Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[Thu Nov 05 14:52:31.573377 2026] [security2:error] [pid 131071:tid 139789735012032] [client 104.222.171.201:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/ ...
show more[Thu Nov 05 14:52:31.573377 2026] [security2:error] [pid 131071:tid 139789735012032] [client 104.222.171.201:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: 7% found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=476&id=637%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-23-juli-27-juli-2015&start=50 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=476&id=637%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-23-juli-27-juli-2015&star..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "auw1v1kKUk
...
show less
Fail2Ban: 104.222.171.201 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36
L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /18-velo-route | query: q=Stock+magasin-Cycling+Cavaillon-Cycling+H%C3%A ...
show moreL7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /18-velo-route | query: q=Stock+magasin-Cycling+Cavaillon-Cycling+H%C3%A9nin%5C-Beaumont-Cycling+Montpellier-Cycling+Bourgoin%5C-Jallieu/Taille-XXS-S-XL
show less
Fail2Ban: 104.222.171.201 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.6275.1408 Safari/537.36
(bot_kill_mega) Aggressive Bot Blocked: yandex 104.222.171.201 (SE/Sweden/-): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.222.171.201 - - [12/May/2026:12:50:17 +0300] "GET /templates/shaper_helix3/css/res ...
show more(bot_kill_mega) Aggressive Bot Blocked: yandex 104.222.171.201 (SE/Sweden/-): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.222.171.201 - - [12/May/2026:12:50:17 +0300] "GET /templates/shaper_helix3/css/resp.css HTTP/2.0" 200 1748 "https://www.yandex.gr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/123.0.6312.52 Mobile/15E148 Safari/604.1"
show less
Port Scan
Anonymous
Botnet-generated fake user-agent with impossible version. UA="Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.8052.1481 Mobile Safar"
Triggered Cloudflare WAF (firewallCustom) from SE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /reports/34.236.145.244
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127 ...
show moreTriggered Cloudflare WAF (firewallCustom) from SE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /reports/34.236.145.244
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
