🇩🇪
Hazzard
2026-07-16 10:59:18
(6 hours ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)
Bad Web Bot
2026-04-19 09:52:08
(2 months ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 47.128.55.212 (SG/Si ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 47.128.55.212 (SG/Singapore/ec2-47-128-55-212.ap-southeast-1.compute.amazonaws.com)
show less
Bad Web Bot
🇨🇭
backslash
2026-03-05 16:03:08
(4 months ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇫🇷
conseilgouz
2026-03-04 19:19:59
(4 months ago)
sie-Security key failure(Bytespider)
Hacking
🇺🇸
TPI-Abuse
2026-03-02 13:18:59
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.55.212 (ec2-47-128-55-212.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.55.212 (ec2-47-128-55-212.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 08:18:39.281795 2026] [security2:error] [pid 19279:tid 19279] [client 47.128.55.212:38766] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.remedialconcepts.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.remedialconcepts.com"] [uri "/1800/1800vids/instructionalvideotutorials.com"] [unique_id "aaWOL9ctaDPJxNUqo-On3gAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2026-02-25 15:33:07
(4 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇫🇷
bigorre.org
2026-02-23 16:22:40
(4 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇩🇪
Reinhard
2026-01-06 01:37:12
(6 months ago)
Unknown activity, but too many attacks with too many users.
Hacking
🇩🇪
conseilgouz
2025-12-26 18:28:05
(6 months ago)
ece-88 : Bloc AI bots=>/cg_no_robot/?e=88&t=e&m=Bytespider___&sec=0.6021307342042457(Byt ...
show more
ece-88 : Bloc AI bots=>/cg_no_robot/?e=88&t=e&m=Bytespider___&sec=0.6021307342042457(Bytespider)
show less
Hacking
🇮🇩
hermawan
2025-12-11 17:21:32
(7 months ago)
[Fri Dec 12 00:21:28.526885 2025] [security2:error] [pid 409171:tid 140675103225536] [client 47.128. ...
show more
[Fri Dec 12 00:21:28.526885 2025] [security2:error] [pid 409171:tid 140675103225536] [client 47.128.55.212:63484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "253"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] ) request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan"] [unique_id "aTr9mC1-rTLNhDQ7bOAFBgAAAhg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[409196] [uYUKYLD03Jc] [aTr9mC1-rTLNhDQ7bOAFBgAAAhg] k
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 15:16:20
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.55.212 (ec2-47-128-55-212.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.55.212 (ec2-47-128-55-212.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 10:16:15.688055 2025] [security2:error] [pid 4012:tid 4012] [client 47.128.55.212:25920] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.med-engineering.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.med-engineering.com"] [uri "/Lindoron.com"] [unique_id "aTbrv5X0jfuOcuHQlBOSCAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-20 08:34:09
(7 months ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-11-07 04:37:40
(8 months ago)
(mod_security) mod_security (id:211190) triggered by 47.128.55.212 (ec2-47-128-55-212.ap-southeast-1 ...
show more
(mod_security) mod_security (id:211190) triggered by 47.128.55.212 (ec2-47-128-55-212.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 23:37:34.099407 2025] [security2:error] [pid 11163:tid 11163] [client 47.128.55.212:53054] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||heuristicbooks.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /Heuristic Books -- Algorithms for Better Living_files/ccx/?dir=%2Fhome%2Frbanis%2Fetc%2Fnhg.banis-associates.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heuristicbooks.com"] [uri "/Heuristic Books -- Algorithms for Better Living_files/ccx/"] [unique_id "aQ13jnYTgKIY1PwznpM-DgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dbmwebdesign
2025-11-04 03:10:34
(8 months ago)
Bot detected and blocked by Fail2Ban in bytespider jail
Bad Web Bot
2025-10-14 12:17:21
(9 months ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack