🇺🇸
TPI-Abuse
2026-05-29 16:17:47
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 43.172.194.70 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 43.172.194.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 12:17:42.463740 2026] [security2:error] [pid 25906:tid 25906] [client 43.172.194.70:38434] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||civilwarzone.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "ahm8Jmtor9O8D2nH1FpA4gAAAAY"], referer: http://civilwarzone.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2026-05-29 00:34:38
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: /booru | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
nodepile
2026-05-23 04:25:39
(3 weeks ago)
Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ...
show more
Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/js-translation.json ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36')
show less
Web App Attack
Exploited Host
🇺🇸
omc
2026-05-23 04:14:35
(3 weeks ago)
Denied blacklisted client [PP]
Bad Web Bot
🇺🇸
kosada.com
2026-05-19 05:23:10
(3 weeks ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇫🇷
bigorre.org
2026-05-18 10:08:41
(3 weeks ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇫🇷
bigorre.org
2026-05-11 14:08:55
(1 month ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇨🇦
1gz
2026-05-11 10:32:02
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /showbiz/video-egli-i-tha-nuk-rri-dot-pa-ty-ketu-gjesti-ti-te-lodh-trurin/766441/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-05-07 04:33:33
(1 month ago)
Malicious activity detected
Hacking
Web App Attack
🇦🇺
MAGIC
2026-04-27 03:05:55
(1 month ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇫🇷
bigorre.org
2026-04-25 16:25:54
(1 month ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇦🇺
MAGIC
2026-04-22 02:06:57
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇫🇮
as211431.net
2026-04-20 04:14:11
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /user/paulinfo
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇭
4server
2026-04-18 20:38:32
(1 month ago)
[SatApr1822:38:27.8839912026][security2:error][pid647920:tid647946][client43.172.194.70:0]ModSecurit ...
show more
[SatApr1822:38:27.8839912026][security2:error][pid647920:tid647946][client43.172.194.70:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\|192\\\\\\\\.168\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\|172\\\\\\\\.\(1[6-9]\|2[0-9]\|3[0-1]\)\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\|fe80::\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"24\"][id\"990004\"][msg\"SSRFattempttoprivate/internalnetworkdetected\"][hostname\"minondou-togo.ch\"][uri\"/Regali-solidali/2-borsetta/Contatti/\"][unique_id\"aePrw19pLknL_iV6V6Bd3wAAABg\"]
show less
Hacking
Web App Attack
🇫🇷
bigorre.org
2026-04-18 13:42:21
(1 month ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot