🇪🇸
librebit
2026-07-29 04:55:03
(3 hours ago)
Brute force
Brute-Force
🇬🇧
pinguin
2026-05-25 23:42:01
(2 months ago)
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇬🇧
pinguin
2026-05-13 05:37:08
(2 months ago)
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
bigorre.org
2026-03-06 15:54:53
(4 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇫🇷
bigorre.org
2026-02-12 13:24:48
(5 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇪🇸
librebit
2026-01-19 10:28:12
(6 months ago)
Brute force
Brute-Force
🇺🇸
fortypoundhead
2025-12-18 01:45:14
(7 months ago)
Banned IP Address
Hacking
Web App Attack
🇺🇸
xmission.com
2025-12-12 20:02:59
(7 months ago)
47.128.57.113 - - [12/Dec/2025:13:02:57 -0700] "GET /related/parenthood/page/91/dooce.com/2014/11/06 ...
show more
47.128.57.113 - - [12/Dec/2025:13:02:57 -0700] "GET /related/parenthood/page/91/dooce.com/2014/11/06/matters-of-the-eyes/ HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )"
47.128.57.113 - - [12/Dec/2025:13:02:57 -0700] "GET /2014/11/06/matters-of-the-eyes/ HTTP/2.0" 200 14975 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )"
47.128.57.113 - - [12/Dec/2025:13:02:58 -0700] "GET /wp-content/uploads/2014/11/eyes_5.jpg HTTP/2.0" 206 500 "https://dooce.com/2014/11/06/matters-of-the-eyes/" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )"
47.128.57.113 - - [12/Dec/2025:13:02:58 -0700] "GET /wp-content/uploads/2014/11/eyes_3.jpg HTTP/2.0" 206 500 "https://dooce.com/2014/11
...
show less
Bad Web Bot
2025-11-30 06:19:05
(7 months ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇬🇧
NotCool
2025-11-09 14:25:08
(8 months ago)
(CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.57.113 (ec2-47-128-57-113.ap-southeast-1.compu ...
show more
(CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.57.113 (ec2-47-128-57-113.ap-southeast-1.compute.amazonaws.com): 10 in the last 3600 secs
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-02 06:16:06
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.57.113 (ec2-47-128-57-113.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.57.113 (ec2-47-128-57-113.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 02 01:16:02.974735 2025] [security2:error] [pid 3226:tid 3226] [client 47.128.57.113:49244] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.voodooshop.com|F|2"] [data ".com.seowebstat.com.seowebstat.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.voodooshop.com"] [uri "/:/seowebstat.com.seowebstat.com.seowebstat.com"] [unique_id "aQb3IvTVZqXgSOzAC3SioQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-14 17:37:57
(9 months ago)
(mod_security) mod_security (id:211190) triggered by 47.128.57.113 (ec2-47-128-57-113.ap-southeast-1 ...
show more
(mod_security) mod_security (id:211190) triggered by 47.128.57.113 (ec2-47-128-57-113.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 14 13:37:52.344887 2025] [security2:error] [pid 524:tid 524] [client 47.128.57.113:47946] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||heuristicbooks.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /Heuristic Books -- Algorithms for Better Living_files/ccx/?dir=%2Fhome%2Frbanis%2Fetc%2Fjourneysinprayerandsong.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heuristicbooks.com"] [uri "/Heuristic Books -- Algorithms for Better Living_files/ccx/"] [unique_id "aO6KcCgSUVowE-li1rlpEAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
conseilgouz
2025-10-13 09:34:37
(9 months ago)
sae-88 : Bloc AI bots=>/cg_no_robot/?e=88&t=e&m=Bytespider___&sec=0.7310522442033331(Byt ...
show more
sae-88 : Bloc AI bots=>/cg_no_robot/?e=88&t=e&m=Bytespider___&sec=0.7310522442033331(Bytespider)
show less
Hacking
🇺🇸
TPI-Abuse
2025-10-06 01:31:10
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.57.113 (ec2-47-128-57-113.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.57.113 (ec2-47-128-57-113.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 05 21:31:05.909124 2025] [security2:error] [pid 20773:tid 20773] [client 47.128.57.113:50384] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||med-engineering.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/styplon.com"] [unique_id "aOMb2QKfzt33hTyP_IUENQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
NotCool
2025-09-30 08:17:28
(9 months ago)
(CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.57.113 (SG/Singapore/ec2-47-128-57-113.ap-sout ...
show more
(CRAWLDELAY) Generic Bot Crawl-delay Violation 47.128.57.113 (SG/Singapore/ec2-47-128-57-113.ap-southeast-1.compute.amazonaws.com): 10 in the last 3600 secs
show less
Bad Web Bot