🇺🇸
TPI-Abuse
2026-10-09 06:02:32
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 47.128.99.142 (ec2-47-128-99-142.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.99.142 (ec2-47-128-99-142.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 02:02:27.798905 2026] [security2:error] [pid 27066:tid 27066] [client 47.128.99.142:15346] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Lift Chairs/Comforter Series/Comforter Fabrics/Thumbs.db"] [unique_id "asiDc3TzdHVjdUDslIy3NwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-12 19:40:38
(4 weeks ago)
Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity | ua: Mozilla/5 ...
show more
Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity | ua: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-fee | path: / | 2026-09-12 19:40 UTC
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-25 08:23:49
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 47.128.99.142 (ec2-47-128-99-142.ap-southeast-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.99.142 (ec2-47-128-99-142.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 04:23:44.230721 2026] [security2:error] [pid 6302:tid 6302] [client 47.128.99.142:62104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Lift Chairs/Maxicomfort Series/Thumbs.db"] [unique_id "ao1REMJ_2BjCpqZKkiwKtwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-03-10 04:29:49
(7 months ago)
Brute force
Brute-Force
🇩🇪
filstal.org
2026-03-08 18:34:17
(7 months ago)
Aggressive Web Bot/Crawler detected by Fail2ban.
Bad Web Bot
🇫🇷
bigorre.org
2026-03-04 15:39:14
(7 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇮🇳
dineshskt4all
2026-03-01 23:04:46
(7 months ago)
47.128.99.142 - - [01/Mar/2026:23:04:42 +0000] "GET /robots.txt HTTP/1.0" 200 4304 "-" "Mozilla/5.0 ...
show more
47.128.99.142 - - [01/Mar/2026:23:04:42 +0000] "GET /robots.txt HTTP/1.0" 200 4304 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )"
...
show less
IoT Targeted
🇨🇭
backslash
2026-02-26 19:18:04
(7 months ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇫🇷
bigorre.org
2026-02-24 14:17:43
(7 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-21 19:17:58
(7 months ago)
(mod_security) mod_security (id:211180) triggered by 47.128.99.142 (ec2-47-128-99-142.ap-southeast-1 ...
show more
(mod_security) mod_security (id:211180) triggered by 47.128.99.142 (ec2-47-128-99-142.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 14:17:54.113023 2026] [security2:error] [pid 4825:tid 4825] [client 47.128.99.142:43254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "50"] [id "211180"] [rev "3"] [msg "COMODO WAF: Session Fixation: SessionID Parameter Name with No Referer||wisconsinstatehuntingexpo.com|F|2"] [data "Matched Data: cftoken found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wisconsinstatehuntingexpo.com"] [uri "/"] [unique_id "aZoE4v-xaiJAHxaegwBu8wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Progetto1
2026-01-30 20:00:03
(8 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
Reinhard
2026-01-12 08:07:38
(8 months ago)
Unknown activity, but too many attacks with too many users.
Hacking
🇨🇦
1gz
2025-12-17 01:50:44
(9 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇵🇱
IROK
2025-12-16 11:16:24
(9 months ago)
Firewall Blocked - Unauthorized Port Scanning
...
Port Scan
🇫🇷
bigorre.org
2025-12-15 10:37:14
(9 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
