๐ฌ๐ท
setupgr
2026-10-27 20:14:34
(22 minutes ago)
(mod_security) mod_security (id:11000011) triggered by 35.187.118.85 (BE/Belgium/Brussels Capital/Br ...
show more
(mod_security) mod_security (id:11000011) triggered by 35.187.118.85 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Oct 27 22:14:34.315185 2026] [security2:error] [pid 2827:tid 2934] [client 35.187.118.85:49436] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 85.118.187.35.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.setworldup.com"] [uri "/"] [unique_id "auEGKjbzeMR_pAwBC6UCTwAAAoY"]
show less
Port Scan
๐ฌ๐ท
setupgr
2026-10-25 16:19:39
(2 days ago)
(mod_security) mod_security (id:11000011) triggered by 35.187.118.85 (BE/Belgium/Brussels Capital/Br ...
show more
(mod_security) mod_security (id:11000011) triggered by 35.187.118.85 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Oct 25 18:19:36.881868 2026] [security2:error] [pid 869234:tid 869381] [client 35.187.118.85:37362] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 85.118.187.35.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.setworldup.com"] [uri "/"] [unique_id "at4sGFyCdQfnu8H3uO0LUQAAA88"]
show less
Port Scan
๐ช๐ธ
Michael McCarthy
2026-10-25 02:01:07
(2 days ago)
Web Spam
๐ฌ๐ง
thetomtaylor.co.uk
2026-10-24 13:06:02
(3 days ago)
Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice01]
Hacking
Bad Web Bot
๐ฌ๐ง
thetomtaylor.co.uk
2026-10-23 09:07:02
(4 days ago)
Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [wa01,wa02]
Hacking
Bad Web Bot
๐ฆ๐บ
Klaverstyn
2026-10-22 21:46:27
(4 days ago)
High-volume automated HTTP scanning
Web App Attack
๐ซ๐ฎ
as211431.net
2026-10-22 21:05:05
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ญ๐ณ
unph
2026-10-21 23:01:07
(5 days ago)
Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin
Brute-Force
๐ฌ๐ท
setupgr
2026-10-21 08:31:05
(6 days ago)
(mod_security) mod_security (id:11000011) triggered by 35.187.118.85 (BE/Belgium/Brussels Capital/Br ...
show more
(mod_security) mod_security (id:11000011) triggered by 35.187.118.85 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Oct 21 11:31:01.232436 2026] [security2:error] [pid 3226:tid 3352] [client 35.187.118.85:44910] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 85.118.187.35.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.setworldup.com"] [uri "/"] [unique_id "ath4RcEK8IcGjqVsGPkO1QAABEY"]
show less
Port Scan
๐ฉ๐ช
HandyTreff.de
2026-10-21 03:46:44
(6 days ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -77.542 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -77.542 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.10
show less
Web App Attack
Bad Web Bot
๐ฉ๐ช
strzonnek
2026-10-14 03:24:56
(1 week ago)
attack on webform
Brute-Force
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-10-10 12:08:00
(2 weeks ago)
Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice01,ice02,wa01,wa02]
Hacking
Bad Web Bot
๐ฌ๐ท
setupgr
2026-10-08 03:08:33
(2 weeks ago)
(mod_security) mod_security (id:11000011) triggered by 35.187.118.85 (BE/Belgium/Brussels Capital/Br ...
show more
(mod_security) mod_security (id:11000011) triggered by 35.187.118.85 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Oct 08 06:08:29.306342 2026] [security2:error] [pid 98043:tid 98164] [client 35.187.118.85:58452] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 85.118.187.35.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.setworldup.com"] [uri "/"] [unique_id "ascJLd3EWOJwR6hxyyKOywAABNQ"]
show less
Port Scan
๐บ๐ธ
jkcunningham
2026-10-04 13:36:23
(3 weeks ago)
Scout. Browser without javascript. Scouts for active webservers.
Bad Web Bot
๐ฌ๐ท
setupgr
2026-10-04 08:37:17
(3 weeks ago)
(mod_security) mod_security (id:11000011) triggered by 35.187.118.85 (BE/Belgium/Brussels Capital/Br ...
show more
(mod_security) mod_security (id:11000011) triggered by 35.187.118.85 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Oct 04 11:37:15.898362 2026] [security2:error] [pid 2929:tid 3118] [client 35.187.118.85:50578] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 85.118.187.35.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.asteriassantorini.com"] [uri "/"] [unique_id "asIQOyKdpkHeJUwc2Hd_9QAAA1g"]
show less
Port Scan