🇬🇧
[email protected]
2025-11-02 00:57:08
UTC ·
(1 year ago)
...
Brute-Force
SSH
🇳🇱
homeshowdomain.nl
2025-11-01 22:59:38
UTC ·
(1 year ago)
Auto-ban: 246 malicious requests on 2025-10-31 (e.g., env/backup probes, brute-force, or error bursts).
Hacking
Web App Attack
SSH
🇬🇧
AvonleaConsulting
2025-10-31 23:48:39
UTC ·
(1 year ago)
Attempts to probe web pages for vulnerable PHP or other applications
Web App Attack
2025-10-31 10:54:19
UTC ·
(1 year ago)
Reported from Nginx log analysis 19. Log: 34.216.86.141 - - [31/Oct/2025:xx:xx:xx 0100] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36" "-" "US United S ...
show more
Reported from Nginx log analysis 19. Log: 34.216.86.141 - - [31/Oct/2025:xx:xx:xx 0100] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36" "-" "US United States Boardman" "AS16509" "AMAZON-02"
show less
Port Scan
Brute-Force
SSH
🇺🇸
Charlesiv
2025-10-31 10:43:11
UTC ·
(1 year ago)
Triggered Cloudflare WAF (botFight) from US.
Action taken: MANAGED_CHALLENGE
ASN: 16509 (AMAZON-02)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2025-10-31T07:44:55Z
Ray ID: 997187a83e071319
UA: Mozilla/5.0 (Linux; U; Android 2.1; en-us; Ne ...
show more
Triggered Cloudflare WAF (botFight) from US.
Action taken: MANAGED_CHALLENGE
ASN: 16509 (AMAZON-02)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2025-10-31T07:44:55Z
Ray ID: 997187a83e071319
UA: Mozilla/5.0 (Linux; U; Android 2.1; en-us; Nexus One Build/ERD62) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile Safari/530.17
show less
Bad Web Bot
🇫🇷
GoodOldTOS
2025-10-31 08:44:13
UTC ·
(1 year ago)
Highly suspect IP
Hacking
Web App Attack
🇮🇩
securejdprop
2025-10-31 08:42:50
UTC ·
(1 year ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 scan 🎩 Nuclei 👨💻). Ip 34.216.86.141 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-10-31 08:42:49.291233337 +0000 UTC
Web App Attack
🇵🇱
sefinek.net
2025-10-31 07:11:28
UTC ·
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /js/comparisonTableDescription.js
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /js/comparisonTableDescription.js
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 YaBrowser/19.6.0.1583 Yowser/2.5 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇬🇧
Globe2
2025-10-31 07:03:36
UTC ·
(1 year ago)
ModSec - Multiple 403s within a short period of time
Web App Attack
🇺🇸
TPI-Abuse
2025-10-31 06:53:54
UTC ·
(1 year ago)
(mod_security) mod_security (id:210831) triggered by 34.216.86.141 (ec2-34-216-86-141.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 31 02:53:51.643106 2025] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210831) triggered by 34.216.86.141 (ec2-34-216-86-141.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 31 02:53:51.643106 2025] [security2:error] [pid 31227:tid 31227] [client 34.216.86.141:46236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||bodybuildbid.com|F|4"] [data "Web Downloader"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "bodybuildbid.com"] [uri "/"] [unique_id "aQRc_3EFszUZT5oO6pk8xQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2025-10-31 06:21:50
UTC ·
(1 year ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.216.86.141 (US/United States/ec2-34-216-86-141.us-west-2.compute.amazonaws.com)
Bad Web Bot
2025-10-31 06:21:12
UTC ·
(1 year ago)
Bot / seems abusive / Apache connections: 23
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇩🇪
wsyq
2025-10-31 06:10:04
UTC ·
(1 year ago)
Fail2Ban - \[NGINX\]40x-Forcing to access a restricted resource
...
Bad Web Bot
Web App Attack
🇬🇧
AvonleaConsulting
2025-10-31 05:39:58
UTC ·
(1 year ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-31 05:37:16
UTC ·
(1 year ago)
(mod_security) mod_security (id:210831) triggered by 34.216.86.141 (ec2-34-216-86-141.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 31 01:37:12.869915 2025] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210831) triggered by 34.216.86.141 (ec2-34-216-86-141.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 31 01:37:12.869915 2025] [security2:error] [pid 9876:tid 9876] [client 34.216.86.141:58256] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||bsnbanif.es|F|4"] [data "Web Downloader"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "bsnbanif.es"] [uri "/"] [unique_id "aQRLCO4TX8CDcrVuvPfGVQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack