🇺🇸
TPI-Abuse
2026-04-27 21:42:31
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 17:42:26.153179 2026] [security2:error] [pid 11706:tid 11706] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 17:42:26.153179 2026] [security2:error] [pid 11706:tid 11706] [client 2a03:2880:f806:39:::39026] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bjfrancislaw.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bjfrancislaw.com"] [uri "/bjfrancislaw.com"] [unique_id "ae_YQqJZqd9LrXscmLcwOAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-04-27 20:12:40
UTC ·
(6 months ago)
(resource-exhaustion) Server-wide Bot Block Heavy URL: filter_ 2a03:2880:f806:39:: (US/United States/-)
Hacking
🇵🇱
sefinek.net
2026-04-27 18:09:31
UTC ·
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /booru/artist/%E3%81%82%E3%82%89%E3%82%81%EF%BC%A0%E3%81%8A%E4%BB%95%E4%BA%8B%E5%8B%9F%E9%9B%86%E4%B8%AD | UA: meta-externalagent/1.1 (+https://deve ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /booru/artist/%E3%81%82%E3%82%89%E3%82%81%EF%BC%A0%E3%81%8A%E4%BB%95%E4%BA%8B%E5%8B%9F%E9%9B%86%E4%B8%AD | UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇳
ThreatBook.io
2026-04-26 23:14:56
UTC ·
(6 months ago)
2026-04-26 06:52:42 /
Web App Attack
Anonymous
2026-04-26 20:04:47
UTC ·
(6 months ago)
(resource-exhaustion) Server-wide Bot Block Heavy URL: filter_ 2a03:2880:f806:39:: (US/United States/-)
Hacking
🇫🇷
mrcrassi
2026-04-26 13:15:49
UTC ·
(6 months ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /categoria/cftv-e-gravadores/
UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
This report w ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /categoria/cftv-e-gravadores/
UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
鬼影233
2026-04-26 00:07:57
UTC ·
(6 months ago)
meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Bad Web Bot
Anonymous
2026-04-25 19:56:29
UTC ·
(6 months ago)
(resource-exhaustion) Server-wide Bot Block Heavy URL: filter_ 2a03:2880:f806:39:: (US/United States/-)
Hacking
🇺🇸
Penny Packer
2026-04-25 19:48:31
UTC ·
(6 months ago)
Fail2Ban apache-tripwires
Web App Attack
🇵🇱
sefinek.net
2026-04-24 05:29:04
UTC ·
(6 months ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /gallery/neko-catgirl-love-letter | UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) • Generated by: g ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /gallery/neko-catgirl-love-letter | UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2026-04-24 01:16:46
UTC ·
(6 months ago)
(resource-exhaustion) Server-wide Bot Block Heavy URL: filter_ 2a03:2880:f806:39:: (US/United States/-)
Hacking
🇺🇸
TPI-Abuse
2026-04-22 16:54:21
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 12:54:13.275609 2026] [security2:error] [pid 3549505:tid 3549505] [client 2a03:2 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 12:54:13.275609 2026] [security2:error] [pid 3549505:tid 3549505] [client 2a03:2880:f806:39:::57846] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||caddydad.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "caddydad.com"] [uri "/caddydad.com"] [unique_id "aej9NTupqFAz4I40A7B5YgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-22 12:31:44
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 08:31:40.235167 2026] [security2:error] [pid 1469079:tid 1469079] [client 2a03:2 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 08:31:40.235167 2026] [security2:error] [pid 1469079:tid 1469079] [client 2a03:2880:f806:39:::37690] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||impostersyndromeunmasked.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "impostersyndromeunmasked.com"] [uri "/impostersyndromeunmasked.com"] [unique_id "aei_rJPy-133ut480PNCVgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-19 14:53:29
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 10:53:25.134268 2026] [security2:error] [pid 16460:tid 16460] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 10:53:25.134268 2026] [security2:error] [pid 16460:tid 16460] [client 2a03:2880:f806:39:::46748] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||computerservicesofflorida.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "computerservicesofflorida.com"] [uri "/computerservicesofflorida.com"] [unique_id "aeTsZeHsvtqdyR1t9R8CywAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-17 22:19:19
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 18:19:15.086886 2026] [security2:error] [pid 1062777:tid 1062777] [client 2a03:2 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:39:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 18:19:15.086886 2026] [security2:error] [pid 1062777:tid 1062777] [client 2a03:2880:f806:39:::51154] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mariarozella.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mariarozella.com"] [uri "/mariarozella.com"] [unique_id "aeKx4wdsXjQCMGYz7DwkGgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack