🇨🇦
1gz
2026-11-14 02:49:02
UTC ·
(15 hours ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/after-erion-veliaj-transfer-order-also-signed-for-ergys-agasi-destination-prison-kept-secret/1078939/
UA: Mozilla/5.0 (Windows N ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/after-erion-veliaj-transfer-order-also-signed-for-ergys-agasi-destination-prison-kept-secret/1078939/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇦
1gz
2026-11-13 05:13:28
UTC ·
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-json/oembed/1.0/embed
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/53 ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-json/oembed/1.0/embed
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇵🇱
MatStef132
2026-11-12 12:13:36
UTC ·
(2 days ago)
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
DDoS Attack
🇨🇦
1gz
2026-11-11 00:28:26
UTC ·
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/bota/lufta-ne-lindjen-e-mesme-trump-konfirmon-se-shba-ja-ka-kryer-sulme-te-reja-ndaj-iranit/1092498
UA: Mozilla/5.0 (Windows NT 10 ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/bota/lufta-ne-lindjen-e-mesme-trump-konfirmon-se-shba-ja-ka-kryer-sulme-te-reja-ndaj-iranit/1092498
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇦
1gz
2026-11-10 03:28:14
UTC ·
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /sport/roma-fiton-3-0-ndaj-sassuolos-dhe-ngjitet-ne-vendin-e-dyte/1092464/amp
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /sport/roma-fiton-3-0-ndaj-sassuolos-dhe-ngjitet-ne-vendin-e-dyte/1092464/amp
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
Vegascosmetics
2026-11-09 22:08:03
UTC ·
(4 days ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 69>=65, Abuse 68, NonEU, first-seen)
Hacking
Exploited Host
Web App Attack
🇨🇦
1gz
2026-11-07 03:12:56
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kosove/linda-zemra-nuk-me-lejon-te-shkruaj-per-vrasjen-tende-mesazhi-prekes-i-vellait-per-arlinda-zekajn/1074736
UA: Mozilla/5.0 (Window ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kosove/linda-zemra-nuk-me-lejon-te-shkruaj-per-vrasjen-tende-mesazhi-prekes-i-vellait-per-arlinda-zekajn/1074736
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
Sklurk
2026-11-07 00:36:26
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇫🇷
ELYAZ
2026-11-06 13:21:34
UTC ·
(1 week ago)
(y6) Failed scan -byebye- from 43.173.182.119 (SG/Singapore/-): (CF_ENABLE)
Hacking
🇺🇸
1gz
2026-11-05 05:38:20
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/isa-mustafas-dictatorship-statement-sparks-debate-analysts-defend-the-diasporas-right-to-vote/1010808/embed
UA: Mozilla/5.0 (Win ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/isa-mustafas-dictatorship-statement-sparks-debate-analysts-defend-the-diasporas-right-to-vote/1010808/embed
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
1gz
2026-11-04 05:29:27
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/procesi-gjyqesor-per-sulm-rrezikon-pjesemarrjen-e-yllit-te-anglise-ne-euro-2028/1079607
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/procesi-gjyqesor-per-sulm-rrezikon-pjesemarrjen-e-yllit-te-anglise-ne-euro-2028/1079607
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
SX Communications
2026-11-03 14:16:45
UTC ·
(1 week ago)
HTTP application-layer DoS / botnet traffic from 43.173.182.119: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack
Bad Web Bot
Exploited Host
🇩🇪
PTScreens
2026-11-03 12:54:28
UTC ·
(1 week ago)
Headless browser crawler on an image host: 550 page requests on 2026-11-03 as part of a rotating-IP scrape (~1M requests/day across ~1,800 cloud IPs).
Bad Web Bot
🇫🇷
COMAITE
2026-11-03 09:50:15
UTC ·
(1 week ago)
SQL injection attempt from 43.173.182.119.
Web App Attack
🇺🇸
1gz
2026-11-03 02:47:51
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-json/oembed/1.0/embed
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/53 ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-json/oembed/1.0/embed
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot