🇵🇱
MatStef132
2026-11-15 05:21:27
UTC ·
(4 hours ago)
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
DDoS Attack
🇵🇱
MatStef132
2026-11-12 15:12:37
UTC ·
(2 days ago)
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
DDoS Attack
🇺🇸
IndigoRidge
2026-11-12 13:35:37
UTC ·
(2 days ago)
2026-11-12T08:35:36-0500 DRANNA QUERY GUARD vhost=drannagarrett.com client=161.120.183.147 reason=recursive-vd request="GET /gut-health-and-perimenopause?_vd=8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3F_vd%3D8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3F_vd%3D8g0vDzjO7ipZmu9T ...
show more
2026-11-12T08:35:36-0500 DRANNA QUERY GUARD vhost=drannagarrett.com client=161.120.183.147 reason=recursive-vd request="GET /gut-health-and-perimenopause?_vd=8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3F_vd%3D8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3F_vd%3D8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3F_vd%3D8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3Ftracking1%3DSMS%2Fpage%2F9page%2F2page%2F8page%2F8page%2F2%3Ftracking1%3DSMS%2Fpage%2F9page%2F2page%2F8page%2F8page%2F2%3Ftracking1%3DSMS%2Fpage%2F9page%2F2page%2F8page%2F8page%2F2%3Ftracking1%3DSMS%2Fpage%2F9page%2F2page%2F8page%2F8page%2F2page%2F8page%2F2page%2F2page%2F8page%2F8page%2F2page%2F3page%2F8page%2F8page%2F2page%2F3page%2F3page%2F2page%2F3page%2F8page%2F8page%2F3page%2F2page%2F8page%2F8page%2F8page%2F2page%2F8page%2F3page%2F2page%2F3page%2F2page%2F2page%2F8page%2F8page%2F2page%2F8page%2F8page%2F8page%2F3page%2F2page%2F2page%2F2page%2F8page%2F2page%2F2page%2F2page%2F3page%2F8page%2F8page%2F2page%2F3page%2F3page%2F2page%2F2page%2F8page%2F8page/2 HTTP/1.1" referer="-" ua="Mozill
...
show less
Web App Attack
🇵🇱
MatStef132
2026-11-11 10:54:47
UTC ·
(3 days ago)
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
DDoS Attack
🇩🇪
LRob
2026-11-11 09:43:45
UTC ·
(3 days ago)
Not following 301 redirects — wasted requests | method: GET | path: /2021/06/ | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 | src_port: 40248 | 2026-11-11 09:43 UTC
Bad Web Bot
🇨🇦
1gz
2026-11-11 00:25:40
UTC ·
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/kim-mehmeti-the-painters-albania-looks-as-if-it-is-the-homeland-of-serbs-not-albanians/958662/amp
UA: Mozilla/5.0 (Windows NT 10 ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/kim-mehmeti-the-painters-albania-looks-as-if-it-is-the-homeland-of-serbs-not-albanians/958662/amp
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
Tilellit.PRO
2026-11-10 06:25:41
UTC ·
(5 days ago)
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
🇺🇸
1gz
2026-11-04 05:50:00
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/sarkozi/feed
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/sarkozi/feed
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
PTScreens
2026-11-03 12:36:07
UTC ·
(1 week ago)
Headless browser crawler on an image host: 611 page requests on 2026-11-03 as part of a rotating-IP scrape (~1M requests/day across ~1,800 cloud IPs).
Bad Web Bot
🇺🇸
kosada.com
2026-11-03 07:44:42
UTC ·
(1 week ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=81&topics%5B2%5D=64&topics%5B3%5D=50 GET /[redacted]?topics%5B1%5D=81&topics%5B2%5D=64&topics%5B3%5D=50 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=81&topics%5B2%5D=64&topics%5B3%5D=50 GET /[redacted]?topics%5B1%5D=81&topics%5B2%5D=64&topics%5B3%5D=50 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇩🇪
LRob
2026-11-03 05:55:15
UTC ·
(1 week ago)
Not following 301 redirects — wasted requests | method: GET | path: /produit/strasbourg-16-novembre-2026 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 | 2026-11-03 05:55 UTC
Bad Web Bot
🇺🇸
1gz
2026-11-03 02:39:30
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/kosovo-and-the-european-investment-bank-seal-cooperation-for-public-hospitals-kurti-meets-with-eib-vice-president/1051345
UA: Mozi ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/kosovo-and-the-european-investment-bank-seal-cooperation-for-public-hospitals-kurti-meets-with-eib-vice-president/1051345
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
1gz
2026-11-03 00:05:37
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-json/oembed/1.0/embed
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/53 ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-json/oembed/1.0/embed
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
1gz
2026-11-02 02:44:52
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
This report was ge ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
1gz
2026-10-31 01:12:56
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /maqedoni/mickoski-maqedonia-do-ta-lidhe-terminalin-e-aleksandropolit-me-evropen-qendrore/1018721/
UA: Mozilla/5.0 (Windows NT 10.0; Win6 ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /maqedoni/mickoski-maqedonia-do-ta-lidhe-terminalin-e-aleksandropolit-me-evropen-qendrore/1018721/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
