🇫🇷
Sklurk
2026-06-14 11:30:22
(14 hours ago)
Web App Attack
Web App Attack
🇪🇸
masterguru
2026-06-13 12:28:57
(1 day ago)
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:user-agent. (1100000- ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:user-agent. (1100000-122)
show less
Bad Web Bot
🇳🇱
Site.eu
2026-06-13 11:19:28
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇬🇷
setupgr
2026-06-13 09:55:27
(1 day ago)
(mod_security) mod_security (id:11000010) triggered by 216.73.217.92: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:11000010) triggered by 216.73.217.92: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 12:55:25.419494 2026] [security2:error] [pid 705255:tid 705443] [client 216.73.217.92:44225] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "ClaudeBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: ClaudeBot - in www.pankoskal.gr"] [severity "CRITICAL"] [hostname "www.pankoskal.gr"] [uri "/robots.txt"] [unique_id "ai0pDfdQuR8_1cu8D1hJdwAAAMI"]
show less
Port Scan
🇫🇷
Dorian GRANDHAY
2026-06-13 05:08:08
(1 day ago)
(PERMBLOCK) 216.73.217.92 (US/United States/-) has had more than 4 temp blocks in the last 604800 se ...
show more
(PERMBLOCK) 216.73.217.92 (US/United States/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
🇩🇪
london2038.com
2026-06-13 01:00:18
(2 days ago)
Too many failed requests
216.73.217.92 - - [13/Jun/2026:01:33:26 +0200] "GET /index.php?hidelinks=1& ...
show more
Too many failed requests
216.73.217.92 - - [13/Jun/2026:01:33:26 +0200] "GET /index.php?hidelinks=1&hidetrans=1&title=Special%3AWhatLinksHere%2FTemplate%3AQuest_Item HTTP/2.0" 404 12316 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
216.73.217.92 - - [13/Jun/2026:01:41:12 +0200] "GET /Sitemap.xml HTTP/2.0" 404 9951 "https://wiki.<REDACTED>/sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
216.73.217.92 - - [13/Jun/2026:01:52:47 +0200] "GET /index.php?hidelinks=1&title=Special%3AWhatLinksHere%2FThe_Broker HTTP/2.0" 404 12105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
216.73.217.92 - - [13/Jun/2026:02:00:26 +0200] "GET /index.php?hidelinks=1&hideredirs=1&title=Special%3AWhatLinksHere%2FBroker HTTP/2.0" 404 11949 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-Searc
...
show less
Web Spam
Bad Web Bot
🇩🇪
netclix.gr
2026-06-12 07:02:51
(2 days ago)
(bot_kill_mega) Aggressive Bot Blocked: ClaudeBot 216.73.217.92 (US/United States/-): 1 in the last ...
show more
(bot_kill_mega) Aggressive Bot Blocked: ClaudeBot 216.73.217.92 (US/United States/-): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.92 - - [12/Jun/2026:10:02:48 +0300] "GET /robots.txt HTTP/1.1" 200 1971 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; ClaudeBot/1.0; [email protected] )"
show less
Port Scan
🇫🇷
Campus France
2026-06-11 09:00:03
(3 days ago)
...
Brute-Force
🇩🇪
london2038.com
2026-06-10 05:54:27
(4 days ago)
Too many failed requests
216.73.217.92 - - [10/Jun/2026:04:18:56 +0200] "GET /Sitemap.xml HTTP/2.0" ...
show more
Too many failed requests
216.73.217.92 - - [10/Jun/2026:04:18:56 +0200] "GET /Sitemap.xml HTTP/2.0" 404 9951 "https://wiki.<REDACTED>/sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
216.73.217.92 - - [10/Jun/2026:06:06:41 +0200] "GET /sitemap.xml HTTP/2.0" 404 4174 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
216.73.217.92 - - [10/Jun/2026:06:50:31 +0200] "GET /Sitemap.xml HTTP/2.0" 404 9951 "https://wiki.<REDACTED>/sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
216.73.217.92 - - [10/Jun/2026:07:12:56 +0200] "GET /Sitemap.xml HTTP/2.0" 404 9951 "https://wiki.<REDACTED>/sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
216.73.217.92 - - [10/Jun/2026:07:43:35 +0200] "GET /bbs/thread.php?fid=8 HTTP/2.0" 404 4
...
show less
Web Spam
Bad Web Bot
🇲🇳
Public CSIRT/CC of Mongolia
2026-06-10 03:07:52
(4 days ago)
Honeypot hit: HTTP/1.1 request on 25565
GET /robots.txt
User-Agent: Mozilla/5.0 AppleWebKit/537.36 ...
show more
Honeypot hit: HTTP/1.1 request on 25565
GET /robots.txt
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )
Accept: */*
Accept-Encoding: gzip, deflate; 25565 [2] TCP
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 20:21:16
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 216.73.217.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 216.73.217.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 16:21:09.688876 2026] [security2:error] [pid 30002:tid 30002] [client 216.73.217.92:33723] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.texaspamman.com|F|2"] [data ".webjump.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.texaspamman.com"] [uri "/countryfan/HTTP:/Countryfan.webjump.com"] [unique_id "aih1tbpFpwevNOFdM4TjkQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2026-06-09 17:32:00
(5 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: / | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] ) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-09 12:11:54
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 216.73.217.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 216.73.217.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:11:50.247928 2026] [security2:error] [pid 10207:tid 10207] [client 216.73.217.92:25493] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vitess.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vitess.com"] [uri "/2012/08/bonjour-brioche-taste-the-difference/www.vitess.com/granallenamentoseries.com"] [unique_id "aigDBnNnFWEExu_cutiLsgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 05:05:18
(5 days ago)
Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=16
Hacking
🇺🇸
cyfordtechnologies.com
2026-06-08 11:31:14
(6 days ago)
Non-human high traffic: 8/7 : Reported by Cyford API
DDoS Attack