🇵🇱
sefinek.net
2026-04-24 04:27:21
UTC ·
(6 months ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /booru/artist/Runawaykids | UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) • Generated by: github.co ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /booru/artist/Runawaykids | UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2026-04-24 01:37:15
UTC ·
(6 months ago)
(resource-exhaustion) Server-wide Bot Block Heavy URL: filter_ 2a03:2880:f806:27:: (US/United States/-)
Hacking
🇺🇸
鬼影233
2026-04-24 00:23:36
UTC ·
(6 months ago)
meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-23 06:30:28
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:27:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 02:30:20.100993 2026] [security2:error] [pid 17550:tid 17550] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:27:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 02:30:20.100993 2026] [security2:error] [pid 17550:tid 17550] [client 2a03:2880:f806:27:::31268] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||naturessecretresort.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "naturessecretresort.com"] [uri "/naturessecretresort.com"] [unique_id "aem8fEXUKbMoZYTycQG6JgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-22 23:49:39
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:27:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 19:49:32.622720 2026] [security2:error] [pid 2917516:tid 2917516] [client 2a03:2 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:27:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 19:49:32.622720 2026] [security2:error] [pid 2917516:tid 2917516] [client 2a03:2880:f806:27:::61142] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.civilwarzone.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "aelejFJv0t6ha-wZBxO_8AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-21 22:56:44
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:27:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 18:56:40.767962 2026] [security2:error] [pid 4165201:tid 4165201] [client 2a03:2 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:27:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 18:56:40.767962 2026] [security2:error] [pid 4165201:tid 4165201] [client 2a03:2880:f806:27:::63530] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||z-industrial.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "z-industrial.com"] [uri "/z-industrial.com"] [unique_id "aegAqJA5II0XzBWDSzP9uwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
london2038.com
2026-04-21 19:05:32
UTC ·
(6 months ago)
Too many failed requests
2a03:2880:f806:27:: - - [21/Apr/2026:18:44:27 +0200] "GET /User:DeannaLoewenthal HTTP/2.0" 404 10228 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [21/ ...
show more
Too many failed requests
2a03:2880:f806:27:: - - [21/Apr/2026:18:44:27 +0200] "GET /User:DeannaLoewenthal HTTP/2.0" 404 10228 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [21/Apr/2026:19:18:35 +0200] "GET /User:DeneenBandy740 HTTP/2.0" 404 10192 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [21/Apr/2026:19:33:08 +0200] "GET /User:DenishaCollee45 HTTP/2.0" 404 10210 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [21/Apr/2026:19:42:06 +0200] "GET /User:DillonDelatorre HTTP/2.0" 404 10210 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [21/Apr/2026:19:50:11 +0200] "GET /User:DenishaBindon86 HTTP/2.0" 404 10210 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:
...
show less
Web Spam
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-19 09:14:45
UTC ·
(6 months ago)
(mod_security) mod_security (id:240950) triggered by 2a03:2880:f806:27:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 05:14:41.556541 2026] [security2:error] [pid 2707882:tid 2707882] [client 2a03:2 ...
show more
(mod_security) mod_security (id:240950) triggered by 2a03:2880:f806:27:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 05:14:41.556541 2026] [security2:error] [pid 2707882:tid 2707882] [client 2a03:2880:f806:27:::46636] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)||beckersystems.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "beckersystems.net"] [uri "/beckerwiki/index.php"] [unique_id "aeSdAXsXoxz0jdwyT_4efwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
london2038.com
2026-04-17 17:56:50
UTC ·
(6 months ago)
Too many failed requests
2a03:2880:f806:27:: - - [17/Apr/2026:16:11:28 +0200] "GET /User:ColumbusZelaya HTTP/2.0" 404 10192 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [17/Ap ...
show more
Too many failed requests
2a03:2880:f806:27:: - - [17/Apr/2026:16:11:28 +0200] "GET /User:ColumbusZelaya HTTP/2.0" 404 10192 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [17/Apr/2026:16:27:02 +0200] "GET /User:ClevelandBeaudoi HTTP/2.0" 404 10228 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [17/Apr/2026:16:28:25 +0200] "GET /User:ClemmieLycett29 HTTP/2.0" 404 10210 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [17/Apr/2026:16:30:56 +0200] "GET /User:CleoSpivakovsky HTTP/2.0" 404 10210 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [17/Apr/2026:17:44:47 +0200] "GET /User:CalebBastow934 HTTP/2.0" 404 10192 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:2
...
show less
Web Spam
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-17 13:02:07
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:27:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 09:02:00.679020 2026] [security2:error] [pid 2292357:tid 2292361] [client 2a03:2 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:27:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 09:02:00.679020 2026] [security2:error] [pid 2292357:tid 2292361] [client 2a03:2880:f806:27:::36032] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gelatoconsapevole.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gelatoconsapevole.com"] [uri "/gelatoconsapevole.com"] [unique_id "aeIvSLm1B0jgfD9Zf_udBQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
london2038.com
2026-04-17 03:09:26
UTC ·
(6 months ago)
Too many failed requests
2a03:2880:f806:27:: - - [17/Apr/2026:02:46:39 +0200] "GET /User:CarriSeagle469 HTTP/2.0" 404 10192 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [17/Ap ...
show more
Too many failed requests
2a03:2880:f806:27:: - - [17/Apr/2026:02:46:39 +0200] "GET /User:CarriSeagle469 HTTP/2.0" 404 10192 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [17/Apr/2026:02:55:28 +0200] "GET /User:CarolinePainter HTTP/2.0" 404 10210 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [17/Apr/2026:03:02:07 +0200] "GET /User:RaquelMactier27 HTTP/2.0" 404 10210 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [17/Apr/2026:03:16:24 +0200] "GET /User:AureliaMcmanus HTTP/2.0" 404 10192 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27:: - - [17/Apr/2026:03:16:43 +0200] "GET /User:AundreaTaverner HTTP/2.0" 404 10210 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:27
...
show less
Web Spam
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-16 21:01:11
UTC ·
(6 months ago)
(mod_security) mod_security (id:213060) triggered by 2a03:2880:f806:27:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 17:01:05.159151 2026] [security2:error] [pid 1098030:tid 1098030] [client 2a03:2 ...
show more
(mod_security) mod_security (id:213060) triggered by 2a03:2880:f806:27:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 17:01:05.159151 2026] [security2:error] [pid 1098030:tid 1098030] [client 2a03:2880:f806:27:::38572] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)((?:\\\\bx(?:link:href|html|mlns)|!ENTITY\\\\b.{0,399}?\\\\b(?:SYSTEM|PUBLIC)|\\\\bdata:text\\\\/html))" at ARGS:_bd_prev_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "170"] [id "213060"] [rev "7"] [msg "COMODO WAF: XSS Filter - Category 3: Attribute Vector||essentialee.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "essentialee.com"] [uri "/"] [unique_id "aeFOEYT1gBlKH5o6cZ4fqgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-04-14 00:10:24
UTC ·
(6 months ago)
meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Bad Web Bot
🇺🇸
ambor
2026-04-12 10:08:04
UTC ·
(6 months ago)
Attack type: wordpress_attack_attempt | Target: /robots.txt | UA: facebookexternalhit/1.1 (+http://www.facebook.com/ | Country: US
Web App Attack
Brute-Force
🇺🇸
鬼影233
2026-04-12 00:22:12
UTC ·
(6 months ago)
meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Bad Web Bot