🇸🇪
KIDOS
2026-06-13 03:55:03
(5 days ago)
malicious activity
Web App Attack
🇪🇸
el-brujo
2026-06-12 02:46:56
(6 days ago)
Cloudflare WAF: Request Path: /multimedia/como-ver-peliculas-en-mi-compu-de-diferentes-formatos/msg3 ...
show more
Cloudflare WAF: Request Path: /multimedia/como-ver-peliculas-en-mi-compu-de-diferentes-formatos/msg378591/ Request Query: ?PHPSESSID=jaqhk0hccrph8b8in29sl4l759 Host: forum.elhacker.net userAgent: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 6.0; Trident/4.1) Action: log Source: firewallManaged ASN Description: PT Internet Tjepat Indonesia Country: ID Method: GET Timestamp: 2026-06-12T02:46:56Z ruleId: 017d4edd6754438087991348543c4667. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇯🇵
VXG-NET
2026-06-09 06:22:11
(1 week ago)
port=1433, indicator_type=scan
Port Scan
🇬🇧
Silly Development
2026-06-06 15:05:09
(1 week ago)
Malicious activity detected from 152348 PT Internet Tjepat Indonesia towards host sillydev.co.uk (GE ...
show more
Malicious activity detected from 152348 PT Internet Tjepat Indonesia towards host sillydev.co.uk (GET HTTP/2) @ 2026-06-06T15:05:09Z (36 occurrences)
show less
DDoS Attack
Exploited Host
🇸🇬
volcaryx
2026-06-01 08:06:11
(2 weeks ago)
Cloudflare detected an L7 DDoS attack (l7ddos) from ID.
Action: BLOCK | Protocol: HTTP/2 (GET) | End ...
show more
Cloudflare detected an L7 DDoS attack (l7ddos) from ID.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: / | UA: Browser46/50.0 (Device64; Solaris) Engine41/33.0 (KHTML, like Gecko) Feature26/18.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
DDoS Attack
Bad Web Bot
🇷🇴
Fn4ticHz
2026-05-29 02:46:30
(2 weeks ago)
DDoS blocked via ZeroGuard.ID
DDoS Attack
Exploited Host
🇫🇷
MatStef132
2026-05-22 14:04:44
(3 weeks ago)
MatShield L7: blocked on mathost.eu (ua-quarantined)
Bad Web Bot
🇷🇴
Fn4ticHz
2026-05-09 14:14:25
(1 month ago)
Repeated DDoS targeted -- ZeroGuard X ManagedSRV
DDoS Attack
Exploited Host
🇪🇸
el-brujo
2026-05-04 02:39:21
(1 month ago)
Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh ...
show more
Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: PT Internet Tjepat Indonesia Country: ID Method: GET Timestamp: 2026-05-04T02:39:21Z ruleId: 9bc0d8e988e545dea9bd4843c4bef55c. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇯🇵
VXG-NET
2026-04-30 11:50:51
(1 month ago)
port=1433, indicator_type=scan
Port Scan
🇮🇹
VHosting
2026-04-26 09:07:44
(1 month ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇮🇹
VHosting
2026-04-10 05:17:19
(2 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇨🇦
1gz
2026-02-20 13:06:54
(3 months ago)
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET met ...
show more
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/138.0 Mobile/15E148 Safari/605.1.15
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇮🇩
hermawan
2026-02-14 04:09:07
(4 months ago)
[Sat Feb 14 11:08:19.904386 2026] [security2:error] [pid 12084:tid 140192519272128] [client 157.10.1 ...
show more
[Sat Feb 14 11:08:19.904386 2026] [security2:error] [pid 12084:tid 140192519272128] [client 157.10.184.115:42333] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ?id= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/component/content/article?id=78:actinograph HTTP/2.0 Request URI RAW = /index.php/component/content/article?id=78:actinograph Request Basename = article"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/content/article"] [unique_id "aY_1MxPT3OgTTzDOb62npwAAVQc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[12092] [B5CG3gAKezc] [aY_1MxPT3OgTTzDOb62npwAAVQc] keep_alive=[1] [2026-02-14 11:0
...
show less
Hacking
Web App Attack