🇫🇮
as211431.net
2026-11-08 13:39:34
UTC ·
(20 hours ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /cdn-cgi/zaraz/t
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /cdn-cgi/zaraz/t
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
klaus_ph
2026-08-09 00:07:05
UTC ·
(3 months ago)
65.55.210.161 - - [08/Aug/2026:04:51:22 +0200] "GET /lka/themes/bootstrap3/css/print.css HTTP/1.1" 200 5879 "https://lka.vufind.net/lka/Record/z0000105/Details" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www. ...
show more
65.55.210.161 - - [08/Aug/2026:04:51:22 +0200] "GET /lka/themes/bootstrap3/css/print.css HTTP/1.1" 200 5879 "https://lka.vufind.net/lka/Record/z0000105/Details" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇬🇷
setupgr
2026-06-16 22:38:42
UTC ·
(4 months ago)
(mod_security) mod_security (id:11000010) triggered by 65.55.210.161: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 01:38:40.323823 2026] [security2:error] [pid 2210176:tid 2210219] [remote 65.55.210.161 ...
show more
(mod_security) mod_security (id:11000010) triggered by 65.55.210.161: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 01:38:40.323823 2026] [security2:error] [pid 2210176:tid 2210219] [remote 65.55.210.161:60550] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/maps/documentation/javascript/examples/markerclusterer/markerclusterer.js"] [unique_id "ajHQcI0pb6dkgQfaMdDRjQABFA0"], referer: https://ftiaxtomonosou.gr/
show less
Port Scan
🇬🇷
setupgr
2026-06-15 23:57:18
UTC ·
(4 months ago)
(mod_security) mod_security (id:11000010) triggered by 65.55.210.161: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 02:57:12.665186 2026] [security2:error] [pid 1965768:tid 1965770] [remote 65.55.210.161 ...
show more
(mod_security) mod_security (id:11000010) triggered by 65.55.210.161: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 02:57:12.665186 2026] [security2:error] [pid 1965768:tid 1965770] [remote 65.55.210.161:21378] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in asteriassantorini.com"] [severity "CRITICAL"] [hostname "asteriassantorini.com"] [uri "/wp-content/plugins/premium-addons-pro/assets/frontend/min-css/premium-addons.min.css"] [unique_id "ajCRWJhSggell5vQAURo8QABRwE"], referer: https://asteriassantorini.com/
show less
Port Scan
🇬🇷
setupgr
2026-06-13 14:03:48
UTC ·
(4 months ago)
(mod_security) mod_security (id:11000010) triggered by 65.55.210.161: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 17:03:47.470246 2026] [security2:error] [pid 864848:tid 864982] [remote 65.55.210.161:3 ...
show more
(mod_security) mod_security (id:11000010) triggered by 65.55.210.161: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 17:03:47.470246 2026] [security2:error] [pid 864848:tid 864982] [remote 65.55.210.161:3783] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in sea-sound.com"] [severity "CRITICAL"] [hostname "sea-sound.com"] [uri "/wp-content/uploads/elementor/css/post-20765.css"] [unique_id "ai1jQ9p_WC-pRDvpMAChhAABDxE"], referer: https://sea-sound.com/
show less
Port Scan
2026-05-14 01:56:44
UTC ·
(5 months ago)
65.55.210.161 - - [14/May/2026:01:56:40 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show more
65.55.210.161 - - [14/May/2026:01:56:40 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
65.55.210.161 - - [14/May/2026:01:56:40 +0000] "GET /svg/moon-phase-1.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
65.55.210.161 - - [14/May/2026:01:56:41 +0000] "GET /svg/moon-phase-0.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇦🇺
Anytech
2026-04-04 09:28:27
UTC ·
(7 months ago)
Blocked by Conn-Monitor: Automated bot activity
Web App Attack
🇦🇺
Anytech
2026-04-02 09:19:52
UTC ·
(7 months ago)
Blocked by Conn-Monitor: Automated bot activity
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2025-09-09 15:57:56
UTC ·
(1 year ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
🇮🇹
Progetto1
2025-09-06 06:58:01
UTC ·
(1 year ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇳🇱
i-turnradio.nl
2025-09-04 11:21:26
UTC ·
(1 year ago)
2025-09-04 @ 13:21:25 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
🇮🇹
Progetto1
2025-09-01 10:27:04
UTC ·
(1 year ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇦🇺
MAGIC
2025-08-13 03:07:30
UTC ·
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇨🇴
j458rjqwi348fhjq46
2025-08-05 08:13:37
UTC ·
(1 year ago)
Malicious IP detected by WAF with anomaly score 11.0. Attack types: Timestamp deviates by 5.0 hours, Timestamp deviates by 3.2 hours, Timestamp deviates by 1.6 hours (+8 more). Activity: 9255 requests to 50 URLs. Period: 2025-08-05 03:06:43 - 2025-08 ...
show more
Malicious IP detected by WAF with anomaly score 11.0. Attack types: Timestamp deviates by 5.0 hours, Timestamp deviates by 3.2 hours, Timestamp deviates by 1.6 hours (+8 more). Activity: 9255 requests to 50 URLs. Period: 2025-08-05 03:06:43 - 2025-08-05 03:06:39 (America/Bogota). Origin: US. Source: Automated WAF log analysis.
show less
Hacking
Web App Attack
🇦🇺
MAGIC
2025-07-29 04:02:41
UTC ·
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
