🇩🇪
Vegascosmetics
2026-06-14 03:35:08
(1 hour ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security
DDoS Attack
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2026-06-13 20:05:51
(8 hours ago)
(mod_security) mod_security (id:210730) triggered by 47.79.207.89 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.207.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 16:05:45.530575 2026] [security2:error] [pid 2596:tid 2596] [client 47.79.207.89:64968] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hayrun.com|F|2"] [data ".hayrun.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hayrun.com"] [uri "/blog/img_0703/www.hayrun.com"] [unique_id "ai24Gf9dcqVGjbKRu00DFAAAABM"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-06-13 19:30:29
(9 hours ago)
Web App Attack
Web App Attack
2026-06-13 10:48:17
(18 hours ago)
Malicious activity detected
Hacking
Web App Attack
🇫🇮
6kilowatti
2026-06-13 10:35:40
(18 hours ago)
47.79.207.89 - - [13/Jun/2026:13:35:39 +0300] "GET /hamradio-config HTTP/1.1" 404 60 "https://www.go ...
show more
47.79.207.89 - - [13/Jun/2026:13:35:39 +0300] "GET /hamradio-config HTTP/1.1" 404 60 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/537.36"
...
show less
Web App Attack
2026-06-13 09:26:40
(19 hours ago)
FortiWeb WAF: 48 attacks detected. Threat Score: 15000. Types: Client Management(24), GEO IP(24). Or ...
show more
FortiWeb WAF: 48 attacks detected. Threat Score: 15000. Types: Client Management(24), GEO IP(24). Origin: Singapore.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 01:08:29
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 47.79.207.89 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.207.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 21:08:23.680771 2026] [security2:error] [pid 6394:tid 6396] [client 47.79.207.89:45072] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||annaly.org|F|2"] [data ".fiefblondel.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "annaly.org"] [uri "/www.FiefBlondel.com"] [unique_id "aiyth-OByKkyTNXHLGcLlwAAAMA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
1gz
2026-06-13 00:34:42
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /showbiz/madona-akuzon-trumpin-ja-per-cfare-behet-fjale/764394
UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Mobile Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
Sklurk
2026-06-12 19:23:47
(1 day ago)
Web App Attack
Web App Attack
🇺🇸
Charlesiv
2026-06-12 12:08:43
(1 day ago)
Triggered Cloudflare WAF (botFight) from SG.
Action taken: MANAGED_CHALLENGE
ASN: 45102 (Alibaba (US ...
show more
Triggered Cloudflare WAF (botFight) from SG.
Action taken: MANAGED_CHALLENGE
ASN: 45102 (Alibaba (US) Technology Co., Ltd.)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-06-12T10:28:54Z
Ray ID: a0a82bde5ad30cce
UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Mobile Safari/537.36
show less
Bad Web Bot
🇮🇩
Burayot
2026-06-11 14:22:39
(2 days ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 47.79.207.89 (SG/Singapore/-): 1 in ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 47.79.207.89 (SG/Singapore/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 10:04:37
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 47.79.207.89 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.207.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 06:04:30.206996 2026] [security2:error] [pid 884:tid 884] [client 47.79.207.89:57608] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.beirutbazar.com|F|2"] [data ".beirutbazar.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.beirutbazar.com"] [uri "/nstores/milia-m/www.beirutbazar.com"] [unique_id "aiqILqEbBAiY32CKhLV-UQAAABU"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-11 09:35:41
(2 days ago)
FortiWeb WAF: 49 attacks detected. Threat Score: 5000. Types: GEO IP(25), Client Management(24). Ori ...
show more
FortiWeb WAF: 49 attacks detected. Threat Score: 5000. Types: GEO IP(25), Client Management(24). Origin: Singapore.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 08:10:35
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 47.79.207.89 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.207.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 04:10:29.683969 2026] [security2:error] [pid 8557:tid 8683] [client 47.79.207.89:41288] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vancekelly.com|F|2"] [data ".vancekelly.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vancekelly.com"] [uri "/home/instagram-2/www.vancekelly.com"] [unique_id "aiptdRtznyx7EXbOJzuWJAAAAEA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 05:13:50
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 47.79.207.89 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.207.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 01:13:43.699067 2026] [security2:error] [pid 31766:tid 31766] [client 47.79.207.89:19146] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||printorganic.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "printorganic.com"] [uri "/printorganic.com"] [unique_id "aipEBxK8kfzJVT93z-u0EgAAACs"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack