🇬🇧
AvonleaConsulting
2026-06-01 06:00:19
(4 weeks ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-05-18 16:00:52
(1 month ago)
Brute force
Brute-Force
🇬🇧
Shadymint
2026-05-12 05:59:56
(1 month ago)
url probing
Web App Attack
🇬🇧
Shadymint
2026-03-11 13:32:55
(3 months ago)
url probing
Web App Attack
🇬🇧
Mendip_Defender
2026-02-04 11:26:16
(4 months ago)
144.217.135.213 - - [04/Feb/2026:11:26:11 +0000] "GET /robots.txt HTTP/1.0" 404 4876 "-" "Mozilla/5. ...
show more
144.217.135.213 - - [04/Feb/2026:11:26:11 +0000] "GET /robots.txt HTTP/1.0" 404 4876 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.135.213 - - [04/Feb/2026:11:26:12 +0000] "GET /ads.txt HTTP/1.0" 404 4876 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
144.217.135.213 - - [04/Feb/2026:11:26:12 +0000] "GET /llms.txt HTTP/1.0" 404 4876 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-10-15 07:09:34
(8 months ago)
(mod_security) mod_security (id:243420) triggered by 144.217.135.213 (crawl-144-217-135-213.dataprov ...
show more
(mod_security) mod_security (id:243420) triggered by 144.217.135.213 (crawl-144-217-135-213.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 03:09:31.133380 2025] [security2:error] [pid 9386:tid 9411] [client 144.217.135.213:35073] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||www.sportsoutreachnc.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.sportsoutreachnc.org"] [uri "/contact.html"] [unique_id "aO9Iq06TTmol8ooAv6FhNwAAARY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
exxos
2025-10-12 15:03:01
(8 months ago)
web exploit attacks
Web App Attack
🇺🇸
shabi
2025-09-29 04:17:23
(9 months ago)
IP: 144.217.135.213 [Country: CA] triggered WAF (firewallCustom).
Action: managed_challenge
ASN: 162 ...
show more
IP: 144.217.135.213 [Country: CA] triggered WAF (firewallCustom).
Action: managed_challenge
ASN: 16276 (OVH)
Protocol: HTTP/1.1 (method GET)
Endpoint: /
Time: 2025-09-29T03:19:14Z
User Agent: Mozilla/5.0 (Linux; Android 10; SM-G981B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.162 Mobile Safari/537.36
---
Report generated by CFWAF2AbuseIPDB.
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-20 04:05:14
(9 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇲🇾
syokadmin
2025-09-09 21:59:03
(9 months ago)
144.217.135.213 (NL/The Netherlands/crawl-144-217-135-213.dataproviderbot.com), more than 2 Apache 4 ...
show more
144.217.135.213 (NL/The Netherlands/crawl-144-217-135-213.dataproviderbot.com), more than 2 Apache 403 hits in the last 3600 secs
show less
Brute-Force
🇺🇸
TPI-Abuse
2025-08-25 04:28:18
(10 months ago)
(mod_security) mod_security (id:243420) triggered by 144.217.135.213 (crawl-144-217-135-213.dataprov ...
show more
(mod_security) mod_security (id:243420) triggered by 144.217.135.213 (crawl-144-217-135-213.dataproviderbot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 25 00:28:10.679822 2025] [security2:error] [pid 22649:tid 22649] [client 144.217.135.213:34317] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||www.milajarecords.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.milajarecords.com"] [uri "/BIOGRAPHY.html"] [unique_id "aKvmWqwaZDSGr1eO3DF2uwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
agenciahypelab.com.br
2025-08-19 21:35:45
(10 months ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇨🇭
backslash
2025-08-10 05:43:09
(10 months ago)
Bad Web Bot
🇮🇹
Progetto1
2025-06-05 23:48:02
(1 year ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇫🇷
Thaliruth
2025-06-05 15:25:15
(1 year ago)
144.217.135.213 - - [05/Jun/2025:17:25:14 +0200] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatib ...
show more
144.217.135.213 - - [05/Jun/2025:17:25:14 +0200] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Dataprovider.com)"
...
show less
Brute-Force
Bad Web Bot
Web App Attack