🇳🇱
Site.eu
2026-10-14 17:39:18
(1 hour ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
tr1n
2026-10-11 10:27:02
(3 days ago)
Triggered Cloudflare WAF (botFight) from DE.
Action: MANAGED_CHALLENGE | ASN: 24940 (Hetzner Online ...
show more
Triggered Cloudflare WAF (botFight) from DE.
Action: MANAGED_CHALLENGE | ASN: 24940 (Hetzner Online GmbH) | Protocol: HTTP/1.1 (GET) | Endpoint: / | Timestamp: 2026-10-11T10:27:02Z | UA: Mozilla/5.0 (compatible; QlyzeBot/1.0; +https://app.qlyze.io/bot)
show less
Bad Web Bot
🇬🇧
pinguin
2026-10-10 03:48:23
(4 days ago)
Triggered Cloudflare WAF (linkMaze) from DE.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GE ...
show more
Triggered Cloudflare WAF (linkMaze) from DE.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (compatible; QlyzeBot/1.0; +https://app.qlyze.io/bot)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-04 10:03:21
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:13b:d4e::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:13b:d4e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 06:03:14.126104 2026] [security2:error] [pid 28831:tid 28831] [client 2a01:4f8:13b:d4e::2:56746] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||soviaenterprises.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "soviaenterprises.com"] [uri "/aivosminerals.com"] [unique_id "asIkYgv0ZBCqDhQFcJj9hQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 05:23:47
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:13b:d4e::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:13b:d4e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 01:23:40.258479 2026] [security2:error] [pid 13352:tid 13373] [client 2a01:4f8:13b:d4e::2:58942] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dubarch.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dubarch.com"] [uri "/ahmedalbanna.com"] [unique_id "arIQ3MAbh53F6r7Dm7AdWAAAANE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 13:38:21
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:13b:d4e::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:13b:d4e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 09:38:14.552605 2026] [security2:error] [pid 31026:tid 31026] [client 2a01:4f8:13b:d4e::2:34790] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||homebuilt.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "homebuilt.org"] [uri "/vendors/powerplants/[email protected] "] [unique_id "arEzRoR-x5H7nVUf-l6e4QAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-21 04:12:09
(3 weeks ago)
2a01:4f8:13b:d4e::2 - - [21/Sep/2026:04:12:07 +0000] "GET /irc2numerics.def HTTP/1.1" 404 9068 "-" " ...
show more
2a01:4f8:13b:d4e::2 - - [21/Sep/2026:04:12:07 +0000] "GET /irc2numerics.def HTTP/1.1" 404 9068 "-" "Mozilla/5.0 (compatible; QlyzeBot/1.0; +https://app.qlyze.io/bot)"
2a01:4f8:13b:d4e::2 - - [21/Sep/2026:04:12:07 +0000] "GET /irc2numerics.html HTTP/1.1" 404 3993 "-" "Mozilla/5.0 (compatible; QlyzeBot/1.0; +https://app.qlyze.io/bot)"
2a01:4f8:13b:d4e::2 - - [21/Sep/2026:04:12:07 +0000] "GET /chanmodes.html HTTP/1.1" 404 3993 "-" "Mozilla/5.0 (compatible; QlyzeBot/1.0; +https://app.qlyze.io/bot)"
2a01:4f8:13b:d4e::2 - - [21/Sep/2026:04:12:08 +0000] "GET /chanmembers.def HTTP/1.1" 404 3993 "-" "Mozilla/5.0 (compatible; QlyzeBot/1.0; +https://app.qlyze.io/bot)"
2a01:4f8:13b:d4e::2 - - [21/Sep/2026:04:12:08 +0000] "GET /ircdefs.zip HTTP/1.1" 404 3993 "-" "Mozilla/5.0 (compatible; QlyzeBot/1.0; +https://app.qlyze.io/bot)"
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-21 03:59:15
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:13b:d4e::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:13b:d4e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 23:59:10.700964 2026] [security2:error] [pid 20431:tid 20431] [client 2a01:4f8:13b:d4e::2:59648] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||elcalamo.com|F|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elcalamo.com"] [uri "/pda/nava-paravolveralmar.PDB"] [unique_id "arCrjj3L6p2yLs2KNpI_uQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
yoren
2026-09-21 03:19:31
(3 weeks ago)
Automated report from JTZL's Bot Maze: crawled hidden bot-trap pages and crossed the site's configur ...
show more
Automated report from JTZL's Bot Maze: crawled hidden bot-trap pages and crossed the site's configured blocking threshold.
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-20 18:21:09
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:13b:d4e::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:13b:d4e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 14:21:02.475992 2026] [security2:error] [pid 7365:tid 7365] [client 2a01:4f8:13b:d4e::2:56220] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||borzoi-pedigree.info|F|2"] [data ".borzois.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "borzoi-pedigree.info"] [uri "/www.borzois.com"] [unique_id "arAkDlR6_yQq9ob6lI9p1AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Ribeye375
2026-09-16 21:51:23
(3 weeks ago)
HIPS web-scraper - Block tcp/0:65535
Bad Web Bot
Web App Attack
🇨🇭
Ribeye375
2026-09-13 01:35:32
(1 month ago)
HIPS web-scraper - Block tcp/0:65535
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-09-05 23:05:12
(1 month ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -44.217 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -44.217 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (compatible; QlyzeBot/1.0; +https://app.qlyze.io/bot)
show less
Web App Attack
Bad Web Bot
🇩🇪
SCHAPPY
2026-09-05 19:10:10
(1 month ago)
Excessive crawling, scraping, request limit exceeded, HTTP code 429.
Web App Attack
