🇺🇸
kosada.com
2026-10-18 14:35:19
(4 days ago)
Repeated exploit attempts, for example: /hybridauth/window/Google?destination=community&destination_ ...
show more
Repeated exploit attempts, for example: /hybridauth/window/Google?destination=community&destination_error=node/462%3F (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36")
show less
Web App Attack
🇺🇸
1gz
2026-10-18 00:11:52
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET met ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /script.js
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-01 14:25:16
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 43.135.191.94 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 43.135.191.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 10:25:10.406363 2026] [security2:error] [pid 24375:tid 24375] [client 43.135.191.94:51669] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pluralmatrix.net|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pluralmatrix.net"] [uri "/cynosureboudoir.com"] [unique_id "ar5tRtijnLzujRA2lPw4hAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
SX Communications
2026-09-22 08:09:32
(1 month ago)
Blocked abusive HTTP application-layer DoS / botnet traffic from 43.135.191.94: traffic from this ad ...
show more
Blocked abusive HTTP application-layer DoS / botnet traffic from 43.135.191.94: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
1gz
2026-09-14 01:44:00
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET met ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /script.js
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇪🇸
el-brujo
2026-09-11 02:44:06
(1 month ago)
Cloudflare WAF: Request Path: /registros-dns.html Request Query: ?domain=griffincommunications.com H ...
show more
Cloudflare WAF: Request Path: /registros-dns.html Request Query: ?domain=griffincommunications.com Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0.1 Safari/605.1.15 Action: block Source: firewallCustom ASN Description: Tencent Building, Kejizhongyi Avenue Country: US Method: GET Timestamp: 2026-09-11T02:44:06Z ruleId: 357d2d06344e434581b4adce2b72fceb. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
🇪🇸
el-brujo
2026-09-11 01:59:03
(1 month ago)
Cloudflare WAF: Request Path: /whois.html Request Query: ?domain=thickline.com Host: elhacker.net us ...
show more
Cloudflare WAF: Request Path: /whois.html Request Query: ?domain=thickline.com Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Action: block Source: firewallCustom ASN Description: Tencent Building, Kejizhongyi Avenue Country: US Method: GET Timestamp: 2026-09-11T01:59:03Z ruleId: 357d2d06344e434581b4adce2b72fceb. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-09-09 17:22:02
(1 month ago)
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa02]
Hacking
SQL Injection
Web App Attack
🇬🇧
CrystalMaker
2026-07-12 18:52:01
(3 months ago)
Vulnerability scan - GET /special-offers
Hacking
🇨🇦
polycoda
2026-07-07 22:20:31
(3 months ago)
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack