🇫🇷
Sklurk
2026-05-29 09:13:02
(3 weeks ago)
Web App Attack
Web App Attack
🇦🇺
FireGuard Server
2026-05-29 06:40:06
(3 weeks ago)
Blocked by OPNsense firewall; 22 hits, proto=tcp, ports=443
Port Scan
Hacking
🇫🇷
Sklurk
2026-05-28 09:11:02
(3 weeks ago)
Web App Attack
Web App Attack
🇩🇪
Vegascosmetics
2026-05-27 21:56:49
(3 weeks ago)
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
🇺🇸
nodepile
2026-05-26 10:18:27
(3 weeks ago)
Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ...
show more
Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/Magento_Captcha/template/checkout/captcha.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36')
show less
Web App Attack
Exploited Host
🇨🇦
1gz
2026-05-10 04:12:02
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /sport/nga-grupet-e-liges-se-konferences-te-ftesa-ne-kombetare-rrefimi-i-klisman-cakes-ju-tregoj-ndeshjen-me-emocionuese-ne-karriere-ku-na-duhej/844286
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇿
Countryman
2026-04-14 07:08:33
(2 months ago)
repeated unauthorized connection attempts, host sweep, port scan
Port Scan
🇷🇴
INTEQ
2026-04-12 23:22:22
(2 months ago)
Web attack from 43.173.175.21
Web App Attack
🇨🇿
Countryman
2026-04-12 11:55:45
(2 months ago)
repeated unauthorized connection attempts, host sweep, port scan
Port Scan
🇺🇸
johnkarlhill
2026-04-11 13:30:07
(2 months ago)
WebKnight blocked malicious web request on johnkarlhill.com
Brute-Force
SSH
🇺🇸
nodepile
2026-04-10 18:30:25
(2 months ago)
Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ...
show more
Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/Magento_Ui/templates/tooltip/tooltip.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36')
show less
Web App Attack
Exploited Host
🇺🇸
webgobe
2026-04-10 12:55:15
(2 months ago)
wew-Joomla User : try to access forms...
Hacking
🇺🇸
TPI-Abuse
2026-04-10 00:58:54
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 43.173.175.21 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 43.173.175.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 20:58:50.177719 2026] [security2:error] [pid 1084310:tid 1084310] [client 43.173.175.21:54524] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||brandoncomputergeeks.com|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "brandoncomputergeeks.com"] [uri "/Blog/syndication.axd"] [unique_id "adhLSlPGi37zAUKNMniTCAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
1gz
2026-04-09 06:11:51
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/coca-cola/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-08 16:26:26
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 43.173.175.21 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 43.173.175.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 12:26:20.047293 2026] [security2:error] [pid 3016820:tid 3016820] [client 43.173.175.21:36250] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gamepart.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "adaBrB8cfWETt4D1DtqubAAAAAA"], referer: http://gamepart.com/home/tancedi1/gamepart.com/?route=product/product&path=24&product_id=28
show less
Brute-Force
Bad Web Bot
Web App Attack