๐บ๐ธ
TPI-Abuse
2026-04-17 20:30:37
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 47.128.53.207 (ec2-47-128-53-207.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.53.207 (ec2-47-128-53-207.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 16:30:33.641015 2026] [security2:error] [pid 15104:tid 15104] [client 47.128.53.207:12456] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||robertbanis.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "robertbanis.com"] [uri "/3300/download/yrbs2001.dat"] [unique_id "aeKYaWN-6sx6OMjcLYIPbwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
bigorre.org
2026-03-04 13:22:33
(3 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
๐บ๐ธ
xmission.com
2026-03-03 05:09:30
(3 months ago)
47.128.53.207 - - [02/Mar/2026:22:09:27 -0700] "GET /category/photos/daily-chuck/page/496/?page=38 H ...
show more
47.128.53.207 - - [02/Mar/2026:22:09:27 -0700] "GET /category/photos/daily-chuck/page/496/?page=38 HTTP/2.0" 200 9703 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36"
47.128.53.207 - - [02/Mar/2026:22:09:29 -0700] "GET /wp-content/uploads/2012/07/02_08_20112.jpg HTTP/2.0" 206 500 "https://dooce.com/category/photos/daily-chuck/page/496/?page=38" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36"
47.128.53.207 - - [02/Mar/2026:22:09:29 -0700] "GET /photos/chuckcalendar2012/cover.jpg HTTP/2.0" 404 548 "https://dooce.com/category/photos/daily-chuck/page/496/?page=38" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36"
47.128.53.207 - - [02/Mar/2026:22:09:29 -0700] "GET /photos/chuckcalendar2012/ver1_thumbnails1.jpg HTTP/2.0"
...
show less
Bad Web Bot
๐จ๐ญ
backslash
2026-02-28 22:57:09
(3 months ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-02-28 19:25:28
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.53.207 (ec2-47-128-53-207.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.53.207 (ec2-47-128-53-207.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 28 14:25:24.116021 2026] [security2:error] [pid 15215:tid 15215] [client 47.128.53.207:61076] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||homebuilt.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "homebuilt.org"] [uri "/directory/[email protected] "] [unique_id "aaNBJHiMPTg8z0NMAZRZ2QAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
bigorre.org
2026-02-27 10:52:43
(3 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
๐ฉ๐ช
filstal.org
2026-02-21 04:57:50
(3 months ago)
Aggressive Web Bot/Crawler detected by Fail2ban.
Bad Web Bot
๐จ๐ฆ
1gz
2025-12-13 02:57:30
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2025-11-26 20:10:25
(6 months ago)
Automated report (2025-11-26T15:10:25-05:00). Scraper detected.
Bad Web Bot
Anonymous
2025-10-25 19:49:18
(7 months ago)
Malicious activity detected
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-10-25 07:24:26
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.53.207 (ec2-47-128-53-207.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.53.207 (ec2-47-128-53-207.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 03:24:18.883007 2025] [security2:error] [pid 29975:tid 29975] [client 47.128.53.207:35674] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.civilwarzone.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "aPx7Ir-HMgeOt6PaycT1BAAAAAA"], referer: https://www.civilwarzone.com/March.html
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
masterguru
2025-10-18 13:50:30
(7 months ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122)
show less
Bad Web Bot
Anonymous
2025-10-14 01:59:32
(7 months ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐ฆ๐บ
clapper
2025-09-19 06:55:10
(8 months ago)
(mod_security) mod_security (id:980001) triggered by 47.128.53.207 (SG/Singapore/ec2-47-128-53-207.a ...
show more
(mod_security) mod_security (id:980001) triggered by 47.128.53.207 (SG/Singapore/ec2-47-128-53-207.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; ID: rub
show less
Brute-Force
Bad Web Bot
๐ซ๐ท
bigorre.org
2025-09-18 13:02:21
(8 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot