π©πͺ
ghostwarriors
2026-10-20 18:20:51
(52 minutes ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
ksol-hostmaster
2026-10-20 18:17:14
(55 minutes ago)
2026/10/20 20:17:13 [error] 11254#101019: *1401067 access forbidden by rule, client: 116.96.45.75, s ...
show more
2026/10/20 20:17:13 [error] 11254#101019: *1401067 access forbidden by rule, client: 116.96.45.75, server: new.hondaforum.hu, request: "GET /topic/honda-civic/718439/ HTTP/1.1", host: "new.hondaforum.hu"
...
show less
Web Spam
π©πͺ
LRob
2026-10-12 20:51:41
(1 week ago)
Shop search flood (L7 DDoS) | path: /40-meilleur-velo-electrique-entre-4000-et-5000-euros | query: q ...
show more
Shop search flood (L7 DDoS) | path: /40-meilleur-velo-electrique-entre-4000-et-5000-euros | query: q=Ann%C3%A9e-2025/Taille-XL | src_port: 20899
show less
DDoS Attack
Web App Attack
πΊπΈ
1gz
2026-09-30 08:09:38
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /sport/keane-futjani-medaljet-ne-plehra-city-mashtroi-per-ti-fituar-ato/1033584/
UA: Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.166 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
πΊπΈ
stechusa
2026-08-28 01:59:43
(1 month ago)
[Askari] | country=VN | Behavior: Outdated browser, Concurrent page load during attack, HTTP/1.1 ove ...
show more
[Askari] | country=VN | Behavior: Outdated browser, Concurrent page load during attack, HTTP/1.1 over TLS, Targeting specific pages
show less
Bad Web Bot
DDoS Attack
πΊπΈ
stechusa
2026-08-28 01:59:43
(1 month ago)
ELEVATED_THREAT | country=VN | ASN=Viettel Group | form_key 0NiBGqtf... shared by 3 IPs: 102.90.102. ...
show more
ELEVATED_THREAT | country=VN | ASN=Viettel Group | form_key 0NiBGqtf... shared by 3 IPs: 102.90.102.163, 79.177.149.33, 116.96.45.75 | 64 IPs targeting /brand.html | Facet request during elevated threat (facet_ratio=0.86, unique_ips=295)
show less
Bad Web Bot
DDoS Attack
πΊπΈ
TPI-Abuse
2026-08-24 23:16:32
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 116.96.45.75 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 116.96.45.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 19:16:28.036010 2026] [security2:error] [pid 13362:tid 13362] [client 116.96.45.75:63258] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mathsquad.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mathsquad.com"] [uri "/adminer.tar"] [unique_id "aozQzCFetFTpa7sexHEPSAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
bigorre.org
2026-08-05 15:26:04
(2 months ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
πΊπΈ
RAP
2026-04-25 11:18:19
(5 months ago)
2026-04-25 11:18:19 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
πΊπΈ
xmission.com
2026-04-25 11:11:57
(5 months ago)
Blocked by UFW (TCP on 23)
Source port: 9874
TTL: 46
Packet length: 44
TOS: 0x08
This report (for 1 ...
show more
Blocked by UFW (TCP on 23)
Source port: 9874
TTL: 46
Packet length: 44
TOS: 0x08
This report (for 116.96.45.75) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Hacking
Brute-Force
π«π·
security.rdmc.fr
2026-04-25 11:00:30
(5 months ago)
Port Scan Attack proto:TCP src:42588 dst:23
Port Scan
π΅π±
sefinek.net
2026-04-25 09:45:56
(5 months ago)
Blocked by UFW on PL02 [23/tcp] | SPT: 19343 | TTL: 44 | LEN: 44 | TOS: 0x00 β’ Reported by: github.c ...
show more
Blocked by UFW on PL02 [23/tcp] | SPT: 19343 | TTL: 44 | LEN: 44 | TOS: 0x00 β’ Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
IoT Targeted
Brute-Force
π«π·
geeek
2025-02-15 11:00:59
(1 year ago)
Port scanning: 445 TCP Blocked
Port Scan
Anonymous
2024-05-23 02:46:33
(2 years ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
Anonymous
2024-05-10 04:41:48
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH