47.79.13.228

Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/bota/alarm-ne-uashington-per-kercenimet-nga-teherani-inteligjenca-ngre-shqetesimin-per-komplote-kunder-zyrtareve-amerikane/1070965 ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/bota/alarm-ne-uashington-per-kercenimet-nga-teherani-inteligjenca-ngre-shqetesimin-per-komplote-kunder-zyrtareve-amerikane/1070965/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less

Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloud ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less

Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kosove/kryeprokurori-kerkon-shqyrtim-te-rasteve-te-arlinda-zekajt-ne-verifikime-perfshihet-edhe-inspektorati-policor/1074016/ UA: Mozill ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kosove/kryeprokurori-kerkon-shqyrtim-te-rasteve-te-arlinda-zekajt-ne-verifikime-perfshihet-edhe-inspektorati-policor/1074016/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less

CloudFlare WAF REPORT: /sitemap/sitemap-index.xml

Fail2Ban triggered

Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/tirane-sekuestrohen-kallashnikove-mina-dhe-droge-arrestohen-dy-persona/663274/amp/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) A ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/tirane-sekuestrohen-kallashnikove-mina-dhe-droge-arrestohen-dy-persona/663274/amp/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less

Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28

Exploit scan from 47.79.13.228. GET /sitemap-news.xml.gz HTTP/1.1.

Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /showbiz/dashuria-nuk-i-ben-dem-askujt-ilnisa-bie-ne-kurthin-e-erjoles/640026/amp/ UA: Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20 ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /showbiz/dashuria-nuk-i-ben-dem-askujt-ilnisa-bie-ne-kurthin-e-erjoles/640026/amp/ UA: Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less

Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloud ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less

Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28

Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /uncategorized/shqiperi-15-mln-euro-per-ndertimin-e-shkollave-te-demtuara-nga-termeti-517539/130101/amp/ UA: Mozilla/5.0 (Windows NT 10.0 ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /uncategorized/shqiperi-15-mln-euro-per-ndertimin-e-shkollave-te-demtuara-nga-termeti-517539/130101/amp/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less

Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /sport/erdhi-momenti-romelu-lukaku-shkel-ne-milano-jam-shume-i-lumtur-video/342756/amp/ UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_ ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /sport/erdhi-momenti-romelu-lukaku-shkel-ne-milano-jam-shume-i-lumtur-video/342756/amp/ UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less

[08/Aug/2026:06:22:34 +0300] -- 47.79.13.228 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /sitemap-news.xml.gz HTTP/1.1

Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected