-02-08T10:41:02+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ...
show more
2026-02-08T10:41:02+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=74.7.241.33 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=17961 DF PROTO=TCP SPT=44340 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-02-08T10:41:03+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=74.7.241.33 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=17962 DF PROTO=TCP SPT=44340 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-02-08T10:41:05+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=74.7.241.33 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=17963 DF PROTO=TCP SPT=44340 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 ...
show less
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-07 14:00:12
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 74.7.241.33 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 74.7.241.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 09:00:05.063633 2026] [security2:error] [pid 10510:tid 10510] [client 74.7.241.33:59410] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.williams-rodriguez.org|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.williams-rodriguez.org"] [uri "/wp-content/plugins/wp-forecast/icons/Thumbs.db"] [unique_id "aYdFZaZPuJUZIPjrJkU9aAAAAAY"], referer: http://www.williams-rodriguez.org/wp-content/plugins/wp-forecast/icons/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-06 21:46:13
(3 months ago)
Blocking for trying to access an exploit file: /myagent.site
Hacking
2026-02-04 21:54:59
(3 months ago)
(mod_security) mod_security triggered on hostname [redacted] 74.7.241.33 (US/United States/-)
SQL Injection
🇬🇧
blik2108
2026-02-03 21:16:40
(4 months ago)
blog.blacknellsatsea.co.uk:443 74.7.241.33 - - [03/Feb/2026:21:16:24 +0000] "GET /wp-login.php?redir ...
show more
blog.blacknellsatsea.co.uk:443 74.7.241.33 - - [03/Feb/2026:21:16:24 +0000] "GET /wp-login.php?redirect_to=http%3A%2F%2Fblog.blacknellsatsea.co.uk HTTP/1.1" 200 7131 "https://blog.blacknellsatsea.co.uk/about/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
blog.blacknellsatsea.co.uk:80 74.7.241.33 - - [03/Feb/2026:21:16:32 +0000] "GET /wp-login.php?action=register HTTP/1.1" 301 647 "https://blog.blacknellsatsea.co.uk" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
blog.blacknellsatsea.co.uk:443 74.7.241.33 - - [03/Feb/2026:21:16:32 +0000] "GET /wp-login.php?action=register HTTP/1.1" 302 627 "http://blog.blacknellsatsea.co.uk" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
blog.blacknellsatsea.co.uk:443 74.7.241.33 - - [03/Feb/2026:21:16:33 +0000] "GET /wp-login.php?registration=disabled HTTP/1.1" 200 3836 "https://
...
show less
Brute-Force
Web App Attack
🇫🇷
mrcrassi
2026-01-30 00:29:02
(4 months ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-27 00:25:23
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 74.7.241.33 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.241.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 19:25:19.491451 2026] [security2:error] [pid 18954:tid 18954] [client 74.7.241.33:48460] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ink2wear.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ink2wear.com"] [uri "/wp/wp-json/wp/v2/users/1"] [unique_id "aXgF7xpFgrTokcm9pgazEQAAAAk"], referer: https://ink2wear.com/wp/blog/author/admin/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-01-25 01:16:24
(4 months ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
nodepile
2026-01-23 01:49:29
(4 months ago)
Requests denied due to active blacklist hits (tenant=82 method=GET path=/review/product/listAjax/id/ ...
show more
Requests denied due to active blacklist hits (tenant=82 method=GET path=/review/product/listAjax/id/66868/ ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)')
show less
Exploited Host
Web App Attack
🇳🇱
Site.eu
2026-01-22 15:14:03
(4 months ago)
Excessive multi-domain requests
Brute-Force