🇺🇸
TPI-Abuse
2026-01-01 03:59:02
(6 months ago)
(mod_security) mod_security (id:211190) triggered by 47.128.44.167 (ec2-47-128-44-167.ap-southeast-1 ...
show more
(mod_security) mod_security (id:211190) triggered by 47.128.44.167 (ec2-47-128-44-167.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 31 22:58:58.127888 2025] [security2:error] [pid 20941:tid 20941] [client 47.128.44.167:38158] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||heuristicbooks.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /Heuristic Books -- Algorithms for Better Living_files/ccx/?dir=%2Fhome%2Frbanis%2Fetc%2Fdaterapebook.banis-associates.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heuristicbooks.com"] [uri "/Heuristic Books -- Algorithms for Better Living_files/ccx/"] [unique_id "aVXxAiY59jPommEgk_qX0wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
conseilgouz
2025-12-20 13:54:46
(7 months ago)
ave-88 : Bloc AI bots=>/component/weblinks/?task=weblink.go&catid=15:societes&id=9:infogreff ...
show more
ave-88 : Bloc AI bots=>/component/weblinks/?task=weblink.go&catid=15:societes&id=9:infogreffe&Itemid=101(Bytespider)
show less
Hacking
🇨🇦
1gz
2025-12-18 18:01:16
(7 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇮🇪
Jim Keir
2025-12-13 21:11:48
(7 months ago)
2025-12-13 21:11:47 47.128.44.167 Bad bot, blocking Mozilla/5.0
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-11 02:29:08
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.44.167 (ec2-47-128-44-167.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.44.167 (ec2-47-128-44-167.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 21:29:02.736126 2025] [security2:error] [pid 21299:tid 21299] [client 47.128.44.167:22596] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.informativearticles.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.informativearticles.com"] [uri "/sales/[email protected] "] [unique_id "aTosbgssCqKdfxd3i_HHeQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-04 13:15:10
(7 months ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇳🇱
i-turnradio.nl
2025-10-19 08:17:34
(9 months ago)
2025-10-19 @ 10:17:33 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
2025-10-18 19:15:31
(9 months ago)
Excessive crawling/scraping
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-10-02 10:30:27
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.44.167 (ec2-47-128-44-167.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.44.167 (ec2-47-128-44-167.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 02 06:30:20.317514 2025] [security2:error] [pid 5479:tid 5479] [client 47.128.44.167:22120] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||celebritybikinigossip.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "celebritybikinigossip.com"] [uri "/category/celebrities/page/65/thehollywoodgossip.com"] [unique_id "aN5UPI8M0is7nia8CMTubAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2025-09-23 16:43:23
(10 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇩🇪
dbmwebdesign
2025-09-20 00:00:52
(10 months ago)
Bot detected and blocked by Fail2Ban in bytespider jail
Bad Web Bot
🇮🇳
dineshskt4all
2025-09-16 22:57:35
(10 months ago)
47.128.44.167 - - [16/Sep/2025:22:57:32 +0000] "GET /index.php?limit=75&order=DESC&path=86&product_i ...
show more
47.128.44.167 - - [16/Sep/2025:22:57:32 +0000] "GET /index.php?limit=75&order=DESC&path=86&product_id=76&route=product%2Fproduct&sort=pd.name HTTP/1.0" 200 16494 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )"
...
show less
IoT Targeted
🇦🇺
MAGIC
2025-09-13 00:03:44
(10 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
psauxit
2025-09-12 01:17:14
(10 months ago)
Fail2Ban - NGINX heavily bad-bot, possible vulnerability scanning and excessive crawling/scraping
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇳🇱
exxos
2025-09-09 01:03:01
(10 months ago)
Attacks with Bad user agents
Hacking