🇩🇪
dbmwebdesign
2026-04-22 07:55:03
(4 months ago)
Bot detected and blocked by Fail2Ban in bytespider jail
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-07 07:27:37
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.124.246 (ec2-47-128-124-246.ap-southeast ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.124.246 (ec2-47-128-124-246.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 03:27:33.538706 2026] [security2:error] [pid 1131260:tid 1131260] [client 47.128.124.246:55722] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.kingstoneproperties.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kingstoneproperties.com"] [uri "/[email protected] "] [unique_id "adSx5YQq-Q5Sz87XbDEligAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
filstal.org
2026-04-06 03:54:55
(5 months ago)
Aggressive Web Bot/Crawler - Multiple UA-switching detected.
Bad Web Bot
🇩🇪
filstal.org
2026-04-01 15:33:56
(5 months ago)
Aggressive Web Bot/Crawler - Multiple UA-switching detected.
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-29 19:52:05
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.124.246 (ec2-47-128-124-246.ap-southeast ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.124.246 (ec2-47-128-124-246.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 15:51:57.923633 2026] [security2:error] [pid 8378:tid 8405] [client 47.128.124.246:58698] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||silvestricarpet.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "silvestricarpet.com"] [uri "/\\xe2\\x80\\x9cmailto:[email protected] "] [unique_id "acmC3eyAHtvuJyy1iXDzPQAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-24 19:36:20
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.124.246 (ec2-47-128-124-246.ap-southeast ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.124.246 (ec2-47-128-124-246.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 15:36:12.528096 2026] [security2:error] [pid 9065:tid 9078] [client 47.128.124.246:30124] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vtweaversguild.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vtweaversguild.org"] [uri "/VWG-FORUM/[email protected] "] [unique_id "acLnrKYgpLyLvcw1nvVKgwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Progetto1
2026-03-20 11:05:03
(5 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇫🇷
bigorre.org
2026-02-20 10:34:53
(6 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇪🇸
masterguru
2026-01-29 19:21:24
(7 months ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122)
show less
Bad Web Bot
🇦🇷
RocketEmi
2026-01-25 05:50:02
(7 months ago)
Automated web crawling detected: high request rate, scraping multiple pages. Behavior consistent wit ...
show more
Automated web crawling detected: high request rate, scraping multiple pages. Behavior consistent with Bad Web Bot.
show less
Bad Web Bot
🇩🇪
BlueWire Hosting
2026-01-12 23:55:19
(8 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇩🇪
BlueWire Hosting
2026-01-10 01:08:42
(8 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇫🇷
bigorre.org
2025-12-31 15:18:56
(8 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇫🇷
mrcrassi
2025-12-28 20:49:13
(8 months ago)
Triggered Cloudflare WAF (botFight) from SG.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (GET m ...
show more
Triggered Cloudflare WAF (botFight) from SG.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-25 06:01:00
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.124.246 (ec2-47-128-124-246.ap-southeast ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.124.246 (ec2-47-128-124-246.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 01:00:55.029187 2025] [security2:error] [pid 9576:tid 9576] [client 47.128.124.246:14804] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||med-engineering.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/avelox.com"] [unique_id "aUzTF0fnt4StwULKo8dRLwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
