🇺🇸
sandra361
2026-07-16 11:32:44
(18 hours ago)
Port scan detected: 8 attempts across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=47.128. ...
show more
Port scan detected: 8 attempts across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=47.128.99.100 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=55592 DF PROTO=TCP SPT=28176 DPT=443 WINDOW=42340 RES=0x00 ACK FIN URGP=0
show less
Port Scan
🇺🇸
TPI-Abuse
2026-05-04 01:15:18
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.99.100 (ec2-47-128-99-100.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.99.100 (ec2-47-128-99-100.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 21:15:14.021105 2026] [security2:error] [pid 27869:tid 27869] [client 47.128.99.100:44728] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.christiansmobilemedic.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.christiansmobilemedic.com"] [uri "/about/christiansmobilemedic.com"] [unique_id "affzIurnfwpYLm7iYfOd5wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
i-turnradio.nl
2026-03-17 04:08:44
(4 months ago)
2026-03-17 05:08:43 (CET) ~ Blocked by abusescan risk assessment
Web App Attack
🇫🇷
bigorre.org
2026-03-08 16:43:59
(4 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇫🇷
bigorre.org
2026-03-04 13:25:37
(4 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇨🇭
backslash
2026-02-27 09:57:08
(4 months ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇫🇷
bigorre.org
2026-02-24 16:37:48
(4 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇩🇪
dbmwebdesign
2026-01-08 11:21:08
(6 months ago)
Bot detected and blocked by Fail2Ban in bytespider jail
Bad Web Bot
🇩🇪
BlueWire Hosting
2026-01-03 00:46:40
(6 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇨🇦
1gz
2025-12-20 17:15:37
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /uncategorized/kryetitull-dha-doreheqjen-te-kqz-zguri-dorezon-detyren-543358/43566/
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇦
1gz
2025-12-19 11:11:58
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇷
RocketEmi
2025-12-16 00:03:49
(7 months ago)
Automated web crawling detected: high request rate, scraping multiple pages. Behavior consistent wit ...
show more
Automated web crawling detected: high request rate, scraping multiple pages. Behavior consistent with Bad Web Bot.
show less
Bad Web Bot
🇦🇺
MAGIC
2025-12-16 00:02:46
(7 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-03 10:38:04
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.99.100 (ec2-47-128-99-100.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.99.100 (ec2-47-128-99-100.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 05:37:59.567639 2025] [security2:error] [pid 21942:tid 21942] [client 47.128.99.100:65048] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||med-engineering.com|F|2"] [data ".dead.med-engineering.com.snr.db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/pma.dead.med-engineering.com.snr.db"] [unique_id "aTATB5aj37FDrbbRkkLEIAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
Jim Keir
2025-11-10 09:37:20
(8 months ago)
2025-11-10 09:37:20 47.128.99.100 Bad bot, blocking Mozilla/5.0
Bad Web Bot