🇫🇮
as211431.net
2026-09-22 15:42:50
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /cdn-cgi/zaraz/t
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇦
Anytech
2026-08-27 21:32:51
(1 month ago)
Blocked by Conn-Monitor: http-bad-user-agent
Web App Attack
Bad Web Bot
🇫🇷
conseilgouz
2026-08-07 21:26:13
(2 months ago)
joe-12 : Block return, carriage return, ... characters=>/?hubs_content=blog.hubspot.fr%252Fmarketing ...
show more
joe-12 : Block return, carriage return, ... characters=>/?hubs_content=blog.hubspot.fr%252Fmarketing%252Fdissonance-cognitive&hubs_content-cta=hsg-nav__box-link&gclid=CjwKCAiAgbiQBh(%)
show less
Hacking
🇬🇷
setupgr
2026-06-17 06:18:05
(4 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.62 (US/United States/Washington/Qui ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.62 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 09:18:03.935422 2026] [security2:error] [pid 2210293:tid 2210297] [remote 40.77.177.62:45571] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/jet-engine/includes/modules/maps-listings/assets/js/public/location-distance.js"] [unique_id "ajI8G9Mtn8QwdXQy9m6smQABQAE"], referer: https://ftiaxtomonosou.gr/%CE%BD%CE%AD%CE%B1/%cf%84%ce%b9-%ce%b5%ce%af%ce%bd%ce%b1%ce%b9-%cf%84%ce%bf-o-s-b/
show less
Port Scan
🇬🇷
setupgr
2026-06-14 10:27:16
(4 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.62: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.62: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 13:27:12.936900 2026] [security2:error] [pid 948989:tid 1301705] [remote 40.77.177.62:45568] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in cpanagiotou.gr"] [severity "CRITICAL"] [hostname "cpanagiotou.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/pixelyoursite-pro/dist/scripts/public.js"] [unique_id "ai6CANXD3_cY7WcDuxpyKQAAgCA"], referer: https://cpanagiotou.gr/en/contact
show less
Port Scan
🇬🇷
setupgr
2026-06-14 04:27:40
(4 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.62: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.62: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 07:27:35.712464 2026] [security2:error] [pid 921870:tid 921938] [remote 40.77.177.62:63043] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in villa-izabela.com"] [severity "CRITICAL"] [hostname "villa-izabela.com"] [uri "/wp-content/cache/min/1/wp-content/plugins/wccp-pro/css/css-protect.css"] [unique_id "ai4ttyiyK_EXlfCi56fU5AAAUhg"], referer: https://villa-izabela.com/
show less
Port Scan
🇬🇷
setupgr
2026-06-13 14:47:26
(4 months ago)
(mod_security) mod_security (id:11000010) triggered by 40.77.177.62: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:11000010) triggered by 40.77.177.62: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 17:47:23.663136 2026] [security2:error] [pid 864871:tid 865032] [remote 40.77.177.62:45570] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in fashionfragonard.gr"] [severity "CRITICAL"] [hostname "fashionfragonard.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/shopengine/assets/js/simple-scrollbar.js"] [unique_id "ai1te2z1K1AoECh-J669SgABRBQ"], referer: https://fashionfragonard.gr/
show less
Port Scan
🇫🇮
inlink.ltd
2026-05-15 19:31:48
(5 months ago)
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 40.77.177.62 was not IP ...
show more
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 40.77.177.62 was not IP who made PoW GET request earlier
show less
DDoS Attack
Exploited Host
2026-05-15 17:06:50
(5 months ago)
40.77.177.62 - - [15/May/2026:17:06:47 +0000] "GET /sw.js HTTP/2.0" 444 0 "https://taiwan.suann.net/ ...
show more
40.77.177.62 - - [15/May/2026:17:06:47 +0000] "GET /sw.js HTTP/2.0" 444 0 "https://taiwan.suann.net/benchmark/3361/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.177.62 - - [15/May/2026:17:06:48 +0000] "GET /workbox-835c8c05.js HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
40.77.177.62 - - [15/May/2026:17:06:49 +0000] "GET /sass/tailwind.scss HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
pocketpark
2026-05-04 16:57:33
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: JSCHALLENGE | Protocol: HTTP/2 (GET) | En ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: JSCHALLENGE | Protocol: HTTP/2 (GET) | Endpoint: /fr/destinations/heideparkresort/crowd | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
Anytech
2026-04-05 07:57:16
(6 months ago)
Blocked by Conn-Monitor: Automated bot activity
Web App Attack
🇺🇸
cyfordtechnologies.com
2026-03-16 05:08:23
(7 months ago)
High traffic: 3/3 : Reported by Cyford API
DDoS Attack
🇳🇱
crypto i trust, hold i must
2026-01-05 14:21:00
(9 months ago)
Automated vulnerability scanner detected. User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Ge ...
show more
Automated vulnerability scanner detected. User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/100.0.4896.127 Safari/537.36
show less
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2025-10-12 06:34:42
(1 year ago)
[Sun Oct 12 13:26:01.034702 2025] [security2:error] [pid 4464:tid 139679295833792] [client 40.77.177 ...
show more
[Sun Oct 12 13:26:01.034702 2025] [security2:error] [pid 4464:tid 139679295833792] [client 40.77.177.62:65028] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:From" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "98"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: found within REQUEST_HEADERS:From: bingbot(at)microsoft.com request_line = GET /index-v100.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index-v100.js"] [unique_id "aOtJ-f8o9pbA2n8eqCeeiAADlAs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[4476] [T9R2OXDGK90] [aOtJ-f8o9pbA2n8eqCeeiAADlAs] keep_alive=[1] [2025-10-12 13:26:01.034707] [R:aOtJ-f8o9pbA2n8eqCeeiAADlAs] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/100.0.4896.127 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEP
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-09-23 05:46:13
(1 year ago)
[Tue Sep 23 12:43:13.186724 2025] [security2:error] [pid 32443:tid 139836476720832] [client 40.77.17 ...
show more
[Tue Sep 23 12:43:13.186724 2025] [security2:error] [pid 32443:tid 139836476720832] [client 40.77.177.62:3527] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:From" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "98"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: found within REQUEST_HEADERS:From: bingbot(at)microsoft.com request_line = GET /timeout-worker-v3.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/timeout-worker-v3.js"] [unique_id "aNIzcb9LWA1FnZ7XOvlcbwACTAI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[32446] [oSZsafEAvD4] [aNIzcb9LWA1FnZ7XOvlcbwACTAI] keep_alive=[1] [2025-09-23 12:43:13.186729] [R:aNIzcb9LWA1FnZ7XOvlcbwACTAI] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/100.0.4896.127 Safari/537.36' Host:'staklim-jatim.bm
...
show less
Hacking
Web App Attack
