Anonymous
2026-10-02 19:21:44
UTC ·
(1 month ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
Viveronese
2026-10-02 18:34:52
UTC ·
(1 month ago)
HTTP vulnerability scanning
Web App Attack
🇩🇪
MarkGGN
2026-10-02 17:55:05
UTC ·
(1 month ago)
Web attack. 2a03:2880:f814:d:: - - [02/Oct/2026:19:55:05 +0200] "GET /tag/megaevent/page/3/null HTTP/2.0" 301 0 "https://www.*/tag/megaevent/page/3/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 S ...
show more
Web attack. 2a03:2880:f814:d:: - - [02/Oct/2026:19:55:05 +0200] "GET /tag/megaevent/page/3/null HTTP/2.0" 301 0 "https://www.*/tag/megaevent/page/3/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
show less
Web App Attack
🇧🇪
cmbplf
2026-10-02 04:02:29
UTC ·
(1 month ago)
143 querystring crawling (29m59s)
Brute-Force
Bad Web Bot
🇵🇱
sefinek.net
2026-10-02 00:46:31
UTC ·
(1 month ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /sitemap_index.xml | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (com ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /sitemap_index.xml | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇮🇩
hermawan
2026-10-01 06:16:58
UTC ·
(1 month ago)
[Thu Oct 01 12:19:00.829278 2026] [security2:error] [pid 65043:tid 139958715131584] [client 2a03:2880:f814:d:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/core ...
show more
[Thu Oct 01 12:19:00.829278 2026] [security2:error] [pid 65043:tid 139958715131584] [client 2a03:2880:f814:d:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/perubahan-iklim HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/perubahan-iklim"] [unique_id "ar3tRG3aNatrYymE5kgj-AAAAIo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[65080] [QnmvjYDLY
...
show less
Email Spam
Hacking
🇫🇷
abuseipdb.amaze321
2026-10-01 00:35:40
UTC ·
(1 month ago)
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-30 10:55:14
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a03:2880:f814:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:55:10.884146 2026] [security2:error] [pid 3574:tid 3574] [client 2a03:2880:f81 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a03:2880:f814:d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:55:10.884146 2026] [security2:error] [pid 3574:tid 3574] [client 2a03:2880:f814:d:::64788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextngnr.com"] [uri "/Zlw1LX.htaccess"] [unique_id "arzqjgcs-_ZX38k7yBOKsAAAAGI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
MarkGGN
2026-09-29 18:39:24
UTC ·
(1 month ago)
Web attack. 2a03:2880:f814:d:: - - [29/Sep/2026:20:37:36 +0200] "GET /hank-williams-iii-cocaine-blues-freitagsvideo-13-07-2018/null HTTP/2.0" 301 0 "https://www.*/hank-williams-iii-cocaine-blues-freitagsvideo-13-07-2018/" "Mozilla/5.0 (Windows NT 10. ...
show more
Web attack. 2a03:2880:f814:d:: - - [29/Sep/2026:20:37:36 +0200] "GET /hank-williams-iii-cocaine-blues-freitagsvideo-13-07-2018/null HTTP/2.0" 301 0 "https://www.*/hank-williams-iii-cocaine-blues-freitagsvideo-13-07-2018/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
2a03:2880:f814:d:: - - [29/Sep/2026:20:39:24 +0200] "GET /liste-mit-fast-28000-finalkoordinaten-zum-download-gibt-es-hier/null HTTP/2.0" 301 0 "https://www.*/liste-mit-fast-28000-finalkoordinaten-zum-download-gibt-es-hier/?replytocom=64037" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
show less
Web App Attack
🇫🇷
mrcrassi
2026-09-28 19:46:51
UTC ·
(1 month ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /aplicacao/residencial/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.3 ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /aplicacao/residencial/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
Entalpi.net
2026-09-27 15:42:31
UTC ·
(1 month ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
🇧🇪
cmbplf
2026-09-27 05:05:58
UTC ·
(1 month ago)
100 querystring crawling (29m59s)
Brute-Force
Bad Web Bot
🇧🇷
alcacerlab
2026-09-27 01:34:35
UTC ·
(1 month ago)
2a03:2880:f814:d:: - - [26/Sep/2026:22:34:34 -0300] "GET / HTTP/2" 200 54178 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
Bad Web Bot
Web App Attack
Anonymous
2026-09-22 23:01:40
UTC ·
(1 month ago)
Scanner hitting /user/login?redirect_to=%2FPiboul%2FMagicMirror%2F_upload%2Fmain%2Fmodules%2Fdefault%2Fweather%2Fproviders on () — aaguard
Brute-Force
Port Scan
🇵🇱
sefinek.net
2026-09-22 17:04:20
UTC ·
(1 month ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /SiteMap.aspx | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatib ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /SiteMap.aspx | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot