๐บ๐ธ
stopmalwareservice
2025-05-22 16:09:00
(1 year ago)
128.192.193.151 - - [20/May/2025:03:52:58 -0400] "GET / HTTP/1.1" 200 1206 "-" "Mozilla/5.0 zgrab/0. ...
show more
128.192.193.151 - - [20/May/2025:03:52:58 -0400] "GET / HTTP/1.1" 200 1206 "-" "Mozilla/5.0 zgrab/0.x"
128.192.193.151 - - [20/May/2025:03:42:32 -0400] "GET / HTTP/1.1" 200 1206 "-" "Mozilla/5.0 zgrab/0.x"
128.192.193.151 - - [20/May/2025:03:36:58 -0400] "GET / HTTP/1.1" 200 1206 "-" "Mozilla/5.0 zgrab/0.x"
show less
Hacking
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
hermawan
2025-05-21 04:41:24
(1 year ago)
[Wed May 21 09:55:26.114886 2025] [security2:error] [pid 270899:tid 140380643256000] [client 128.192 ...
show more
[Wed May 21 09:55:26.114886 2025] [security2:error] [pid 270899:tid 140380643256000] [client 128.192.193.151:40136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 zgrab/0.x request_line = GET / HTTP/1.1 Request URI RAW = / Request Basename = "] [severity "CRITICAL"] [ver "OWASP_CRS/4.14.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aC1Ank2z
...
show less
Hacking
Web App Attack
๐ณ๐ฑ
Mangelot Hosting
2025-05-21 01:32:21
(1 year ago)
(MODSECURITY) ModSecurity IP Detected 128.192.193.151 (US/United States/maxwell.cs.uga.edu): 5 in th ...
show more
(MODSECURITY) ModSecurity IP Detected 128.192.193.151 (US/United States/maxwell.cs.uga.edu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐ฎ๐ฉ
hermawan
2025-05-20 20:29:46
(1 year ago)
[Wed May 21 03:20:01.275090 2025] [security2:error] [pid 56139:tid 140382616680128] [client 128.192. ...
show more
[Wed May 21 03:20:01.275090 2025] [security2:error] [pid 56139:tid 140382616680128] [client 128.192.193.151:33390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 zgrab/0.x request_line = GET / HTTP/1.1 Request URI RAW = / Request Basename = "] [severity "CRITICAL"] [ver "OWASP_CRS/4.14.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "staklim-malang.info"] [uri "/"] [unique_id "aCzj8fWwTGsM-e
...
show less
Hacking
Web App Attack
๐ซ๐ท
pm33
2025-05-20 20:22:40
(1 year ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
๐ฆ๐บ
2000cn.com.au
2025-05-20 19:19:04
(1 year ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Bad Web Bot
Web App Attack
Anonymous
2025-05-20 19:12:01
(1 year ago)
Unauthorized SSH login attempts
Brute-Force
SSH
๐ฉ๐ช
LRob
2025-05-20 18:00:14
(1 year ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
๐ณ๐ฑ
i-turnradio.nl
2025-05-20 17:47:36
(1 year ago)
2025-05-20 @ 19:47:36 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
๐ฎ๐ฉ
hermawan
2025-05-20 15:47:05
(1 year ago)
[Tue May 20 21:48:11.517153 2025] [security2:error] [pid 62648:tid 140311766472384] [client 128.192. ...
show more
[Tue May 20 21:48:11.517153 2025] [security2:error] [pid 62648:tid 140311766472384] [client 128.192.193.151:60182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 zgrab/0.x request_line = GET / HTTP/1.1 Request URI RAW = / Request Basename = "] [severity "CRITICAL"] [ver "OWASP_CRS/4.14.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "staklim-malang.info"] [uri "/"] [unique_id "aCyWK8DM9RZfZE
...
show less
Hacking
Web App Attack
๐ฉ๐ช
Interceptor_HQ
2025-05-20 15:28:21
(1 year ago)
request_uri: / -- automatic report --
Hacking
Brute-Force
๐บ๐ธ
Starburst SysOp Team
2025-05-20 14:20:51
(1 year ago)
Found User-Agent associated with security scanner. Matched phrase "zgrab" at REQUEST_HEADERS:User-Ag ...
show more
Found User-Agent associated with security scanner. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. (913100-stl2-17)
show less
Hacking
Bad Web Bot
๐ณ๐ฑ
BlueWire Hosting
2025-05-20 14:10:10
(1 year ago)
Detected as a bad bot
Bad Web Bot
๐ฆ๐บ
clapper
2025-05-20 13:23:33
(1 year ago)
(mod_security) mod_security (id:980001) triggered by 128.192.193.151 (US/United States/maxwell.cs.ug ...
show more
(mod_security) mod_security (id:980001) triggered by 128.192.193.151 (US/United States/maxwell.cs.uga.edu): 5 in the last 3600 secs; ID: Dan
show less
Brute-Force
Bad Web Bot
๐ฉ๐ช
SCHAPPY
2025-05-20 10:52:35
(1 year ago)
Bad bot identified by user agent
Bad Web Bot