🇫🇷
Sklurk
2026-06-12 19:23:17
(9 hours ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 14:18:07
(14 hours ago)
(mod_security) mod_security (id:210730) triggered by 47.79.205.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.205.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 10:18:00.244433 2026] [security2:error] [pid 24042:tid 24042] [client 47.79.205.209:45018] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gundiahgazette.com.au|F|2"] [data ".munnacreekhall.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gundiahgazette.com.au"] [uri "/www.munnacreekhall.com"] [unique_id "aiwVGDdU2dgKdBk4YYi9XwAAAAE"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ersei.net
2026-06-11 20:33:16
(1 day ago)
Nonstop scanning with no cooldown or respect for 429.
Bad Web Bot
🇺🇸
slay3r9903
2026-06-11 20:12:02
(1 day ago)
IP address blocked by Cloudflare security rules due to suspicious activity and security violations.
Hacking
Bad Web Bot
2026-06-11 09:34:04
(1 day ago)
FortiWeb WAF: 53 attacks detected. Threat Score: 5400. Types: GEO IP(27), Client Management(26). Ori ...
show more
FortiWeb WAF: 53 attacks detected. Threat Score: 5400. Types: GEO IP(27), Client Management(26). Origin: Singapore.
show less
Web App Attack
2026-06-11 02:17:17
(2 days ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 01:17:03
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 47.79.205.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.205.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 21:16:58.619792 2026] [security2:error] [pid 29291:tid 29291] [client 47.79.205.209:35894] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.register-yacht-langkawi.com|F|2"] [data ".register-yacht-langkawi.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.register-yacht-langkawi.com"] [uri "/it/www.register-yacht-langkawi.com"] [unique_id "aioMiozRh4VlfvneayHUqwAAABA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-06-11 00:18:08
(2 days ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-05-06 04:34:40
(1 month ago)
Web App Attack
Web App Attack
🇨🇦
1gz
2026-05-05 12:29:35
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/lamtumire-engjell-biond-pas-aksidentit-tragjik-nderron-jete-16-vjecari-shqiptar-ne-itali/563576
UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Mobile Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
Sklurk
2026-04-30 03:50:43
(1 month ago)
Web App Attack
Web App Attack
🇪🇸
librebit
2026-04-06 10:01:14
(2 months ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-04-04 15:21:47
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 47.79.205.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.205.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 11:21:42.238039 2026] [security2:error] [pid 3671:tid 3671] [client 47.79.205.209:58226] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.beirutbazar.com|F|2"] [data ".beirutbazar.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.beirutbazar.com"] [uri "/tags/candle/www.beirutbazar.com"] [unique_id "adEshhYnyswXWzVbI06nRAAAAAY"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-01-08 11:36:24
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
🇺🇸
kosada.com
2026-01-06 05:40:37
(5 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot