🇩🇪
Vegascosmetics
2026-11-14 04:44:16
UTC ·
(12 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 68>=65, Abuse 67, NonEU, first-seen)
Hacking
Exploited Host
Web App Attack
🇨🇦
1gz
2026-11-14 01:46:18
UTC ·
(15 hours ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/justina-shiroka-pula-to-be-inaugurated-today-as-president-of-kosovo/1043874
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/justina-shiroka-pula-to-be-inaugurated-today-as-president-of-kosovo/1043874
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇦
1gz
2026-11-13 05:36:26
UTC ·
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-json/wp/v2/tags/167851
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/5 ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-json/wp/v2/tags/167851
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇵🇱
MatStef132
2026-11-12 18:11:53
UTC ·
(1 day ago)
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
DDoS Attack
🇨🇦
1gz
2026-11-11 04:28:11
UTC ·
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-json/oembed/1.0/embed
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safar ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-json/oembed/1.0/embed
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇦
1gz
2026-11-09 02:32:00
UTC ·
(5 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/young-people-refuse-to-leave-protest-outside-the-prime-ministers-office-after-rejecting-dialogue-with-rama-resign/1066065/embed
...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/young-people-refuse-to-leave-protest-outside-the-prime-ministers-office-after-rejecting-dialogue-with-rama-resign/1066065/embed
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
ELYAZ
2026-11-09 01:41:34
UTC ·
(5 days ago)
(y6) Failed scan -byebye- from 43.173.180.76 (SG/Singapore/-): (CF_ENABLE)
Hacking
🇫🇷
ELYAZ
2026-11-07 23:39:11
UTC ·
(6 days ago)
(y6) Failed scan -byebye- from 43.173.180.76 (SG/Singapore/-): (CF_ENABLE)
Hacking
🇨🇦
1gz
2026-11-07 07:31:51
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/citizens-revolt-enters-its-58th-day-protester-appeals-to-police-hand-rama-over-let-the-people-judge-him/946075/embed
UA: Mozilla ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/citizens-revolt-enters-its-58th-day-protester-appeals-to-police-hand-rama-over-let-the-people-judge-him/946075/embed
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
conseilgouz
2026-11-07 04:12:08
UTC ·
(1 week ago)
joe-12 : Block return, carriage return, ... characters=>/?tag=compelling%252525252525252525252525252520offers(%)
Hacking
🇨🇦
1gz
2026-11-07 03:10:04
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
This report was ge ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
Sklurk
2026-11-07 00:55:03
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇵🇹
Information Security
2026-11-03 18:23:50
UTC ·
(1 week ago)
Web App Attack
...
Web App Attack
🇩🇪
PTScreens
2026-11-03 12:46:49
UTC ·
(1 week ago)
Headless browser crawler on an image host: 597 page requests on 2026-11-03 as part of a rotating-IP scrape (~1M requests/day across ~1,800 cloud IPs).
Bad Web Bot
🇺🇸
1gz
2026-11-03 02:27:21
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
This report was ge ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot