🇫🇷
claude CALVET
2026-07-23 18:35:17
(1 day ago)
gee-88 : Bloc AI bots=>/(Bytespider)
Hacking
🇫🇷
claude CALVET
2026-04-22 06:59:21
(3 months ago)
gew-Joomla User : try to access forms...
Hacking
🇫🇷
bigorre.org
2026-02-08 13:41:52
(5 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇨🇦
1gz
2026-02-04 00:19:54
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-01-29 14:56:47
(5 months ago)
Automated report (2026-01-29T09:56:47-05:00). Scraper detected.
Bad Web Bot
🇩🇪
BlueWire Hosting
2026-01-08 09:31:40
(6 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇩🇪
Reinhard
2026-01-01 00:39:28
(6 months ago)
Unknown activity, but too many attacks with too many users.
Hacking
🇺🇸
TPI-Abuse
2025-12-16 19:37:06
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.52.141 (ec2-47-128-52-141.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.52.141 (ec2-47-128-52-141.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 16 14:36:59.354646 2025] [security2:error] [pid 21094:tid 21094] [client 47.128.52.141:31790] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.aaabft.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.aaabft.com"] [uri "/[email protected] "] [unique_id "aUG024g7daCOAIXHAihOHwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
1gz
2025-12-13 00:47:41
(7 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
bigorre.org
2025-12-12 13:32:18
(7 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
2025-12-09 17:54:03
(7 months ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-12-01 16:27:23
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.52.141 (ec2-47-128-52-141.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.52.141 (ec2-47-128-52-141.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 11:27:15.905128 2025] [security2:error] [pid 10522:tid 10522] [client 47.128.52.141:56192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||med-engineering.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/tabs.com"] [unique_id "aS3B46l3DFwOaAjfEt8bMgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-30 07:39:47
(8 months ago)
Excessive crawling/scraping
Hacking
Brute-Force
🇧🇬
pa4080
2025-10-29 06:22:33
(8 months ago)
Detected by ModSecurity. Request URI: /index.php?oldid=31394&returnto=SSH+and+SFTP+Jail+a+User+%28re ...
show more
Detected by ModSecurity. Request URI: /index.php?oldid=31394&returnto=SSH+and+SFTP+Jail+a+User+%28refs%29&returntoquery=direction=prev&title=Special%3AUserLogin
show less
Hacking
Web App Attack
🇦🇷
RocketEmi
2025-10-28 16:41:29
(8 months ago)
Automated web crawling detected: high request rate, scraping multiple pages. Behavior consistent wit ...
show more
Automated web crawling detected: high request rate, scraping multiple pages. Behavior consistent with Bad Web Bot.
show less
Bad Web Bot