🇨🇦
1gz
2026-11-06 20:04:48
UTC ·
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)
This report was generated by:
https://github.com/sefinek/Cloudfla ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇦
1gz
2026-11-06 19:24:29
UTC ·
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27
Th ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
security.rdmc.fr
2026-11-06 13:09:38
UTC ·
(4 days ago)
Activity from blacklisted IP
Hacking
Anonymous
2026-11-06 10:23:02
UTC ·
(4 days ago)
FortiWeb WAF: 40 attacks detected. Threat Score: 6400. Types: Client Management(20), GEO IP(20). Origin: China.
Web App Attack
🇺🇸
SX Communications
2026-11-06 05:09:54
UTC ·
(5 days ago)
HTTP application-layer DoS / botnet traffic from 121.29.51.109: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack
Bad Web Bot
Exploited Host
Anonymous
2026-11-06 03:00:47
UTC ·
(5 days ago)
(apache-useragents) Failed apache-useragents trigger with match [Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)] from 121.29.51.109 (CN/China/-): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 121.2 ...
show more
(apache-useragents) Failed apache-useragents trigger with match [Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)] from 121.29.51.109 (CN/China/-): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 121.29.51.109 - - [06/Nov/2026:03:57:19 +0100] "GET / HTTP/1.1" 200 24168 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)"
121.29.51.109 - - [06/Nov/2026:03:59:28 +0100] "GET /favicon.ico HTTP/1.1" 301 547 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)"
121.29.51.109 - - [06/Nov/2026:03:59:29 +0100] "GET /favicon.ico HTTP/1.1" 200 7018 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)"
121.29.51.109 - - [06/Nov/2026:04:00:22 +0100] "GET / HTTP/1.1" 301 525 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)"
121.29.51.109 - - [06/Nov/2026:04:00:31 +0100] "GET / HTTP/1.1" 200 24171 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)"
show less
Port Scan
🇮🇹
abuseiphack
2026-11-06 01:54:30
UTC ·
(5 days ago)
Automatic report for brute force attack
Web App Attack
🇩🇪
Phenix Info
2026-11-05 22:54:54
UTC ·
(5 days ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
🇫🇷
security.rdmc.fr
2026-11-04 22:36:13
UTC ·
(6 days ago)
Activity from blacklisted IP
Hacking
🇺🇸
SX Communications
2026-11-04 15:36:17
UTC ·
(6 days ago)
HTTP application-layer DoS / botnet traffic from 121.29.51.109: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
1gz
2026-11-04 08:05:00
UTC ·
(6 days ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27
Th ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
AetherFox
2026-11-04 06:50:17
UTC ·
(6 days ago)
AetherFox VoidGuard detected: [Wed Nov 04 07:48:41.467432 2026] [authz_core:error] [pid 61421:tid 61452] [client 121.29.51.109:49596] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Wed Nov 04 07:49:52.869872 2026] [auth ...
show more
AetherFox VoidGuard detected: [Wed Nov 04 07:48:41.467432 2026] [authz_core:error] [pid 61421:tid 61452] [client 121.29.51.109:49596] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Wed Nov 04 07:49:52.869872 2026] [authz_core:error] [pid 61421:tid 61472] [client 121.29.51.109:1511] AH01630: client denied by server configuration: /var/www/html/favicon.ico
[Wed Nov 04 07:49:52.869979 2026] [authz_core:error] [pid 61421:tid 61472] [client 121.29.51.109:1511] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Wed Nov 04 07:50:16.725261 2026] [authz_core:error] [pid 61421:tid 61454] [client 121.29.51.109:1489] AH01630: client denied by server configuration: proxy:https://136.243.123.86/favicon.ico
[Wed Nov 04 07:50:16.725354 2026] [authz_core:error] [pid 61421:tid 61454] [client 121.29.51.109:1489] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
...
show less
Bad Web Bot
Web App Attack
🇺🇸
1gz
2026-11-04 00:59:11
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; U; Linux x86_64; en-NZ; rv:1.9.2.13) Gecko/20101206 Ubuntu/10.10 (maverick) Firefox/3.6.13
This report was gener ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; U; Linux x86_64; en-NZ; rv:1.9.2.13) Gecko/20101206 Ubuntu/10.10 (maverick) Firefox/3.6.13
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
SX Communications
2026-11-03 13:34:19
UTC ·
(1 week ago)
HTTP application-layer DoS / botnet traffic from 121.29.51.109: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack
Bad Web Bot
Exploited Host
Anonymous
2026-11-03 10:21:52
UTC ·
(1 week ago)
FortiWeb WAF: 10 attacks detected. Threat Score: 11600. Types: Client Management(5), GEO IP(5). Origin: China.
Web App Attack