🇺🇸
1gz
2026-10-15 21:31:12
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET m ...
show more
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇪🇸
Michael McCarthy
2026-10-14 07:16:30
(2 days ago)
Web Spam
🇬🇷
setupgr
2026-10-11 01:59:45
(6 days ago)
(mod_security) mod_security (id:11000011) triggered by 34.76.242.182 (BE/Belgium/Brussels Capital/Br ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.76.242.182 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Oct 11 04:59:42.122333 2026] [security2:error] [pid 231235:tid 231338] [client 34.76.242.182:35230] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 182.242.76.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.ftiaxtomonosou.gr"] [uri "/"] [unique_id "asrtjrVuYNVU94quP4kT7AAABMA"]
show less
Port Scan
🇦🇺
FireGuard Server
2026-10-04 04:35:03
(1 week ago)
Blocked by os-abuseipdb; 24 hits, proto=tcp, ports=80
Port Scan
Hacking
🇬🇷
setupgr
2026-10-04 03:39:09
(1 week ago)
(mod_security) mod_security (id:11000011) triggered by 34.76.242.182 (BE/Belgium/Brussels Capital/Br ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.76.242.182 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Oct 04 06:39:08.163117 2026] [security2:error] [pid 2994:tid 3109] [client 34.76.242.182:40808] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 182.242.76.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.setworldup.com"] [uri "/"] [unique_id "asHKXJMaU5tVgTfxHzYGWwAAA4Q"]
show less
Port Scan
🇬🇷
setupgr
2026-10-03 11:39:13
(1 week ago)
(mod_security) mod_security (id:11000011) triggered by 34.76.242.182 (BE/Belgium/Brussels Capital/Br ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.76.242.182 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 03 14:39:08.765999 2026] [security2:error] [pid 2883:tid 3017] [client 34.76.242.182:43324] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 182.242.76.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.ftiaxtomonosou.gr"] [uri "/"] [unique_id "asDpXKLc2Z6LAbIhHUiz8gAAAwg"]
show less
Port Scan
🇦🇺
FireGuard Server
2026-09-30 22:20:04
(2 weeks ago)
Blocked by os-abuseipdb; 24 hits, proto=tcp, ports=80
Port Scan
Hacking
🇩🇪
HandyTreff.de
2026-09-28 13:19:52
(2 weeks ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -77.542 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -77.542 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.10
show less
Web App Attack
Bad Web Bot
🇬🇷
setupgr
2026-09-27 16:36:50
(2 weeks ago)
(mod_security) mod_security (id:11000011) triggered by 34.76.242.182 (BE/Belgium/Brussels Capital/Br ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.76.242.182 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Sep 27 19:36:47.674948 2026] [security2:error] [pid 343478:tid 343644] [client 34.76.242.182:39852] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 182.242.76.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.setworldup.com"] [uri "/"] [unique_id "arlGH9UGrCKTBNhpWMICNwAAANY"]
show less
Port Scan
🇫🇷
spongebob1234
2026-09-26 06:20:48
(2 weeks ago)
Wazuh SIEM: 16 tentative(s) d'accès suspecte(s) / non autorisée(s) détectée(s). Type(s) d'attaque : ...
show more
Wazuh SIEM: 16 tentative(s) d'accès suspecte(s) / non autorisée(s) détectée(s). Type(s) d'attaque : Web (Erreur 400 Bad Request).
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-23 21:07:43
(3 weeks ago)
This address swept through a list of pages that do not exist on our site within seconds — a scanner ...
show more
This address swept through a list of pages that do not exist on our site within seconds — a scanner working through its wordlist of exploitable paths. Blocked; please check the machine behind it for a scanner or malware. | method: GET | path: /le-groupe/nos-filiales/dg-consultants/ | 2026-09-23 21:07 UTC
show less
Port Scan
Web App Attack
🇬🇷
setupgr
2026-09-21 11:25:15
(3 weeks ago)
(mod_security) mod_security (id:11000011) triggered by 34.76.242.182 (BE/Belgium/Brussels Capital/Br ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.76.242.182 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:25:10.969416 2026] [security2:error] [pid 1708469:tid 1708750] [client 34.76.242.182:50622] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 182.242.76.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.adoro.gr"] [uri "/"] [unique_id "arEUFnRrOLBFY3p1PtWrgQAAAc4"]
show less
Port Scan
🇬🇷
setupgr
2026-09-20 16:19:25
(3 weeks ago)
(mod_security) mod_security (id:11000011) triggered by 34.76.242.182 (BE/Belgium/Brussels Capital/Br ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.76.242.182 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Sep 20 19:19:24.595532 2026] [security2:error] [pid 1026238:tid 1026356] [client 34.76.242.182:52956] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 182.242.76.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.ftiaxtomonosou.gr"] [uri "/"] [unique_id "arAHjOHMBevSU7Wxm9HerAAABEA"]
show less
Port Scan
🇭🇳
unph
2026-09-18 15:59:52
(4 weeks ago)
Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin
Brute-Force
🇦🇺
Klaverstyn
2026-09-18 13:18:29
(4 weeks ago)
High-volume automated HTTP scanning
Web App Attack