🇬🇷
setupgr
2026-10-26 18:06:59
(2 days ago)
(mod_security) mod_security (id:11000011) triggered by 35.195.215.216 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Oct 26 20:06:56.467 ...
show more
(mod_security) mod_security (id:11000011) triggered by 35.195.215.216 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Oct 26 20:06:56.467965 2026] [security2:error] [pid 2493:tid 2673] [client 35.195.215.216:38958] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 216.215.195.35.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.setworldup.com"] [uri "/"] [unique_id "at-Wvx4C2mMVXv1VDUqvAgAAANc"]
show less
Port Scan
🇦🇺
Klaverstyn
2026-10-26 03:58:01
(2 days ago)
High-volume automated HTTP scanning
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-10-26 01:08:00
(3 days ago)
Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice02,wa02]
Hacking
Bad Web Bot
🇬🇧
thetomtaylor.co.uk
2026-10-25 13:05:04
(3 days ago)
Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [wa01]
Hacking
Bad Web Bot
🇬🇷
setupgr
2026-10-23 16:38:53
(5 days ago)
(mod_security) mod_security (id:11000011) triggered by 35.195.215.216 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Oct 23 19:38:52.566 ...
show more
(mod_security) mod_security (id:11000011) triggered by 35.195.215.216 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Oct 23 19:38:52.566815 2026] [security2:error] [pid 869698:tid 869844] [client 35.195.215.216:51890] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 216.215.195.35.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.adoro.gr"] [uri "/"] [unique_id "atuNnFAFkDd7OkvGrdXM3QAAAgs"]
show less
Port Scan
🇳🇱
Ike57
2026-10-23 09:08:07
(5 days ago)
Detected activity: Proxycheck.io Risk score: 33%; Multiple WAF violations; Abuse Confidence score over set treshold; Blocked by web application firewall; Datacenter IP detected; Is also listed in DNSBL: (Uceprotect + Uceprotect) | User-Agent: Mozilla ...
show more
Detected activity: Proxycheck.io Risk score: 33%; Multiple WAF violations; Abuse Confidence score over set treshold; Blocked by web application firewall; Datacenter IP detected; Is also listed in DNSBL: (Uceprotect + Uceprotect) | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36
show less
Bad Web Bot
🇬🇷
setupgr
2026-10-18 02:26:09
(1 week ago)
(mod_security) mod_security (id:11000011) triggered by 35.195.215.216 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Oct 18 05:26:04.668 ...
show more
(mod_security) mod_security (id:11000011) triggered by 35.195.215.216 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Oct 18 05:26:04.668655 2026] [security2:error] [pid 2662:tid 2807] [client 35.195.215.216:52096] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 216.215.195.35.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.setworldup.com"] [uri "/"] [unique_id "atQuPLEOX7S7Yc9_TLS4KgAAAcg"]
show less
Port Scan
🇬🇷
setupgr
2026-10-17 05:21:33
(1 week ago)
(mod_security) mod_security (id:11000011) triggered by 35.195.215.216 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 17 08:21:30.783 ...
show more
(mod_security) mod_security (id:11000011) triggered by 35.195.215.216 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 17 08:21:30.783536 2026] [security2:error] [pid 2987:tid 3128] [client 35.195.215.216:53634] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 216.215.195.35.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.adoro.gr"] [uri "/"] [unique_id "atMF2gCBw4eK8KCb0rKnVgAAA1Q"]
show less
Port Scan
🇪🇸
Michael McCarthy
2026-10-16 10:36:58
(1 week ago)
Web Spam
🇬🇧
thetomtaylor.co.uk
2026-10-11 14:08:01
(2 weeks ago)
Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice01,ice02,wa01]
Hacking
Bad Web Bot
🇬🇧
thetomtaylor.co.uk
2026-10-11 13:07:02
(2 weeks ago)
Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [wa02]
Hacking
Bad Web Bot
🇫🇮
as211431.net
2026-10-11 01:54:51
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36
Th ...
show more
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
FireGuard Server
2026-10-09 09:25:05
(2 weeks ago)
Blocked by os-abuseipdb; 24 hits, proto=tcp, ports=80
Port Scan
Hacking
🇬🇷
setupgr
2026-10-03 05:32:13
(3 weeks ago)
(mod_security) mod_security (id:11000011) triggered by 35.195.215.216 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 03 08:32:13.191 ...
show more
(mod_security) mod_security (id:11000011) triggered by 35.195.215.216 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 03 08:32:13.191372 2026] [security2:error] [pid 3216:tid 3324] [client 35.195.215.216:35016] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 216.215.195.35.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "www.asteriassantorini.com"] [uri "/"] [unique_id "asCTXKumaEt6ReKWT6b1bAAABIY"]
show less
Port Scan
🇪🇸
Michael McCarthy
2026-09-21 18:06:57
(1 month ago)
Web Spam
