2023-12-10 21:46:08
(43 minutes ago)
Excessive crawling/scraping
Hacking
Brute-Force
MAGIC
2023-12-10 14:09:22
(8 hours ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
MAGIC
2023-12-09 12:02:07
(1 day ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
AvonleaConsulting
2023-12-07 23:58:39
(2 days ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
AvonleaConsulting
2023-12-07 15:01:08
(3 days ago)
Unrecognised attack
IoT Targeted
hermawan
2023-12-06 18:58:25
(4 days ago)
[Thu Dec 07 01:58:23.578702 2023] [security2:error] [pid 192222:tid 139897604134464] [client 114.119 ... show more [Thu Dec 07 01:58:23.578702 2023] [security2:error] [pid 192222:tid 139897604134464] [client 114.119.151.174:33679] [client 114.119.151.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/buletin-6-bulanan-prakiraan-musim-kemarau-tahun-2022-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/buletin-6-bulanan-prakiraan-musim-kemarau-tahun-2022-di-provinsi-jawa-timur"] [unique_id "ZXDETxqUO-CVNi7yPshow less
Hacking
Web App Attack
hermawan
2023-12-06 01:31:26
(4 days ago)
[Wed Dec 06 08:31:23.855668 2023] [security2:error] [pid 255821:tid 140557284267584] [client 114.119 ... show more [Wed Dec 06 08:31:23.855668 2023] [security2:error] [pid 255821:tid 140557284267584] [client 114.119.151.174:33649] [client 114.119.151.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/kalender-tanam-katam-terpadu-kecamatan-terentang-kabupaten-kubu-raya-provinsi-kalimantan-barat HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/kalender-tanam-katam-terpadu-kecamatan-terentang-kabupaten-kubu-raya-provinsi-kalimantanshow less
Hacking
Web App Attack
MAGIC
2023-12-05 13:00:49
(5 days ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2023-12-05 11:47:42
(5 days ago)
Excessive crawling/scraping
Hacking
Brute-Force
TPI-Abuse
2023-12-04 16:47:43
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 114.119.151.174 (petalbot-114-119-151-174.petal ... show more (mod_security) mod_security (id:210730) triggered by 114.119.151.174 (petalbot-114-119-151-174.petalsearch.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 04 11:47:36.836238 2023] [security2:error] [pid 10653] [client 114.119.151.174:61705] [client 114.119.151.174] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.player-care.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.player-care.com"] [uri "/midi/george/stream.key"] [unique_id "ZW4CqHOoLnbIIS6gUwfhAAAAABI"], referer: http://www.player-care.com/midi/george?C=S%3BO%3DA show less
Brute-Force
Bad Web Bot
Web App Attack
MAGIC
2023-11-30 15:26:56
(1 week ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
Thaliruth
2023-11-28 03:26:04
(1 week ago)
114.119.151.174 - - [28/Nov/2023:04:26:03 +0100] "GET /robots.txt HTTP/1.0" 200 1197 "-" "Mozilla/5. ... show more 114.119.151.174 - - [28/Nov/2023:04:26:03 +0100] "GET /robots.txt HTTP/1.0" 200 1197 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)"show less
Bad Web Bot
TPI-Abuse
2023-11-27 20:06:21
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 114.119.151.174 (petalbot-114-119-151-174.petal ... show more (mod_security) mod_security (id:210492) triggered by 114.119.151.174 (petalbot-114-119-151-174.petalsearch.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 27 15:06:18.960034 2023] [security2:error] [pid 27242] [client 114.119.151.174:38369] [client 114.119.151.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.systemcapacityoptimization.com"] [uri "/wfowisdom.com/web.config"] [unique_id "ZWT2ukXTbuMksxljzk05UAAAAAs"], referer: http://www.systemcapacityoptimization.com/wfowisdom.com/?C=M%3BO%3DA show less
Brute-Force
Bad Web Bot
Web App Attack
AvonleaConsulting
2023-11-26 23:57:46
(1 week ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
AvonleaConsulting
2023-11-26 17:46:41
(2 weeks ago)
Unrecognised attack
IoT Targeted
Singapore