๐ฎ๐ฉ
hermawan
2026-10-01 08:13:29
(4 hours ago)
[Thu Oct 01 15:13:13.353465 2026] [security2:error] [pid 50448:tid 140540389619392] [client 2a03:288 ...
show more
[Thu Oct 01 15:13:13.353465 2026] [security2:error] [pid 50448:tid 140540389619392] [client 2a03:2880:f814:e:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555563358-prediksi-bulanan-curah-hujan-bulan-oktober-tahun-2026-update-dari-analisis-bulan-juli-tahun-2026-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/c
...
show less
Email Spam
Hacking
๐ซ๐ฎ
000rosiu
2026-10-01 00:50:19
(12 hours ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoin ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /linux-pl | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ต๐ฑ
sefinek.net
2026-09-30 20:10:50
(16 hours ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoin ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /gallery/old-images/neko-girl-white-dress-beach | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
big-cloud.nl
2026-09-29 19:13:10
(1 day ago)
Try to access /xmlrpc.php?rsd
Web App Attack
๐ฉ๐ช
MarkGGN
2026-09-29 18:22:30
(1 day ago)
Web attack. 2a03:2880:f814:e:: - - [29/Sep/2026:20:22:13 +0200] "GET /me-first-and-the-gimme-gimmes- ...
show more
Web attack. 2a03:2880:f814:e:: - - [29/Sep/2026:20:22:13 +0200] "GET /me-first-and-the-gimme-gimmes-sweet-caroline-freitagsvideo-29-03-2019/null HTTP/2.0" 301 0 "https://www.*/me-first-and-the-gimme-gimmes-sweet-caroline-freitagsvideo-29-03-2019/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
2a03:2880:f814:e:: - - [29/Sep/2026:20:22:30 +0200] "GET /tag/juploadr/null HTTP/2.0" 301 0 "https://www.*/tag/juploadr/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 19:30:21
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a03:2880:f814:e:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a03:2880:f814:e:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 15:30:13.499854 2026] [security2:error] [pid 7668:tid 7668] [client 2a03:2880:f814:e:::29668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iotgardening.nextngnr.com"] [uri "/zS6U97.htaccess"] [unique_id "arrARWnafvJpwu1uDlUrAAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
abuseipdb.amaze321
2026-09-28 09:33:13
(3 days ago)
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack
Bad Web Bot
๐ซ๐ท
Entalpi.net
2026-09-27 15:41:07
(3 days ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
๐ง๐ช
cmbplf
2026-09-27 07:14:19
(4 days ago)
103 querystring crawling (29m59s)
Brute-Force
Bad Web Bot
๐ง๐ช
cmbplf
2026-09-27 01:04:26
(4 days ago)
147 querystring crawling (29m59s)
Brute-Force
Bad Web Bot
๐ฉ๐ช
big-cloud.nl
2026-09-26 16:04:36
(4 days ago)
Try to access /xmlrpc.php?rsd
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 20:06:30
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f814:e:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f814:e:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 16:06:22.867201 2026] [security2:error] [pid 28526:tid 28536] [client 2a03:2880:f814:e:::63784] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||charliefranks.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "charliefranks.com"] [uri "/charliefranks.com"] [unique_id "arWCvh2wxC9VhA71NRN7KQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
mrcrassi
2026-09-21 23:44:55
(1 week ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /wp-content/uploads/2023/12/Manual_Livreto_Cancela_Classic_AC_DC-UNIFICADO-C05034_portugues_espanhol-rev03.pdf
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ต๐ฑ
sefinek.net
2026-09-20 20:20:23
(1 week ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoin ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /genshin-stella-mod/docs | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฌ๐ง
Mendip_Defender
2026-09-17 07:22:23
(2 weeks ago)
2a03:2880:f814:e:: - - [17/Sep/2026:08:22:38 +0100] "GET /governance-and-polices/ HTTP/1.1" 200 1784 ...
show more
2a03:2880:f814:e:: - - [17/Sep/2026:08:22:38 +0100] "GET /governance-and-polices/ HTTP/1.1" 200 17840 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalads/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))"
...
show less
Bad Web Bot