🇧🇪
taivas.nl
2026-11-11 05:33:01
UTC ·
(32 minutes ago)
Many_bad_calls
Web App Attack
🇬🇧
consul.to
2026-11-10 10:03:56
UTC ·
(20 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-10 09:52:44
UTC ·
(20 hours ago)
[Tue Nov 10 20:52:44.188912 2026] [security2:error] [pid 236490] [client 69.164.205.183:57858] [client 69.164.205.183] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/RE ...
show more
[Tue Nov 10 20:52:44.188912 2026] [security2:error] [pid 236490] [client 69.164.205.183:57858] [client 69.164.205.183] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "rjryanpartners.com.au"] [uri "/"] [unique_id "avLpbA0ttyhRMo-JwMTzLgAAAAM"]
...
show less
Web App Attack
🇭🇺
bcsaba
2026-11-10 08:52:04
UTC ·
(21 hours ago)
Going for WP CVE-2026-63030
69.164.205.183 - - [10/Nov/2026:09:52:01 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
Web App Attack
🇬🇷
setupgr
2026-11-10 05:27:36
UTC ·
(1 day ago)
(mod_security) mod_security (id:11000011) triggered by 69.164.205.183 (US/United States/Texas/Richardson/-/[AS63949 Akamai Connected Cloud]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:2 ...
show more
(mod_security) mod_security (id:11000011) triggered by 69.164.205.183 (US/United States/Texas/Richardson/-/[AS63949 Akamai Connected Cloud]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:27:34.843337 2026] [security2:error] [pid 1263654:tid 1263763] [client 69.164.205.183:42012] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "linodeusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 69-164-205-183.ip.linodeusercontent.com"] [severity "CRITICAL"] [hostname "asteriassantorini.com"] [uri "/"] [unique_id "avKrRnMg3jukn9OSuyZxIAAAAgU"]
show less
Port Scan
🇺🇸
mnsf
2026-11-10 04:05:16
UTC ·
(1 day ago)
Abuse Detected (10)
Brute-Force
Web App Attack
🇩🇪
LRob
2026-11-10 03:56:36
UTC ·
(1 day ago)
Vulnerability scanning | method: GET | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
Port Scan
Web App Attack
2026-11-09 13:26:12
UTC ·
(1 day ago)
Web application attack detected.
Web App Attack
🇩🇰
RhQM
2026-11-09 13:04:07
UTC ·
(1 day ago)
Bad Web Bot
Exploited Host
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-08 22:59:39
UTC ·
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-07.
Web App Attack
SSH
Hacking
🇺🇸
wordpresshosting.solutions
2026-11-08 20:40:42
UTC ·
(2 days ago)
Web brute-force / failed auth detected
Brute-Force
Web App Attack
🇬🇷
setupgr
2026-11-07 21:25:08
UTC ·
(3 days ago)
(mod_security) mod_security (id:11000011) triggered by 69.164.205.183 (US/United States/Texas/Richardson/-/[AS63949 Akamai Connected Cloud]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:2 ...
show more
(mod_security) mod_security (id:11000011) triggered by 69.164.205.183 (US/United States/Texas/Richardson/-/[AS63949 Akamai Connected Cloud]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:25:04.057919 2026] [security2:error] [pid 11639:tid 11670] [remote 69.164.205.183:40070] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "linodeusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 69-164-205-183.ip.linodeusercontent.com"] [severity "CRITICAL"] [hostname "ions.gr"] [uri "/"] [unique_id "au-XMKeX-o37xGAWD9NDgAAA1QA"]
show less
Port Scan
🇨🇭
blinx
2026-11-07 20:13:02
UTC ·
(3 days ago)
Suspicious activity detected by Modsecurity
Web Spam
Port Scan
Hacking
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-11-07 14:53:41
UTC ·
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
This rep ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
