🇺🇸
S.O.B.A. Dev.
2025-11-23 19:25:50
(6 months ago)
Threat Blocked by BeeHive from (ASN:16276) (Network:OVH) (Host:soba.dev) (Method:GET) (Protocol:HTTP ...
show more
Threat Blocked by BeeHive from (ASN:16276) (Network:OVH) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2025-11-23T19:25:50Z)
show less
Web Spam
Brute-Force
Web App Attack
2025-11-22 22:51:21
(6 months ago)
Automated report (2025-11-22T17:51:21-05:00). Misbehaving bot detected.
Open Proxy
Bad Web Bot
🇬🇧
Mendip_Defender
2025-11-22 19:04:06
(6 months ago)
2001:41d0:303:2c2f::1 - - [22/Nov/2025:19:03:57 +0000] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozil ...
show more
2001:41d0:303:2c2f::1 - - [22/Nov/2025:19:03:57 +0000] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
...
show less
Bad Web Bot
🇦🇺
2000cn.com.au
2025-11-19 08:49:33
(6 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Bad Web Bot
Web App Attack
🇫🇮
kumiko
2025-11-16 01:45:43
(6 months ago)
[2025-11-16 03:45:43] Known bad bot [Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)]
Bad Web Bot
Web App Attack
🇳🇱
i-turnradio.nl
2025-11-15 09:09:54
(6 months ago)
2025-11-15 @ 10:09:54 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
🇺🇸
TPI-Abuse
2025-11-08 20:28:48
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:2c2f::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:2c2f::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 15:28:43.521974 2025] [security2:error] [pid 15587:tid 15593] [client 2001:41d0:303:2c2f::1:58068] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dasperformance.com|F|2"] [data ".das performance.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dasperformance.com"] [uri "/tag/custom-harley-davidson/W WW.DAS performance.com"] [unique_id "aQ-n-9vdlJMUa9SFOz-DCwAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Starburst SysOp Team
2025-11-07 18:48:27
(6 months ago)
BAD BOT, BAD BOT, WHAT YA GONNA DO - Detected and Blocked. Matched phrase "MJ12bot" at REQUEST_HEADE ...
show more
BAD BOT, BAD BOT, WHAT YA GONNA DO - Detected and Blocked. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. (1100000-sou2-5)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-06 16:30:33
(6 months ago)
(mod_security) mod_security (id:210381) triggered by 2001:41d0:303:2c2f::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210381) triggered by 2001:41d0:303:2c2f::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 11:30:26.989337 2025] [security2:error] [pid 18470:tid 18470] [client 2001:41d0:303:2c2f::1:60454] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||goseethenurse.com|F|4"] [data "REQUEST_URI=/tag/bi</a> < o1psc/adstale0p%puNurn="] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "goseethenurse.com"] [uri "/tag/bi</a> < o1psc/adstale0p%puNurn="] [unique_id "aQzNIlNZhyVnaIgdd9JViAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Mendip_Defender
2025-11-05 15:59:09
(6 months ago)
2001:41d0:303:2c2f::1 - - [05/Nov/2025:15:59:03 +0000] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozil ...
show more
2001:41d0:303:2c2f::1 - - [05/Nov/2025:15:59:03 +0000] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
...
show less
Bad Web Bot
🇳🇱
WeCloudit-Anti-Abuse
2025-11-04 12:50:06
(6 months ago)
WAF: Found blacklisted crawler 2- wsit
Email Spam
Brute-Force
🇳🇱
WeCloudit-Anti-Abuse
2025-11-03 12:00:56
(7 months ago)
WAF: Found blacklisted crawler 2- wsit
Email Spam
Brute-Force
🇳🇱
WeCloudit-Anti-Abuse
2025-10-30 18:20:08
(7 months ago)
WAF: Found blacklisted crawler 2- wsit
Email Spam
Brute-Force
🇺🇸
TPI-Abuse
2025-10-27 15:00:57
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:2c2f::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:41d0:303:2c2f::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 27 11:00:51.813579 2025] [security2:error] [pid 26078:tid 26078] [client 2001:41d0:303:2c2f::1:52468] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bahamascruisersguide.com|F|2"] [data ". capesantamaria.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bahamascruisersguide.com"] [uri "/Cruising-Info/page18/www. capesantamaria.com"] [unique_id "aP-JI6Ad8LJjOtJHOwLY0gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Mendip_Defender
2025-10-26 18:44:18
(7 months ago)
2001:41d0:303:2c2f::1 - - [26/Oct/2025:18:44:13 +0000] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozil ...
show more
2001:41d0:303:2c2f::1 - - [26/Oct/2025:18:44:13 +0000] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
...
show less
Bad Web Bot