🇪🇸
librebit
2026-11-11 05:08:09
UTC ·
(1 day ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-11-05 09:33:27
UTC ·
(1 week ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-10-21 11:05:37
UTC ·
(3 weeks ago)
Brute force
Brute-Force
2026-04-11 09:29:13
UTC ·
(7 months ago)
FortiWeb WAF: 2 attacks detected. Threat Score: 6200. Types: Client Management(1), GEO IP(1). Origin: Singapore.
Web App Attack
2026-04-09 09:25:54
UTC ·
(7 months ago)
FortiWeb WAF: 44 attacks detected. Threat Score: 7200. Types: Client Management(22), GEO IP(22). Origin: Singapore.
Web App Attack
🇨🇭
backslash
2026-03-04 03:51:13
UTC ·
(8 months ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇪🇸
librebit
2026-02-24 01:25:19
UTC ·
(8 months ago)
Brute force
Brute-Force
🇦🇺
MAGIC
2026-02-24 00:22:08
UTC ·
(8 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇫🇷
bigorre.org
2026-02-15 14:17:16
UTC ·
(8 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-10 04:35:37
UTC ·
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.58.36 (ec2-47-128-58-36.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:35:31.873189 2026] [security2:error] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.58.36 (ec2-47-128-58-36.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:35:31.873189 2026] [security2:error] [pid 1164323:tid 1164334] [client 47.128.58.36:59490] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||batonrougegazette.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "batonrougegazette.com"] [uri "/uncategorized/new-bipartisan-bill-would-prevent-ai-from-launching-nuclear-weapons/1winapkdownload1win.com"] [unique_id "aYq1k5u0XmnEVHvC_jK48AAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-01-12 16:11:20
UTC ·
(10 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-29 15:29:59
UTC ·
(10 months ago)
(mod_security) mod_security (id:211190) triggered by 47.128.58.36 (ec2-47-128-58-36.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 10:29:53.389892 2025] [security2:error] [ ...
show more
(mod_security) mod_security (id:211190) triggered by 47.128.58.36 (ec2-47-128-58-36.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 10:29:53.389892 2025] [security2:error] [pid 6806:tid 6806] [client 47.128.58.36:31720] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||heuristicbooks.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /Heuristic Books -- Algorithms for Better Living_files/ccx/?dir=%2F%2Fetc%2Fssl"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heuristicbooks.com"] [uri "/Heuristic Books -- Algorithms for Better Living_files/ccx/"] [unique_id "aVKecf7QMO2eVR9wfRb0xwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
1gz
2025-12-22 15:01:09
UTC ·
(10 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spid ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇮🇩
hermawan
2025-12-12 09:58:46
UTC ·
(11 months ago)
[Fri Dec 12 16:58:15.665887 2025] [security2:error] [pid 421810:tid 139918083876544] [client 47.128.58.36:53606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/corerule ...
show more
[Fri Dec 12 16:58:15.665887 2025] [security2:error] [pid 421810:tid 139918083876544] [client 47.128.58.36:53606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "253"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] ) request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "aTvnN-7js_I_eH-SOa78qAAChgE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[421815] [SMfVTL7kdFc] [aTvnN-7js_I
...
show less
Hacking
Web App Attack
2025-12-09 11:58:27
UTC ·
(11 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
