2026-11-14 05:52:02
UTC ·
(14 hours ago)
Malicious activity detected
Hacking
Web App Attack
2026-11-14 03:37:36
UTC ·
(16 hours ago)
Automated vulnerability scanning.
Hacking
🇺🇸
TPI-Abuse
2026-11-06 10:08:32
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 74.7.227.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:08:25.539814 2026] [security2:error] [pid 14646:tid 14646] [client 74.7.227.129:42116] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 74.7.227.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:08:25.539814 2026] [security2:error] [pid 14646:tid 14646] [client 74.7.227.129:42116] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||comics.flyingdodostudio.com|F|2"] [data ".egressstudiopress.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "comics.flyingdodostudio.com"] [uri "/thefirebreather/www.egressstudiopress.com"] [unique_id "au2nGWDMeaIk25P_FA6rxAAAAAU"], referer: http://comics.flyingdodostudio.com/thefirebreather/aboutcomic.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ArturShelby
2026-11-04 20:46:45
UTC ·
(1 week ago)
Path traversal attempt: /blink-e%E2%80%8Bscarpins-talons-10-cm-bleu-tur%E2%80%8Bquoise-p-14939.html
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 02:58:46
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 74.7.227.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:58:43.164407 2026] [security2:error] [pid 23385:tid 23385] [client 74.7.227.129:53640] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.227.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:58:43.164407 2026] [security2:error] [pid 23385:tid 23385] [client 74.7.227.129:53640] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rame.marklex.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rame.marklex.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aulN44x0E3sLynAFWYR5rQAAAAY"], referer: https://rame.marklex.com/author/admin/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
mk-dizajn.hr
2026-11-01 16:51:46
UTC ·
(1 week ago)
$f2bV_matches
Brute-Force
🇺🇸
TPI-Abuse
2026-11-01 03:26:25
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 74.7.227.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 23:26:17.726230 2026] [security2:error] [pid 13972:tid 13972] [client 74.7.227.129:33148] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.227.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 23:26:17.726230 2026] [security2:error] [pid 13972:tid 13972] [client 74.7.227.129:33148] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||giganticmediallc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "giganticmediallc.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "auaxWTE4ZHJXi0MCY9XPGQAAAAw"], referer: https://giganticmediallc.com/author/kwebdesigneradmin/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 10:42:49
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 74.7.227.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 06:42:44.046415 2026] [security2:error] [pid 6272:tid 6272] [client 74.7.227.129:59204] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 74.7.227.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 06:42:44.046415 2026] [security2:error] [pid 6272:tid 6272] [client 74.7.227.129:59204] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||greatchristianadventure.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "greatchristianadventure.com"] [uri "/wp-json/wp/v2/users/2"] [unique_id "auR0pGlZMS4Y3oA-waG1yQAAAB0"], referer: https://greatchristianadventure.com/author/paul-woodington/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-28 17:37:27
UTC ·
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇫🇷
security.rdmc.fr
2026-10-28 10:35:30
UTC ·
(2 weeks ago)
Activity from blacklisted IP
Hacking
2026-10-27 09:56:46
UTC ·
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-10-27 09:00:13
UTC ·
(2 weeks ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇫🇷
mrcrassi
2026-10-27 01:04:58
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /produto/lamina-de-aco-meia-cana-fechada/
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.c ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /produto/lamina-de-aco-meia-cana-fechada/
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
palzer.IT
2026-10-26 21:55:27
UTC ·
(2 weeks ago)
Report for plesk-apache-badbot: 74.7.227.129 - - [26/Oct/2026:22:55:20 +0100] GET / [DOMAIN_REMOVED] 200 5490 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +[DOMAIN_REMOVED]
Bad Web Bot
2026-10-25 17:32:01
UTC ·
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
