Medium
automation_user_agent -25 User-Agent looks automated, headless, or scripted.
Lightweight Cloudflare Worker
IP Security Analyzer
A privacy-aware IP intelligence dashboard that evaluates the public network path, reputation signals, browser exposure, and connection consistency without treating datacenter usage as risk by itself.
216.73.217.34
IPv4
AS16509
US
HTTP/1.1
Unknown
Network Identity
Anthropic, PBC
Hosting / Datacenter
ASNAS16509
CityColumbus
Cloudflare EdgeCMH
IPinfo Lite
StatusConnected
ASNAS16509
AS NameAmazon.com, Inc.
Domainamazon.com
CountryUnited States
AbuseIPDB
StatusConnected
Abuse Score100
Reports146
Distinct Users63
TorNo
Network Details
Usage TypeData Center/Web Hosting/Transit
AbuseIPDB ISPAnthropic, PBC
Domainanthropic.com
HostnamesNo hostnames
Last Reported2026-11-05T22:44:02+00:00
Connection Fingerprint
ProtocolHTTP/1.1
TLSUnknown
Ray IDa55fc86cb8176bf7
Bot ScoreN/A
Verified BotN/A
Server-side Findings
Low
browser_header_mismatch -10 User-Agent looks like a browser but common modern browser headers are missing.
Low
missing_accept_language -8 Browser-like request has no Accept-Language header.
Info
abuseipdb_usage_type_datacenter +0 AbuseIPDB usage type says this IP is Data Center/Web Hosting/Transit. This is infrastructure classification only, not a risk penalty.
Info
known_hosting_asn +0 ASN is in the built-in hosting/cloud/datacenter ASN list. Hosting ASN alone is not treated as risky.
Info
ipinfo_lite_enrichment +0 IPinfo Lite ASN enrichment: AS16509 Amazon.com, Inc.
Critical
abuseipdb_very_high_reputation_risk -45 AbuseIPDB confidence score is very high.
High
abuseipdb_many_reports -18 This IP has many abuse reports.
Info
abuseipdb_enrichment +0 AbuseIPDB: score 100, reports 146, usage Data Center/Web Hosting/Transit.
WebRTC Leak Test
WebRTC test has not been run yet. Use the test button to collect browser ICE candidates and compare them with the HTTP IP.
Technical Methodology
Purpose of the analysis
The dashboard evaluates the public network identity that reaches the service. It does not try to guess hidden private information; it correlates observable signals such as ASN ownership, abuse reputation, request consistency, and optional browser-side WebRTC exposure.
Network identity layer
The first layer identifies the visible IP address, IP version, ASN, network organization, country, region, city, Cloudflare edge location, HTTP protocol, and TLS version. These fields describe the route and network presenting the request to the application.
ASN and organization classification
The classifier groups networks into categories such as hosting/datacenter, mobile carrier, corporate network, education network, residential-like ISP, or VPN/proxy-like naming. This classification is used as context. Hosting, CDN, cloud, and transit networks are not penalized unless stronger risk evidence exists.
Reputation correlation
Abuse reputation is evaluated through confidence score, report count, number of reporting users, Tor indication, last reported time, ISP, domain, usage type, and hostnames. Reputation score and report volume are weighted because they represent historical abuse evidence rather than simple network type.
IP enrichment context
ASN enrichment provides the AS number, AS name, AS domain, country, and continent. This improves attribution and makes the network identity easier to interpret. It is not treated as direct proof of VPN, proxy, or malicious behavior.
Request consistency checks
The Worker checks whether the request looks consistent with a normal browser session. It reviews User-Agent presence, known automation clients, Accept-Language, browser client hints, fetch metadata headers, TLS version, and optional Cloudflare Bot Management signals when available.
Risk scoring logic
The score starts at 100 and decreases only when meaningful risk indicators are present: Tor status, elevated abuse confidence, abuse reports, VPN/proxy/privacy keywords, suspicious automation headers, low bot score, or browser-side leak findings. Datacenter classification alone remains informational.
WebRTC exposure test
The browser test creates a temporary peer connection and collects ICE candidates. If a public candidate IP differs from the HTTP IP observed by the Worker, it is reported as a possible browser-side exposure or proxy bypass signal. Local, private, and mDNS candidates are shown separately.
Signal interpretation
The dashboard separates classification from risk. A clean datacenter IP with no abuse reports remains low risk, while a residential-looking IP can still become risky if it has abuse history, Tor status, automation indicators, or WebRTC mismatch evidence.
Known limitations
The service can only analyze signals visible to the website and browser. A properly configured VPN or proxy may hide the original ISP IP completely. DNS resolver leaks cannot be confirmed by a standard Worker without authoritative DNS logging for unique test domains.
Raw JSON
{
"status": "success",
"version": "9.0.0-professional-no-datacenter-penalty",
"generatedAt": "2026-11-05T23:54:19.100Z",
"ip": {
"address": "216.73.217.34",
"version": "IPv4"
},
"network": {
"asn": 16509,
"isp": "Anthropic, PBC",
"localClassification": {
"type": "Hosting / Datacenter",
"flags": {
"knownHostingAsn": true,
"hostingName": true,
"vpnProxyName": false,
"mobileName": false,
"residentialName": false,
"educationName": false,
"corporateName": true,
"abuseDatacenterUsage": true,
"abuseTor": false
},
"evidenceText": "Anthropic, PBC 16509 AS16509 Amazon.com, Inc. amazon.com Data Center/Web Hosting/Transit Anthropic, PBC anthropic.com"
}
},
"location": {
"country": "United States",
"countryCode": "US",
"region": "Ohio",
"city": "Columbus",
"timezone": "America/New_York",
"latitude": "39.96118",
"longitude": "-82.99879",
"colo": "CMH",
"continent": "North America",
"continentCode": "NA"
},
"connection": {
"tlsVersion": "Unknown",
"tlsCipher": "Unknown",
"httpProtocol": "HTTP/1.1",
"rayId": "a55fc86cb8176bf7",
"userAgent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"acceptLanguage": "",
"accept": "*/*",
"secChUa": "",
"secChUaMobile": "",
"secChUaPlatform": "",
"secFetchSite": "",
"secFetchMode": "",
"secFetchDest": "",
"ja3Hash": null,
"ja4": null,
"referer": ""
},
"cloudflareSignals": {
"botScore": null,
"verifiedBot": null,
"staticResource": null,
"corporateProxy": null
},
"externalIntel": {
"ipinfoLite": {
"enabled": true,
"ok": true,
"parsed": {
"ip": "216.73.217.34",
"asn": "AS16509",
"asName": "Amazon.com, Inc.",
"asDomain": "amazon.com",
"countryCode": "US",
"country": "United States",
"continentCode": "NA",
"continent": "North America",
"raw": {
"ip": "216.73.217.34",
"asn": "AS16509",
"as_name": "Amazon.com, Inc.",
"as_domain": "amazon.com",
"country_code": "US",
"country": "United States",
"continent_code": "NA",
"continent": "North America"
}
},
"raw": {
"ip": "216.73.217.34",
"asn": "AS16509",
"as_name": "Amazon.com, Inc.",
"as_domain": "amazon.com",
"country_code": "US",
"country": "United States",
"continent_code": "NA",
"continent": "North America"
},
"error": null,
"attribution": "IP address data powered by IPinfo Lite"
},
"abuseipdb": {
"enabled": true,
"ok": true,
"parsed": {
"ipAddress": "216.73.217.34",
"isPublic": true,
"ipVersion": 4,
"isWhitelisted": false,
"isTor": false,
"abuseConfidenceScore": 100,
"totalReports": 146,
"numDistinctUsers": 63,
"lastReportedAt": "2026-11-05T22:44:02+00:00",
"countryCode": "US",
"countryName": "United States of America",
"usageType": "Data Center/Web Hosting/Transit",
"isp": "Anthropic, PBC",
"domain": "anthropic.com",
"hostnames": [],
"raw": {
"ipAddress": "216.73.217.34",
"isPublic": true,
"ipVersion": 4,
"isWhitelisted": false,
"abuseConfidenceScore": 100,
"countryCode": "US",
"usageType": "Data Center/Web Hosting/Transit",
"isp": "Anthropic, PBC",
"domain": "anthropic.com",
"hostnames": [],
"isTor": false,
"countryName": "United States of America",
"totalReports": 146,
"numDistinctUsers": 63,
"lastReportedAt": "2026-11-05T22:44:02+00:00",
"reports": [
{
"reportedAt": "2026-11-05T22:44:02+00:00",
"comment": "216.73.217.34 - - [05/Nov/2026:22:43:05 +0000] \"GET /robots.txt HTTP/2.0\" 200 57 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n...",
"categories": [
21,
19
],
"reporterId": 187806,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-11-05T11:48:26+00:00",
"comment": "[Thu Nov 05 06:15:17.676872 2026] [authz_core:error] [pid 2712077:tid 2712081] [remote 216.73.217.34:3146] AH01630: client denied by server configuration: proxy:http://localhost:4000/robots.txt\n[Thu Nov 05 06:15:17.797240 2026] [authz_core:error] [pid 2712077:tid 2712079] [remote 216.73.217.34:3146] AH01630: client denied by server configuration: proxy:http://localhost:4000/\n[Thu Nov 05 12:12:05.604934 2026] [authz_core:error] [pid 3078470:tid 3078473] [remote 216.73.217.34:42231] AH01630: client denied by server configuration: proxy:http://localhost:4000/robots.txt\n[Thu Nov 05 12:12:05.724805 2026] [authz_core:error] [pid 3078470:tid 3078480] [remote 216.73.217.34:42231] AH01630: client denied by server configuration: proxy:http://localhost:4000/linux/gentoo-overlay\n[Thu Nov 05 12:48:25.921504 2026] [authz_core:error] [pid 3293557:tid 3293581] [remote 216.73.217.34:10895] AH01630: client denied by server configuration: proxy:http://localhost:4000/\n...",
"categories": [
18
],
"reporterId": 363217,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-11-05T03:45:10+00:00",
"comment": "IP matched detection query Detection of too many failed responses.",
"categories": [
18,
19,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-11-04T14:21:40+00:00",
"comment": "216.73.217.34 - - - [04/Nov/2026:15:21:40 +0100] \"flad.xyz\" \"GET /robots.txt HTTP/2.0\" 444 0 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" 0.000\n...",
"categories": [
21
],
"reporterId": 104774,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-11-04T10:25:18+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-11-04T05:35:56+00:00",
"comment": "Report for plesk-apache-badbot: 216.73.217.34 - - [22/Oct/2026:09:08:25 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5742 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-11-04T04:10:09+00:00",
"comment": "Blocked by os-abuseipdb; 10 hits, proto=tcp, ports=443",
"categories": [
14,
15
],
"reporterId": 303229,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-11-04T00:19:06+00:00",
"comment": "Triggered Cloudflare WAF (firewallManaged) from US.\nAction taken: BLOCK\nProtocol: HTTP/2 (GET method)\nEndpoint: /sitemap_index.xml\nUA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\n\nThis report was generated by:\nhttps://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB",
"categories": [
19
],
"reporterId": 176010,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-11-03T20:56:45+00:00",
"comment": "[Tue Nov 03 13:56:44.440156 2026] [authz_core:error] [pid 165107:tid 140080624662080] [client 216.73.217.34:62949] AH01630: client denied by server configuration: /var/www/public_html/symposium/robots.txt\n[Tue Nov 03 13:56:44.443922 2026] [authz_core:error] [pid 165107:tid 140080624662080] [client 216.73.217.34:62949] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/RMBS-Server-Error.html\n[Tue Nov 03 13:56:44.598657 2026] [authz_core:error] [pid 165107:tid 140080624662080] [client 216.73.217.34:62949] AH01630: client denied by server configuration: /var/www/public_html/symposium/\n...",
"categories": [
19
],
"reporterId": 56411,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-11-03T08:11:41+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-11-03T03:03:58+00:00",
"comment": "searching for Cobalt Strike server beacon (GET /blog)\t",
"categories": [
15,
21
],
"reporterId": 55029,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-11-02T04:59:33+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-11-01T02:55:35+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-31T00:49:44+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-30T20:11:19+00:00",
"comment": "Web attack blocked by WAF: GET /wp-content/uploads/2022/04/orj_categorys-65-1477493679-img-20141213-wa0016-jpg.jpg, GET /wp-content/uploads/2022/04/orj_categorys-65-1477493671-dsc_5403-jpg.jpg, GET /wp-content/uploads/2022/04/orj_categorys-65-1477493676-foto1…\n[30/Oct/2026:23:11:18 +0300] \"GET /wp-content/uploads/2022/04/orj_categorys-65-1477493671-dsc_5403-jpg.jpg HTTP/1.1\" UA=\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like \" -> Rate limit exceeded for Claudebot Crawler Bot\n[30/Oct/2026:23:11:18 +0300] \"GET /wp-content/uploads/2022/04/orj_categorys-65-1477493676-foto161-jpg.jpg HTTP/1.1\" UA=\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like \" -> Rate limit exceeded for Claudebot Crawler Bot\n[30/Oct/2026:23:11:18 +0300] \"GET /wp-content/uploads/2022/04/orjdsc_0005-302.jpg HTTP/1.1\" UA=\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like \" -> Rate limit exceeded for Claudebot Crawler Bot",
"categories": [
21
],
"reporterId": 317359,
"reporterCountryCode": "TR",
"reporterCountryName": "Turkey"
},
{
"reportedAt": "2026-10-28T22:44:31+00:00",
"comment": "[WedOct2823:44:28.9416922026][security2:error][pid1767100:tid1767191][client216.73.217.34:0]ModSecurity:Accessdeniedwithcode403\\(phase1\\).Stringmatch\\\"/xmlrpc.php\\\"atREQUEST_URI.[file\\\"/etc/apache2/conf.d/modsec_custom_rules.conf\\\"][line\\\"170\\\"][id\\\"960024\\\"][msg\\\"XML-RPCdisabled\\\"][hostname\\\"safeoncloud.ch\\\"][uri\\\"/xmlrpc.php\\\"][unique_id\\\"auJ6zBu1ohAWPbn45EercgAAAQI\\\"]",
"categories": [
14,
18,
21
],
"reporterId": 13613,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-28T12:40:39+00:00",
"comment": "Report for plesk-apache-badbot: 216.73.217.34 - - [22/Oct/2026:09:08:25 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5742 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-27T17:57:14+00:00",
"comment": "PrestaShop Security Module: excessive request rate detected by request flood protection",
"categories": [
4
],
"reporterId": 214731,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-25T22:05:22+00:00",
"comment": "\"2026-10-25 22:05:22+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-24T07:15:08+00:00",
"comment": "IP matched detection query Detection of too many failed responses.",
"categories": [
18,
19,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-10-23T08:01:30+00:00",
"comment": "URL scan",
"categories": [
18,
21
],
"reporterId": 143709,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-23T07:44:38+00:00",
"comment": "Activity from blacklisted IP",
"categories": [
15
],
"reporterId": 30100,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-22T06:17:04+00:00",
"comment": "[Thu Oct 22 08:17:04.442043 2026] [authz_core:error] [pid 5030:tid 5197] [client 216.73.217.34:55564] AH01630: client denied by server configuration: /srv/iupap.physics.muni.cz/www/sitemap.xml\n...",
"categories": [
18,
21
],
"reporterId": 131947,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-10-22T04:53:54+00:00",
"comment": "Triggered Cloudflare WAF (firewallManaged) from US.\nAction taken: BLOCK\nProtocol: HTTP/2 (GET method)\nEndpoint: /sitemap_index.xml\nUA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\n\nThis report was generated by:\nhttps://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB",
"categories": [
19
],
"reporterId": 176010,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-14T16:08:29+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-14T01:48:09+00:00",
"comment": "IP matched detection query Detection of too many failed responses.",
"categories": [
18,
19,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-10-13T21:48:01+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-13T14:47:20+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-12T22:53:07+00:00",
"comment": "IP matched detection query Detection of too many failed responses.",
"categories": [
18,
19,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-10-12T11:32:33+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-12T01:02:52+00:00",
"comment": "(PERMBLOCK) 216.73.217.34 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:",
"categories": [
14
],
"reporterId": 119536,
"reporterCountryCode": "NL",
"reporterCountryName": "Netherlands"
},
{
"reportedAt": "2026-10-10T15:09:12+00:00",
"comment": "Bot / seems abusive / Apache connections: 20",
"categories": [
4,
10,
19,
21
],
"reporterId": 32753,
"reporterCountryCode": "NL",
"reporterCountryName": "Netherlands"
},
{
"reportedAt": "2026-10-10T09:44:43+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-09T22:42:02+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-09T11:36:19+00:00",
"comment": "216.73.217.34 - - [09/Oct/2026:04:42:21 +0200] \"GET /robots.txt HTTP/1.1\" 403 440 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n216.73.217.34 - - [09/Oct/2026:04:42:21 +0200] \"GET /post/2010/07/03/Interview-de-Francois-Vallejo HTTP/1.1\" 403 439 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n216.73.217.34 - - [09/Oct/2026:05:17:41 +0200] \"GET /robots.txt HTTP/1.1\" 403 440 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n216.73.217.34 - - [09/Oct/2026:05:17:43 +0200] \"GET /index.php/2007/06/07/563-vous-plaisantez-monsieur-tanner-jean-paul-dubois HTTP/1.1\" 403 439 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n216.73.217.34 - - [09/Oct/2026:10:33:57 +0200] \"GET /robots.txt HTTP/1.1\" 403 440 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gec\n...",
"categories": [
21
],
"reporterId": 18051,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-09T03:54:41+00:00",
"comment": "[Thu Oct 08 21:54:40.231077 2026] [authz_core:error] [pid 342599:tid 140268982732352] [client 216.73.217.34:55423] AH01630: client denied by server configuration: /var/www/public_html/contest/robots.txt\n[Thu Oct 08 21:54:40.233826 2026] [authz_core:error] [pid 342599:tid 140268982732352] [client 216.73.217.34:55423] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/RMBS-Server-Error.html\n[Thu Oct 08 21:54:40.251437 2026] [authz_core:error] [pid 342599:tid 140268982732352] [client 216.73.217.34:55423] AH01630: client denied by server configuration: /var/www/public_html/contest/\n...",
"categories": [
19
],
"reporterId": 56411,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-10-08T21:19:07+00:00",
"comment": "Activity from blacklisted IP",
"categories": [
15
],
"reporterId": 30100,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-08T09:59:08+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-08T01:19:39+00:00",
"comment": "XSS Attempt",
"categories": [
15
],
"reporterId": 72974,
"reporterCountryCode": "ID",
"reporterCountryName": "Indonesia"
},
{
"reportedAt": "2026-10-05T21:04:21+00:00",
"comment": "Unknown activity, but too many attacks with too many users.",
"categories": [
15
],
"reporterId": 89928,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-05T14:25:12+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-04T02:42:02+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-02T11:00:03+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-02T07:38:19+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-01T21:22:59+00:00",
"comment": "\"2026-10-01 21:22:59+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-30T22:59:09+00:00",
"comment": "Bad Reputation IP >90.",
"categories": [
15
],
"reporterId": 316886,
"reporterCountryCode": "BR",
"reporterCountryName": "Brazil"
},
{
"reportedAt": "2026-09-30T08:15:25+00:00",
"comment": "IP matched detection query 50 and more bad rqs apache.",
"categories": [
15,
19,
18,
21
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-29T21:22:23+00:00",
"comment": "\"2026-09-29 21:22:23+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-29T19:40:38+00:00",
"comment": "Aggressive Robot or Attack DDOS",
"categories": [
4
],
"reporterId": 42013,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-29T14:34:20+00:00",
"comment": "10 hits, proto=tcp, ports=443",
"categories": [
14,
15
],
"reporterId": 55841,
"reporterCountryCode": "AU",
"reporterCountryName": "Australia"
},
{
"reportedAt": "2026-09-29T00:35:56+00:00",
"comment": "IP matched detection query more than 2 hosts and only bad rq long ban.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-29T00:06:56+00:00",
"comment": "IP matched detection query 50 and more bad rqs apache.",
"categories": [
15,
19,
18,
21
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-28T15:00:20+00:00",
"comment": "User agent spoofing",
"categories": [
17
],
"reporterId": 16939,
"reporterCountryCode": "DK",
"reporterCountryName": "Denmark"
},
{
"reportedAt": "2026-09-28T02:57:14+00:00",
"comment": "Excessive multi-domain requests",
"categories": [
18
],
"reporterId": 190396,
"reporterCountryCode": "NL",
"reporterCountryName": "Netherlands"
},
{
"reportedAt": "2026-09-27T11:54:01+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-27T00:02:01+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-26T18:58:15+00:00",
"comment": "Automated report (2026-09-26T14:58:15-04:00). Scraper detected. AI scanner notorious for flooding and DDoS attacks detected.",
"categories": [
19,
4
],
"reporterId": 18554,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-26T18:56:08+00:00",
"comment": "Automated report (2026-09-26T14:56:08-04:00). Scraper detected. AI scanner notorious for flooding and DDoS attacks detected.",
"categories": [
19,
4
],
"reporterId": 18554,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-25T22:26:03+00:00",
"comment": "Blocked by Radar da Telecom firewall — abuseipdb",
"categories": [
19,
21
],
"reporterId": 351957,
"reporterCountryCode": "BR",
"reporterCountryName": "Brazil"
},
{
"reportedAt": "2026-09-25T21:56:49+00:00",
"comment": "Port scan detected: 6 attempts across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=216.73.217.34 LEN=40 TOS=0x00 PREC=0x00 TTL=119 ID=37122 DF PROTO=TCP SPT=63466 DPT=443 WINDOW=62727 RES=0x00 ACK URGP=0",
"categories": [
14
],
"reporterId": 285590,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-25T21:46:22+00:00",
"comment": "\"2026-09-25 21:46:22+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T21:26:33+00:00",
"comment": "Probing wordpress site",
"categories": [
21
],
"reporterId": 41702,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-24T12:31:08+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:14:31:03 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T10:33:05+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:12:33:01 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T08:15:09+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:10:15:06 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T06:23:56+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:08:23:52 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T01:00:17+00:00",
"comment": "CrowdSec ban for AbuseIPDB Top List",
"categories": [
18,
21
],
"reporterId": 256090,
"reporterCountryCode": "GB",
"reporterCountryName": "United Kingdom of Great Britain and Northern Ireland"
},
{
"reportedAt": "2026-09-24T00:16:39+00:00",
"comment": "IP matched detection query 20 more in short time bad rqs.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-24T00:11:25+00:00",
"comment": "(PERMBLOCK) 216.73.217.34 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-23T23:29:13+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:01:29:09 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-23T22:48:41+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:00:48:37 +0200] \"GET / HTTP/2.0\" 200 7856 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-23T21:17:24+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [23/Sep/2026:23:17:19 +0200] \"GET / HTTP/2.0\" 301 0 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=www.abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-23T03:30:22+00:00",
"comment": "DDoS, Hack, Brute Force, Web Attack\n...",
"categories": [
4,
10,
15,
18,
21
],
"reporterId": 80561,
"reporterCountryCode": "VN",
"reporterCountryName": "Viet Nam"
},
{
"reportedAt": "2026-09-22T19:34:50+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-22T15:19:22+00:00",
"comment": "IP matched detection query 20 more in short time bad rqs.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-22T13:23:26+00:00",
"comment": "IP matched detection query more than 2 hosts and only bad rq long ban.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-22T07:16:15+00:00",
"comment": "BAD BOT - Detected and Blocked.. Matched phrase \"claudebot\" at REQUEST_HEADERS:user-agent. (1100000-169)",
"categories": [
19
],
"reporterId": 131101,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-21T21:37:02+00:00",
"comment": "CrowdSec:custom/http-probing",
"categories": [
21
],
"reporterId": 69015,
"reporterCountryCode": "AU",
"reporterCountryName": "Australia"
},
{
"reportedAt": "2026-09-21T13:49:17+00:00",
"comment": "IP matched detection query 20 more in short time bad rqs.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-20T19:57:32+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-20T14:53:56+00:00",
"comment": "IP matched detection query 50 and more bad rqs apache.",
"categories": [
15,
19,
18,
21
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-20T12:56:47+00:00",
"comment": "IP matched detection query 20 more in short time bad rqs.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-20T07:41:29+00:00",
"comment": "BAD BOT - Detected and Blocked.. Matched phrase \"claudebot\" at REQUEST_HEADERS:user-agent. (1100000-169)",
"categories": [
19
],
"reporterId": 131101,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-20T02:06:41+00:00",
"comment": "SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port:443, Proto:TCP, EventID:5152]",
"categories": [
14,
21,
19
],
"reporterId": 144640,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-19T11:17:10+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-19T07:29:23+00:00",
"comment": "216.73.217.34 - - [19/Sep/2026:08:29:39 +0100] \"GET /robots.txt HTTP/1.1\" 304 5552 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n...",
"categories": [
19
],
"reporterId": 112894,
"reporterCountryCode": "GB",
"reporterCountryName": "United Kingdom of Great Britain and Northern Ireland"
},
{
"reportedAt": "2026-09-19T03:03:54+00:00",
"comment": "Blocked abusive HTTP application-layer DoS / botnet traffic from 216.73.217.34: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.",
"categories": [
4,
19,
20
],
"reporterId": 329649,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-18T21:48:14+00:00",
"comment": "\"2026-09-18 21:48:14+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-18T05:21:25+00:00",
"comment": "Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.",
"categories": [
19,
21
],
"reporterId": 21990,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-18T04:49:21+00:00",
"comment": "Aggressive Robot or Attack DDOS",
"categories": [
4
],
"reporterId": 42013,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-16T19:22:46+00:00",
"comment": "Declared crawler ignoring robots.txt and the refusals it is given | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) | path: /xmlrpc.php | 2026-09-16 19:22 UTC",
"categories": [
19
],
"reporterId": 169612,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-16T17:07:36+00:00",
"comment": "Fail2ban automatic report for plesk-apache-badbot: 216.73.217.34 - - [15/Sep/2026:05:24:24 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5735 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-16T08:52:32+00:00",
"comment": "WEB attack",
"categories": [
18
],
"reporterId": 32042,
"reporterCountryCode": "PL",
"reporterCountryName": "Poland"
},
{
"reportedAt": "2026-09-15T03:24:44+00:00",
"comment": "Fail2ban automatic report for plesk-apache-badbot: 216.73.217.34 - - [15/Sep/2026:05:24:24 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5735 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-14T00:58:00+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-12T21:06:02+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-12T03:13:11+00:00",
"comment": "Fail2ban automatic report for plesk-apache-badbot: 216.73.217.34 - - [12/Sep/2026:05:12:52 +0200] GET /datenschutz/ [DOMAIN_REMOVED] 200 35984 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-11T10:48:01+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-10T00:29:52+00:00",
"comment": "216.73.217.34 - - [10/Sep/2026:02:29:51 +0200] \"GET /superbonus-110-i-passi-da-compiere-per-lo-sconto-in-fattura/ HTTP/2.0\" 404 13447 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n...",
"categories": [
21
],
"reporterId": 187791,
"reporterCountryCode": "IT",
"reporterCountryName": "Italy"
},
{
"reportedAt": "2026-09-08T14:43:25+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
}
]
}
},
"raw": {
"data": {
"ipAddress": "216.73.217.34",
"isPublic": true,
"ipVersion": 4,
"isWhitelisted": false,
"abuseConfidenceScore": 100,
"countryCode": "US",
"usageType": "Data Center/Web Hosting/Transit",
"isp": "Anthropic, PBC",
"domain": "anthropic.com",
"hostnames": [],
"isTor": false,
"countryName": "United States of America",
"totalReports": 146,
"numDistinctUsers": 63,
"lastReportedAt": "2026-11-05T22:44:02+00:00",
"reports": [
{
"reportedAt": "2026-11-05T22:44:02+00:00",
"comment": "216.73.217.34 - - [05/Nov/2026:22:43:05 +0000] \"GET /robots.txt HTTP/2.0\" 200 57 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n...",
"categories": [
21,
19
],
"reporterId": 187806,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-11-05T11:48:26+00:00",
"comment": "[Thu Nov 05 06:15:17.676872 2026] [authz_core:error] [pid 2712077:tid 2712081] [remote 216.73.217.34:3146] AH01630: client denied by server configuration: proxy:http://localhost:4000/robots.txt\n[Thu Nov 05 06:15:17.797240 2026] [authz_core:error] [pid 2712077:tid 2712079] [remote 216.73.217.34:3146] AH01630: client denied by server configuration: proxy:http://localhost:4000/\n[Thu Nov 05 12:12:05.604934 2026] [authz_core:error] [pid 3078470:tid 3078473] [remote 216.73.217.34:42231] AH01630: client denied by server configuration: proxy:http://localhost:4000/robots.txt\n[Thu Nov 05 12:12:05.724805 2026] [authz_core:error] [pid 3078470:tid 3078480] [remote 216.73.217.34:42231] AH01630: client denied by server configuration: proxy:http://localhost:4000/linux/gentoo-overlay\n[Thu Nov 05 12:48:25.921504 2026] [authz_core:error] [pid 3293557:tid 3293581] [remote 216.73.217.34:10895] AH01630: client denied by server configuration: proxy:http://localhost:4000/\n...",
"categories": [
18
],
"reporterId": 363217,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-11-05T03:45:10+00:00",
"comment": "IP matched detection query Detection of too many failed responses.",
"categories": [
18,
19,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-11-04T14:21:40+00:00",
"comment": "216.73.217.34 - - - [04/Nov/2026:15:21:40 +0100] \"flad.xyz\" \"GET /robots.txt HTTP/2.0\" 444 0 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" 0.000\n...",
"categories": [
21
],
"reporterId": 104774,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-11-04T10:25:18+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-11-04T05:35:56+00:00",
"comment": "Report for plesk-apache-badbot: 216.73.217.34 - - [22/Oct/2026:09:08:25 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5742 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-11-04T04:10:09+00:00",
"comment": "Blocked by os-abuseipdb; 10 hits, proto=tcp, ports=443",
"categories": [
14,
15
],
"reporterId": 303229,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-11-04T00:19:06+00:00",
"comment": "Triggered Cloudflare WAF (firewallManaged) from US.\nAction taken: BLOCK\nProtocol: HTTP/2 (GET method)\nEndpoint: /sitemap_index.xml\nUA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\n\nThis report was generated by:\nhttps://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB",
"categories": [
19
],
"reporterId": 176010,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-11-03T20:56:45+00:00",
"comment": "[Tue Nov 03 13:56:44.440156 2026] [authz_core:error] [pid 165107:tid 140080624662080] [client 216.73.217.34:62949] AH01630: client denied by server configuration: /var/www/public_html/symposium/robots.txt\n[Tue Nov 03 13:56:44.443922 2026] [authz_core:error] [pid 165107:tid 140080624662080] [client 216.73.217.34:62949] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/RMBS-Server-Error.html\n[Tue Nov 03 13:56:44.598657 2026] [authz_core:error] [pid 165107:tid 140080624662080] [client 216.73.217.34:62949] AH01630: client denied by server configuration: /var/www/public_html/symposium/\n...",
"categories": [
19
],
"reporterId": 56411,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-11-03T08:11:41+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-11-03T03:03:58+00:00",
"comment": "searching for Cobalt Strike server beacon (GET /blog)\t",
"categories": [
15,
21
],
"reporterId": 55029,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-11-02T04:59:33+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-11-01T02:55:35+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-31T00:49:44+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-30T20:11:19+00:00",
"comment": "Web attack blocked by WAF: GET /wp-content/uploads/2022/04/orj_categorys-65-1477493679-img-20141213-wa0016-jpg.jpg, GET /wp-content/uploads/2022/04/orj_categorys-65-1477493671-dsc_5403-jpg.jpg, GET /wp-content/uploads/2022/04/orj_categorys-65-1477493676-foto1…\n[30/Oct/2026:23:11:18 +0300] \"GET /wp-content/uploads/2022/04/orj_categorys-65-1477493671-dsc_5403-jpg.jpg HTTP/1.1\" UA=\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like \" -> Rate limit exceeded for Claudebot Crawler Bot\n[30/Oct/2026:23:11:18 +0300] \"GET /wp-content/uploads/2022/04/orj_categorys-65-1477493676-foto161-jpg.jpg HTTP/1.1\" UA=\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like \" -> Rate limit exceeded for Claudebot Crawler Bot\n[30/Oct/2026:23:11:18 +0300] \"GET /wp-content/uploads/2022/04/orjdsc_0005-302.jpg HTTP/1.1\" UA=\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like \" -> Rate limit exceeded for Claudebot Crawler Bot",
"categories": [
21
],
"reporterId": 317359,
"reporterCountryCode": "TR",
"reporterCountryName": "Turkey"
},
{
"reportedAt": "2026-10-28T22:44:31+00:00",
"comment": "[WedOct2823:44:28.9416922026][security2:error][pid1767100:tid1767191][client216.73.217.34:0]ModSecurity:Accessdeniedwithcode403\\(phase1\\).Stringmatch\\\"/xmlrpc.php\\\"atREQUEST_URI.[file\\\"/etc/apache2/conf.d/modsec_custom_rules.conf\\\"][line\\\"170\\\"][id\\\"960024\\\"][msg\\\"XML-RPCdisabled\\\"][hostname\\\"safeoncloud.ch\\\"][uri\\\"/xmlrpc.php\\\"][unique_id\\\"auJ6zBu1ohAWPbn45EercgAAAQI\\\"]",
"categories": [
14,
18,
21
],
"reporterId": 13613,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-28T12:40:39+00:00",
"comment": "Report for plesk-apache-badbot: 216.73.217.34 - - [22/Oct/2026:09:08:25 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5742 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-27T17:57:14+00:00",
"comment": "PrestaShop Security Module: excessive request rate detected by request flood protection",
"categories": [
4
],
"reporterId": 214731,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-25T22:05:22+00:00",
"comment": "\"2026-10-25 22:05:22+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-24T07:15:08+00:00",
"comment": "IP matched detection query Detection of too many failed responses.",
"categories": [
18,
19,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-10-23T08:01:30+00:00",
"comment": "URL scan",
"categories": [
18,
21
],
"reporterId": 143709,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-23T07:44:38+00:00",
"comment": "Activity from blacklisted IP",
"categories": [
15
],
"reporterId": 30100,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-22T06:17:04+00:00",
"comment": "[Thu Oct 22 08:17:04.442043 2026] [authz_core:error] [pid 5030:tid 5197] [client 216.73.217.34:55564] AH01630: client denied by server configuration: /srv/iupap.physics.muni.cz/www/sitemap.xml\n...",
"categories": [
18,
21
],
"reporterId": 131947,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-10-22T04:53:54+00:00",
"comment": "Triggered Cloudflare WAF (firewallManaged) from US.\nAction taken: BLOCK\nProtocol: HTTP/2 (GET method)\nEndpoint: /sitemap_index.xml\nUA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\n\nThis report was generated by:\nhttps://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB",
"categories": [
19
],
"reporterId": 176010,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-14T16:08:29+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-14T01:48:09+00:00",
"comment": "IP matched detection query Detection of too many failed responses.",
"categories": [
18,
19,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-10-13T21:48:01+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-13T14:47:20+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-12T22:53:07+00:00",
"comment": "IP matched detection query Detection of too many failed responses.",
"categories": [
18,
19,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-10-12T11:32:33+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-12T01:02:52+00:00",
"comment": "(PERMBLOCK) 216.73.217.34 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:",
"categories": [
14
],
"reporterId": 119536,
"reporterCountryCode": "NL",
"reporterCountryName": "Netherlands"
},
{
"reportedAt": "2026-10-10T15:09:12+00:00",
"comment": "Bot / seems abusive / Apache connections: 20",
"categories": [
4,
10,
19,
21
],
"reporterId": 32753,
"reporterCountryCode": "NL",
"reporterCountryName": "Netherlands"
},
{
"reportedAt": "2026-10-10T09:44:43+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-09T22:42:02+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-09T11:36:19+00:00",
"comment": "216.73.217.34 - - [09/Oct/2026:04:42:21 +0200] \"GET /robots.txt HTTP/1.1\" 403 440 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n216.73.217.34 - - [09/Oct/2026:04:42:21 +0200] \"GET /post/2010/07/03/Interview-de-Francois-Vallejo HTTP/1.1\" 403 439 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n216.73.217.34 - - [09/Oct/2026:05:17:41 +0200] \"GET /robots.txt HTTP/1.1\" 403 440 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n216.73.217.34 - - [09/Oct/2026:05:17:43 +0200] \"GET /index.php/2007/06/07/563-vous-plaisantez-monsieur-tanner-jean-paul-dubois HTTP/1.1\" 403 439 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n216.73.217.34 - - [09/Oct/2026:10:33:57 +0200] \"GET /robots.txt HTTP/1.1\" 403 440 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gec\n...",
"categories": [
21
],
"reporterId": 18051,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-09T03:54:41+00:00",
"comment": "[Thu Oct 08 21:54:40.231077 2026] [authz_core:error] [pid 342599:tid 140268982732352] [client 216.73.217.34:55423] AH01630: client denied by server configuration: /var/www/public_html/contest/robots.txt\n[Thu Oct 08 21:54:40.233826 2026] [authz_core:error] [pid 342599:tid 140268982732352] [client 216.73.217.34:55423] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/RMBS-Server-Error.html\n[Thu Oct 08 21:54:40.251437 2026] [authz_core:error] [pid 342599:tid 140268982732352] [client 216.73.217.34:55423] AH01630: client denied by server configuration: /var/www/public_html/contest/\n...",
"categories": [
19
],
"reporterId": 56411,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-10-08T21:19:07+00:00",
"comment": "Activity from blacklisted IP",
"categories": [
15
],
"reporterId": 30100,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-08T09:59:08+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-08T01:19:39+00:00",
"comment": "XSS Attempt",
"categories": [
15
],
"reporterId": 72974,
"reporterCountryCode": "ID",
"reporterCountryName": "Indonesia"
},
{
"reportedAt": "2026-10-05T21:04:21+00:00",
"comment": "Unknown activity, but too many attacks with too many users.",
"categories": [
15
],
"reporterId": 89928,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-05T14:25:12+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-04T02:42:02+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-02T11:00:03+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-02T07:38:19+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-01T21:22:59+00:00",
"comment": "\"2026-10-01 21:22:59+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-30T22:59:09+00:00",
"comment": "Bad Reputation IP >90.",
"categories": [
15
],
"reporterId": 316886,
"reporterCountryCode": "BR",
"reporterCountryName": "Brazil"
},
{
"reportedAt": "2026-09-30T08:15:25+00:00",
"comment": "IP matched detection query 50 and more bad rqs apache.",
"categories": [
15,
19,
18,
21
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-29T21:22:23+00:00",
"comment": "\"2026-09-29 21:22:23+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-29T19:40:38+00:00",
"comment": "Aggressive Robot or Attack DDOS",
"categories": [
4
],
"reporterId": 42013,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-29T14:34:20+00:00",
"comment": "10 hits, proto=tcp, ports=443",
"categories": [
14,
15
],
"reporterId": 55841,
"reporterCountryCode": "AU",
"reporterCountryName": "Australia"
},
{
"reportedAt": "2026-09-29T00:35:56+00:00",
"comment": "IP matched detection query more than 2 hosts and only bad rq long ban.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-29T00:06:56+00:00",
"comment": "IP matched detection query 50 and more bad rqs apache.",
"categories": [
15,
19,
18,
21
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-28T15:00:20+00:00",
"comment": "User agent spoofing",
"categories": [
17
],
"reporterId": 16939,
"reporterCountryCode": "DK",
"reporterCountryName": "Denmark"
},
{
"reportedAt": "2026-09-28T02:57:14+00:00",
"comment": "Excessive multi-domain requests",
"categories": [
18
],
"reporterId": 190396,
"reporterCountryCode": "NL",
"reporterCountryName": "Netherlands"
},
{
"reportedAt": "2026-09-27T11:54:01+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-27T00:02:01+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-26T18:58:15+00:00",
"comment": "Automated report (2026-09-26T14:58:15-04:00). Scraper detected. AI scanner notorious for flooding and DDoS attacks detected.",
"categories": [
19,
4
],
"reporterId": 18554,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-26T18:56:08+00:00",
"comment": "Automated report (2026-09-26T14:56:08-04:00). Scraper detected. AI scanner notorious for flooding and DDoS attacks detected.",
"categories": [
19,
4
],
"reporterId": 18554,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-25T22:26:03+00:00",
"comment": "Blocked by Radar da Telecom firewall — abuseipdb",
"categories": [
19,
21
],
"reporterId": 351957,
"reporterCountryCode": "BR",
"reporterCountryName": "Brazil"
},
{
"reportedAt": "2026-09-25T21:56:49+00:00",
"comment": "Port scan detected: 6 attempts across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=216.73.217.34 LEN=40 TOS=0x00 PREC=0x00 TTL=119 ID=37122 DF PROTO=TCP SPT=63466 DPT=443 WINDOW=62727 RES=0x00 ACK URGP=0",
"categories": [
14
],
"reporterId": 285590,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-25T21:46:22+00:00",
"comment": "\"2026-09-25 21:46:22+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T21:26:33+00:00",
"comment": "Probing wordpress site",
"categories": [
21
],
"reporterId": 41702,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-24T12:31:08+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:14:31:03 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T10:33:05+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:12:33:01 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T08:15:09+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:10:15:06 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T06:23:56+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:08:23:52 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T01:00:17+00:00",
"comment": "CrowdSec ban for AbuseIPDB Top List",
"categories": [
18,
21
],
"reporterId": 256090,
"reporterCountryCode": "GB",
"reporterCountryName": "United Kingdom of Great Britain and Northern Ireland"
},
{
"reportedAt": "2026-09-24T00:16:39+00:00",
"comment": "IP matched detection query 20 more in short time bad rqs.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-24T00:11:25+00:00",
"comment": "(PERMBLOCK) 216.73.217.34 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-23T23:29:13+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:01:29:09 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-23T22:48:41+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:00:48:37 +0200] \"GET / HTTP/2.0\" 200 7856 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-23T21:17:24+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [23/Sep/2026:23:17:19 +0200] \"GET / HTTP/2.0\" 301 0 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=www.abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-23T03:30:22+00:00",
"comment": "DDoS, Hack, Brute Force, Web Attack\n...",
"categories": [
4,
10,
15,
18,
21
],
"reporterId": 80561,
"reporterCountryCode": "VN",
"reporterCountryName": "Viet Nam"
},
{
"reportedAt": "2026-09-22T19:34:50+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-22T15:19:22+00:00",
"comment": "IP matched detection query 20 more in short time bad rqs.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-22T13:23:26+00:00",
"comment": "IP matched detection query more than 2 hosts and only bad rq long ban.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-22T07:16:15+00:00",
"comment": "BAD BOT - Detected and Blocked.. Matched phrase \"claudebot\" at REQUEST_HEADERS:user-agent. (1100000-169)",
"categories": [
19
],
"reporterId": 131101,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-21T21:37:02+00:00",
"comment": "CrowdSec:custom/http-probing",
"categories": [
21
],
"reporterId": 69015,
"reporterCountryCode": "AU",
"reporterCountryName": "Australia"
},
{
"reportedAt": "2026-09-21T13:49:17+00:00",
"comment": "IP matched detection query 20 more in short time bad rqs.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-20T19:57:32+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-20T14:53:56+00:00",
"comment": "IP matched detection query 50 and more bad rqs apache.",
"categories": [
15,
19,
18,
21
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-20T12:56:47+00:00",
"comment": "IP matched detection query 20 more in short time bad rqs.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-20T07:41:29+00:00",
"comment": "BAD BOT - Detected and Blocked.. Matched phrase \"claudebot\" at REQUEST_HEADERS:user-agent. (1100000-169)",
"categories": [
19
],
"reporterId": 131101,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-20T02:06:41+00:00",
"comment": "SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port:443, Proto:TCP, EventID:5152]",
"categories": [
14,
21,
19
],
"reporterId": 144640,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-19T11:17:10+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-19T07:29:23+00:00",
"comment": "216.73.217.34 - - [19/Sep/2026:08:29:39 +0100] \"GET /robots.txt HTTP/1.1\" 304 5552 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n...",
"categories": [
19
],
"reporterId": 112894,
"reporterCountryCode": "GB",
"reporterCountryName": "United Kingdom of Great Britain and Northern Ireland"
},
{
"reportedAt": "2026-09-19T03:03:54+00:00",
"comment": "Blocked abusive HTTP application-layer DoS / botnet traffic from 216.73.217.34: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.",
"categories": [
4,
19,
20
],
"reporterId": 329649,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-18T21:48:14+00:00",
"comment": "\"2026-09-18 21:48:14+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-18T05:21:25+00:00",
"comment": "Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.",
"categories": [
19,
21
],
"reporterId": 21990,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-18T04:49:21+00:00",
"comment": "Aggressive Robot or Attack DDOS",
"categories": [
4
],
"reporterId": 42013,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-16T19:22:46+00:00",
"comment": "Declared crawler ignoring robots.txt and the refusals it is given | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) | path: /xmlrpc.php | 2026-09-16 19:22 UTC",
"categories": [
19
],
"reporterId": 169612,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-16T17:07:36+00:00",
"comment": "Fail2ban automatic report for plesk-apache-badbot: 216.73.217.34 - - [15/Sep/2026:05:24:24 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5735 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-16T08:52:32+00:00",
"comment": "WEB attack",
"categories": [
18
],
"reporterId": 32042,
"reporterCountryCode": "PL",
"reporterCountryName": "Poland"
},
{
"reportedAt": "2026-09-15T03:24:44+00:00",
"comment": "Fail2ban automatic report for plesk-apache-badbot: 216.73.217.34 - - [15/Sep/2026:05:24:24 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5735 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-14T00:58:00+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-12T21:06:02+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-12T03:13:11+00:00",
"comment": "Fail2ban automatic report for plesk-apache-badbot: 216.73.217.34 - - [12/Sep/2026:05:12:52 +0200] GET /datenschutz/ [DOMAIN_REMOVED] 200 35984 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-11T10:48:01+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-10T00:29:52+00:00",
"comment": "216.73.217.34 - - [10/Sep/2026:02:29:51 +0200] \"GET /superbonus-110-i-passi-da-compiere-per-lo-sconto-in-fattura/ HTTP/2.0\" 404 13447 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n...",
"categories": [
21
],
"reporterId": 187791,
"reporterCountryCode": "IT",
"reporterCountryName": "Italy"
},
{
"reportedAt": "2026-09-08T14:43:25+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
}
]
}
},
"error": null
}
},
"risk": {
"score": 0,
"verdict": "Critical Risk",
"tags": [
"Hosting/Datacenter",
"Corporate",
"Bad Reputation"
],
"findings": [
{
"id": "automation_user_agent",
"severity": "medium",
"points": 25,
"message": "User-Agent looks automated, headless, or scripted.",
"evidence": {
"userAgent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
}
},
{
"id": "browser_header_mismatch",
"severity": "low",
"points": 10,
"message": "User-Agent looks like a browser but common modern browser headers are missing.",
"evidence": {}
},
{
"id": "missing_accept_language",
"severity": "low",
"points": 8,
"message": "Browser-like request has no Accept-Language header.",
"evidence": {}
},
{
"id": "abuseipdb_usage_type_datacenter",
"severity": "info",
"points": 0,
"message": "AbuseIPDB usage type says this IP is Data Center/Web Hosting/Transit. This is infrastructure classification only, not a risk penalty.",
"evidence": {
"usageType": "Data Center/Web Hosting/Transit",
"isp": "Anthropic, PBC",
"domain": "anthropic.com"
}
},
{
"id": "known_hosting_asn",
"severity": "info",
"points": 0,
"message": "ASN is in the built-in hosting/cloud/datacenter ASN list. Hosting ASN alone is not treated as risky.",
"evidence": {
"asn": 16509
}
},
{
"id": "ipinfo_lite_enrichment",
"severity": "info",
"points": 0,
"message": "IPinfo Lite ASN enrichment: AS16509 Amazon.com, Inc.",
"evidence": {
"asn": "AS16509",
"asName": "Amazon.com, Inc.",
"asDomain": "amazon.com",
"country": "United States",
"countryCode": "US"
}
},
{
"id": "abuseipdb_very_high_reputation_risk",
"severity": "critical",
"points": 45,
"message": "AbuseIPDB confidence score is very high.",
"evidence": {
"ipAddress": "216.73.217.34",
"isPublic": true,
"ipVersion": 4,
"isWhitelisted": false,
"abuseConfidenceScore": 100,
"countryCode": "US",
"usageType": "Data Center/Web Hosting/Transit",
"isp": "Anthropic, PBC",
"domain": "anthropic.com",
"hostnames": [],
"isTor": false,
"countryName": "United States of America",
"totalReports": 146,
"numDistinctUsers": 63,
"lastReportedAt": "2026-11-05T22:44:02+00:00",
"reports": [
{
"reportedAt": "2026-11-05T22:44:02+00:00",
"comment": "216.73.217.34 - - [05/Nov/2026:22:43:05 +0000] \"GET /robots.txt HTTP/2.0\" 200 57 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n...",
"categories": [
21,
19
],
"reporterId": 187806,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-11-05T11:48:26+00:00",
"comment": "[Thu Nov 05 06:15:17.676872 2026] [authz_core:error] [pid 2712077:tid 2712081] [remote 216.73.217.34:3146] AH01630: client denied by server configuration: proxy:http://localhost:4000/robots.txt\n[Thu Nov 05 06:15:17.797240 2026] [authz_core:error] [pid 2712077:tid 2712079] [remote 216.73.217.34:3146] AH01630: client denied by server configuration: proxy:http://localhost:4000/\n[Thu Nov 05 12:12:05.604934 2026] [authz_core:error] [pid 3078470:tid 3078473] [remote 216.73.217.34:42231] AH01630: client denied by server configuration: proxy:http://localhost:4000/robots.txt\n[Thu Nov 05 12:12:05.724805 2026] [authz_core:error] [pid 3078470:tid 3078480] [remote 216.73.217.34:42231] AH01630: client denied by server configuration: proxy:http://localhost:4000/linux/gentoo-overlay\n[Thu Nov 05 12:48:25.921504 2026] [authz_core:error] [pid 3293557:tid 3293581] [remote 216.73.217.34:10895] AH01630: client denied by server configuration: proxy:http://localhost:4000/\n...",
"categories": [
18
],
"reporterId": 363217,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-11-05T03:45:10+00:00",
"comment": "IP matched detection query Detection of too many failed responses.",
"categories": [
18,
19,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-11-04T14:21:40+00:00",
"comment": "216.73.217.34 - - - [04/Nov/2026:15:21:40 +0100] \"flad.xyz\" \"GET /robots.txt HTTP/2.0\" 444 0 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" 0.000\n...",
"categories": [
21
],
"reporterId": 104774,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-11-04T10:25:18+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-11-04T05:35:56+00:00",
"comment": "Report for plesk-apache-badbot: 216.73.217.34 - - [22/Oct/2026:09:08:25 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5742 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-11-04T04:10:09+00:00",
"comment": "Blocked by os-abuseipdb; 10 hits, proto=tcp, ports=443",
"categories": [
14,
15
],
"reporterId": 303229,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-11-04T00:19:06+00:00",
"comment": "Triggered Cloudflare WAF (firewallManaged) from US.\nAction taken: BLOCK\nProtocol: HTTP/2 (GET method)\nEndpoint: /sitemap_index.xml\nUA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\n\nThis report was generated by:\nhttps://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB",
"categories": [
19
],
"reporterId": 176010,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-11-03T20:56:45+00:00",
"comment": "[Tue Nov 03 13:56:44.440156 2026] [authz_core:error] [pid 165107:tid 140080624662080] [client 216.73.217.34:62949] AH01630: client denied by server configuration: /var/www/public_html/symposium/robots.txt\n[Tue Nov 03 13:56:44.443922 2026] [authz_core:error] [pid 165107:tid 140080624662080] [client 216.73.217.34:62949] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/RMBS-Server-Error.html\n[Tue Nov 03 13:56:44.598657 2026] [authz_core:error] [pid 165107:tid 140080624662080] [client 216.73.217.34:62949] AH01630: client denied by server configuration: /var/www/public_html/symposium/\n...",
"categories": [
19
],
"reporterId": 56411,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-11-03T08:11:41+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-11-03T03:03:58+00:00",
"comment": "searching for Cobalt Strike server beacon (GET /blog)\t",
"categories": [
15,
21
],
"reporterId": 55029,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-11-02T04:59:33+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-11-01T02:55:35+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-31T00:49:44+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-30T20:11:19+00:00",
"comment": "Web attack blocked by WAF: GET /wp-content/uploads/2022/04/orj_categorys-65-1477493679-img-20141213-wa0016-jpg.jpg, GET /wp-content/uploads/2022/04/orj_categorys-65-1477493671-dsc_5403-jpg.jpg, GET /wp-content/uploads/2022/04/orj_categorys-65-1477493676-foto1…\n[30/Oct/2026:23:11:18 +0300] \"GET /wp-content/uploads/2022/04/orj_categorys-65-1477493671-dsc_5403-jpg.jpg HTTP/1.1\" UA=\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like \" -> Rate limit exceeded for Claudebot Crawler Bot\n[30/Oct/2026:23:11:18 +0300] \"GET /wp-content/uploads/2022/04/orj_categorys-65-1477493676-foto161-jpg.jpg HTTP/1.1\" UA=\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like \" -> Rate limit exceeded for Claudebot Crawler Bot\n[30/Oct/2026:23:11:18 +0300] \"GET /wp-content/uploads/2022/04/orjdsc_0005-302.jpg HTTP/1.1\" UA=\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like \" -> Rate limit exceeded for Claudebot Crawler Bot",
"categories": [
21
],
"reporterId": 317359,
"reporterCountryCode": "TR",
"reporterCountryName": "Turkey"
},
{
"reportedAt": "2026-10-28T22:44:31+00:00",
"comment": "[WedOct2823:44:28.9416922026][security2:error][pid1767100:tid1767191][client216.73.217.34:0]ModSecurity:Accessdeniedwithcode403\\(phase1\\).Stringmatch\\\"/xmlrpc.php\\\"atREQUEST_URI.[file\\\"/etc/apache2/conf.d/modsec_custom_rules.conf\\\"][line\\\"170\\\"][id\\\"960024\\\"][msg\\\"XML-RPCdisabled\\\"][hostname\\\"safeoncloud.ch\\\"][uri\\\"/xmlrpc.php\\\"][unique_id\\\"auJ6zBu1ohAWPbn45EercgAAAQI\\\"]",
"categories": [
14,
18,
21
],
"reporterId": 13613,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-28T12:40:39+00:00",
"comment": "Report for plesk-apache-badbot: 216.73.217.34 - - [22/Oct/2026:09:08:25 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5742 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-27T17:57:14+00:00",
"comment": "PrestaShop Security Module: excessive request rate detected by request flood protection",
"categories": [
4
],
"reporterId": 214731,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-25T22:05:22+00:00",
"comment": "\"2026-10-25 22:05:22+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-24T07:15:08+00:00",
"comment": "IP matched detection query Detection of too many failed responses.",
"categories": [
18,
19,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-10-23T08:01:30+00:00",
"comment": "URL scan",
"categories": [
18,
21
],
"reporterId": 143709,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-23T07:44:38+00:00",
"comment": "Activity from blacklisted IP",
"categories": [
15
],
"reporterId": 30100,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-22T06:17:04+00:00",
"comment": "[Thu Oct 22 08:17:04.442043 2026] [authz_core:error] [pid 5030:tid 5197] [client 216.73.217.34:55564] AH01630: client denied by server configuration: /srv/iupap.physics.muni.cz/www/sitemap.xml\n...",
"categories": [
18,
21
],
"reporterId": 131947,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-10-22T04:53:54+00:00",
"comment": "Triggered Cloudflare WAF (firewallManaged) from US.\nAction taken: BLOCK\nProtocol: HTTP/2 (GET method)\nEndpoint: /sitemap_index.xml\nUA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\n\nThis report was generated by:\nhttps://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB",
"categories": [
19
],
"reporterId": 176010,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-14T16:08:29+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-14T01:48:09+00:00",
"comment": "IP matched detection query Detection of too many failed responses.",
"categories": [
18,
19,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-10-13T21:48:01+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-13T14:47:20+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-12T22:53:07+00:00",
"comment": "IP matched detection query Detection of too many failed responses.",
"categories": [
18,
19,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-10-12T11:32:33+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-12T01:02:52+00:00",
"comment": "(PERMBLOCK) 216.73.217.34 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:",
"categories": [
14
],
"reporterId": 119536,
"reporterCountryCode": "NL",
"reporterCountryName": "Netherlands"
},
{
"reportedAt": "2026-10-10T15:09:12+00:00",
"comment": "Bot / seems abusive / Apache connections: 20",
"categories": [
4,
10,
19,
21
],
"reporterId": 32753,
"reporterCountryCode": "NL",
"reporterCountryName": "Netherlands"
},
{
"reportedAt": "2026-10-10T09:44:43+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-09T22:42:02+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-09T11:36:19+00:00",
"comment": "216.73.217.34 - - [09/Oct/2026:04:42:21 +0200] \"GET /robots.txt HTTP/1.1\" 403 440 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n216.73.217.34 - - [09/Oct/2026:04:42:21 +0200] \"GET /post/2010/07/03/Interview-de-Francois-Vallejo HTTP/1.1\" 403 439 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n216.73.217.34 - - [09/Oct/2026:05:17:41 +0200] \"GET /robots.txt HTTP/1.1\" 403 440 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n216.73.217.34 - - [09/Oct/2026:05:17:43 +0200] \"GET /index.php/2007/06/07/563-vous-plaisantez-monsieur-tanner-jean-paul-dubois HTTP/1.1\" 403 439 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n216.73.217.34 - - [09/Oct/2026:10:33:57 +0200] \"GET /robots.txt HTTP/1.1\" 403 440 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gec\n...",
"categories": [
21
],
"reporterId": 18051,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-09T03:54:41+00:00",
"comment": "[Thu Oct 08 21:54:40.231077 2026] [authz_core:error] [pid 342599:tid 140268982732352] [client 216.73.217.34:55423] AH01630: client denied by server configuration: /var/www/public_html/contest/robots.txt\n[Thu Oct 08 21:54:40.233826 2026] [authz_core:error] [pid 342599:tid 140268982732352] [client 216.73.217.34:55423] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/RMBS-Server-Error.html\n[Thu Oct 08 21:54:40.251437 2026] [authz_core:error] [pid 342599:tid 140268982732352] [client 216.73.217.34:55423] AH01630: client denied by server configuration: /var/www/public_html/contest/\n...",
"categories": [
19
],
"reporterId": 56411,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-10-08T21:19:07+00:00",
"comment": "Activity from blacklisted IP",
"categories": [
15
],
"reporterId": 30100,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-08T09:59:08+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-08T01:19:39+00:00",
"comment": "XSS Attempt",
"categories": [
15
],
"reporterId": 72974,
"reporterCountryCode": "ID",
"reporterCountryName": "Indonesia"
},
{
"reportedAt": "2026-10-05T21:04:21+00:00",
"comment": "Unknown activity, but too many attacks with too many users.",
"categories": [
15
],
"reporterId": 89928,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-10-05T14:25:12+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-04T02:42:02+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-02T11:00:03+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-10-02T07:38:19+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-10-01T21:22:59+00:00",
"comment": "\"2026-10-01 21:22:59+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-30T22:59:09+00:00",
"comment": "Bad Reputation IP >90.",
"categories": [
15
],
"reporterId": 316886,
"reporterCountryCode": "BR",
"reporterCountryName": "Brazil"
},
{
"reportedAt": "2026-09-30T08:15:25+00:00",
"comment": "IP matched detection query 50 and more bad rqs apache.",
"categories": [
15,
19,
18,
21
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-29T21:22:23+00:00",
"comment": "\"2026-09-29 21:22:23+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-29T19:40:38+00:00",
"comment": "Aggressive Robot or Attack DDOS",
"categories": [
4
],
"reporterId": 42013,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-29T14:34:20+00:00",
"comment": "10 hits, proto=tcp, ports=443",
"categories": [
14,
15
],
"reporterId": 55841,
"reporterCountryCode": "AU",
"reporterCountryName": "Australia"
},
{
"reportedAt": "2026-09-29T00:35:56+00:00",
"comment": "IP matched detection query more than 2 hosts and only bad rq long ban.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-29T00:06:56+00:00",
"comment": "IP matched detection query 50 and more bad rqs apache.",
"categories": [
15,
19,
18,
21
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-28T15:00:20+00:00",
"comment": "User agent spoofing",
"categories": [
17
],
"reporterId": 16939,
"reporterCountryCode": "DK",
"reporterCountryName": "Denmark"
},
{
"reportedAt": "2026-09-28T02:57:14+00:00",
"comment": "Excessive multi-domain requests",
"categories": [
18
],
"reporterId": 190396,
"reporterCountryCode": "NL",
"reporterCountryName": "Netherlands"
},
{
"reportedAt": "2026-09-27T11:54:01+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-27T00:02:01+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-26T18:58:15+00:00",
"comment": "Automated report (2026-09-26T14:58:15-04:00). Scraper detected. AI scanner notorious for flooding and DDoS attacks detected.",
"categories": [
19,
4
],
"reporterId": 18554,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-26T18:56:08+00:00",
"comment": "Automated report (2026-09-26T14:56:08-04:00). Scraper detected. AI scanner notorious for flooding and DDoS attacks detected.",
"categories": [
19,
4
],
"reporterId": 18554,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-25T22:26:03+00:00",
"comment": "Blocked by Radar da Telecom firewall — abuseipdb",
"categories": [
19,
21
],
"reporterId": 351957,
"reporterCountryCode": "BR",
"reporterCountryName": "Brazil"
},
{
"reportedAt": "2026-09-25T21:56:49+00:00",
"comment": "Port scan detected: 6 attempts across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=216.73.217.34 LEN=40 TOS=0x00 PREC=0x00 TTL=119 ID=37122 DF PROTO=TCP SPT=63466 DPT=443 WINDOW=62727 RES=0x00 ACK URGP=0",
"categories": [
14
],
"reporterId": 285590,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-25T21:46:22+00:00",
"comment": "\"2026-09-25 21:46:22+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T21:26:33+00:00",
"comment": "Probing wordpress site",
"categories": [
21
],
"reporterId": 41702,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-24T12:31:08+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:14:31:03 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T10:33:05+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:12:33:01 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T08:15:09+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:10:15:06 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T06:23:56+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:08:23:52 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-24T01:00:17+00:00",
"comment": "CrowdSec ban for AbuseIPDB Top List",
"categories": [
18,
21
],
"reporterId": 256090,
"reporterCountryCode": "GB",
"reporterCountryName": "United Kingdom of Great Britain and Northern Ireland"
},
{
"reportedAt": "2026-09-24T00:16:39+00:00",
"comment": "IP matched detection query 20 more in short time bad rqs.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-24T00:11:25+00:00",
"comment": "(PERMBLOCK) 216.73.217.34 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-23T23:29:13+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:01:29:09 +0200] \"GET /wp-sitemap.xml HTTP/2.0\" 200 161 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-23T22:48:41+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [24/Sep/2026:00:48:37 +0200] \"GET / HTTP/2.0\" 200 7856 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-23T21:17:24+00:00",
"comment": "(junkbot) REGOLA 8 - Junk Bot Blocked 216.73.217.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.73.217.34 - - [23/Sep/2026:23:17:19 +0200] \"GET / HTTP/2.0\" 301 0 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\" \"216.73.217.34\" host=www.abruzzotour.it",
"categories": [
14
],
"reporterId": 297536,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-23T03:30:22+00:00",
"comment": "DDoS, Hack, Brute Force, Web Attack\n...",
"categories": [
4,
10,
15,
18,
21
],
"reporterId": 80561,
"reporterCountryCode": "VN",
"reporterCountryName": "Viet Nam"
},
{
"reportedAt": "2026-09-22T19:34:50+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-22T15:19:22+00:00",
"comment": "IP matched detection query 20 more in short time bad rqs.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-22T13:23:26+00:00",
"comment": "IP matched detection query more than 2 hosts and only bad rq long ban.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-22T07:16:15+00:00",
"comment": "BAD BOT - Detected and Blocked.. Matched phrase \"claudebot\" at REQUEST_HEADERS:user-agent. (1100000-169)",
"categories": [
19
],
"reporterId": 131101,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-21T21:37:02+00:00",
"comment": "CrowdSec:custom/http-probing",
"categories": [
21
],
"reporterId": 69015,
"reporterCountryCode": "AU",
"reporterCountryName": "Australia"
},
{
"reportedAt": "2026-09-21T13:49:17+00:00",
"comment": "IP matched detection query 20 more in short time bad rqs.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-20T19:57:32+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-20T14:53:56+00:00",
"comment": "IP matched detection query 50 and more bad rqs apache.",
"categories": [
15,
19,
18,
21
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-20T12:56:47+00:00",
"comment": "IP matched detection query 20 more in short time bad rqs.",
"categories": [
18,
21,
15
],
"reporterId": 50452,
"reporterCountryCode": "CZ",
"reporterCountryName": "Czechia"
},
{
"reportedAt": "2026-09-20T07:41:29+00:00",
"comment": "BAD BOT - Detected and Blocked.. Matched phrase \"claudebot\" at REQUEST_HEADERS:user-agent. (1100000-169)",
"categories": [
19
],
"reporterId": 131101,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-20T02:06:41+00:00",
"comment": "SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port:443, Proto:TCP, EventID:5152]",
"categories": [
14,
21,
19
],
"reporterId": 144640,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-19T11:17:10+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-19T07:29:23+00:00",
"comment": "216.73.217.34 - - [19/Sep/2026:08:29:39 +0100] \"GET /robots.txt HTTP/1.1\" 304 5552 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n...",
"categories": [
19
],
"reporterId": 112894,
"reporterCountryCode": "GB",
"reporterCountryName": "United Kingdom of Great Britain and Northern Ireland"
},
{
"reportedAt": "2026-09-19T03:03:54+00:00",
"comment": "Blocked abusive HTTP application-layer DoS / botnet traffic from 216.73.217.34: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.",
"categories": [
4,
19,
20
],
"reporterId": 329649,
"reporterCountryCode": "US",
"reporterCountryName": "United States of America"
},
{
"reportedAt": "2026-09-18T21:48:14+00:00",
"comment": "\"2026-09-18 21:48:14+00:00 216.73.217.34 IP con score alto (100) detectada en el log.\"",
"categories": [
18,
22
],
"reporterId": 193901,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-18T05:21:25+00:00",
"comment": "Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.",
"categories": [
19,
21
],
"reporterId": 21990,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-18T04:49:21+00:00",
"comment": "Aggressive Robot or Attack DDOS",
"categories": [
4
],
"reporterId": 42013,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-16T19:22:46+00:00",
"comment": "Declared crawler ignoring robots.txt and the refusals it is given | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) | path: /xmlrpc.php | 2026-09-16 19:22 UTC",
"categories": [
19
],
"reporterId": 169612,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-16T17:07:36+00:00",
"comment": "Fail2ban automatic report for plesk-apache-badbot: 216.73.217.34 - - [15/Sep/2026:05:24:24 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5735 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-16T08:52:32+00:00",
"comment": "WEB attack",
"categories": [
18
],
"reporterId": 32042,
"reporterCountryCode": "PL",
"reporterCountryName": "Poland"
},
{
"reportedAt": "2026-09-15T03:24:44+00:00",
"comment": "Fail2ban automatic report for plesk-apache-badbot: 216.73.217.34 - - [15/Sep/2026:05:24:24 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5735 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-14T00:58:00+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
},
{
"reportedAt": "2026-09-12T21:06:02+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-12T03:13:11+00:00",
"comment": "Fail2ban automatic report for plesk-apache-badbot: 216.73.217.34 - - [12/Sep/2026:05:12:52 +0200] GET /datenschutz/ [DOMAIN_REMOVED] 200 35984 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])",
"categories": [
19
],
"reporterId": 344076,
"reporterCountryCode": "DE",
"reporterCountryName": "Germany"
},
{
"reportedAt": "2026-09-11T10:48:01+00:00",
"comment": "...",
"categories": [
18
],
"reporterId": 213943,
"reporterCountryCode": "FR",
"reporterCountryName": "France"
},
{
"reportedAt": "2026-09-10T00:29:52+00:00",
"comment": "216.73.217.34 - - [10/Sep/2026:02:29:51 +0200] \"GET /superbonus-110-i-passi-da-compiere-per-lo-sconto-in-fattura/ HTTP/2.0\" 404 13447 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; ClaudeBot/1.0; +claudebot@anthropic.com)\"\n...",
"categories": [
21
],
"reporterId": 187791,
"reporterCountryCode": "IT",
"reporterCountryName": "Italy"
},
{
"reportedAt": "2026-09-08T14:43:25+00:00",
"comment": "Brute force",
"categories": [
18
],
"reporterId": 156990,
"reporterCountryCode": "ES",
"reporterCountryName": "Spain"
}
]
}
},
{
"id": "abuseipdb_many_reports",
"severity": "high",
"points": 18,
"message": "This IP has many abuse reports.",
"evidence": {
"totalReports": 146,
"numDistinctUsers": 63,
"lastReportedAt": "2026-11-05T22:44:02+00:00"
}
},
{
"id": "abuseipdb_enrichment",
"severity": "info",
"points": 0,
"message": "AbuseIPDB: score 100, reports 146, usage Data Center/Web Hosting/Transit.",
"evidence": {
"abuseConfidenceScore": 100,
"totalReports": 146,
"numDistinctUsers": 63,
"usageType": "Data Center/Web Hosting/Transit",
"isp": "Anthropic, PBC",
"domain": "anthropic.com",
"isTor": false,
"hostnames": []
}
}
]
},
"limitations": {
"datacenterPolicy": "Datacenter/hosting classification is informational only. It does not reduce score by itself.",
"ipinfoLite": "IPinfo Lite does not provide direct is_vpn/is_proxy/is_tor/is_hosting fields. This Worker uses Lite ASN/name/domain enrichment plus heuristics.",
"abuseipdb": "AbuseIPDB is used for reputation, Tor flag, reports, and usageType. UsageType alone does not reduce score.",
"realIpBehindVpn": "No website can reliably know the real ISP IP behind a properly configured VPN unless the browser leaks it through WebRTC or another client-side channel.",
"dnsLeak": "A normal Cloudflare Worker cannot see the visitor DNS resolver. Real DNS leak detection needs authoritative DNS logging for unique test subdomains."
}
}