Anonymous
2025-03-13 16:49:56
(1 year ago)
Fail2Ban: IP flagged for web exploits and DDoS attack attempts (Categories 4, 21).
DDoS Attack
Web App Attack
๐ฆ๐บ
MAGIC
2025-03-12 20:02:33
(1 year ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
Anonymous
2025-03-10 22:03:49
(1 year ago)
Scenario: crowdsecurity/http-bad-user-agent
Bad Web Bot
Anonymous
2025-03-10 02:35:33
(1 year ago)
2001:41d0:1004:be::1 - - [10/Mar/2025:03:31:52 +0100] "GET /database/?c=aardrijkskunde;algemene-wete ...
show more
2001:41d0:1004:be::1 - - [10/Mar/2025:03:31:52 +0100] "GET /database/?c=aardrijkskunde;algemene-wetenschaptechniek;biologie;informatica;kunstvakken;maatschappijvakken;maatschappijwetenschappen;wiskunde/page/9/ HTTP/1.1" 404 24341 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
2001:41d0:1004:be::1 - - [10/Mar/2025:03:31:53 +0100] "GET /database/?c=aardrijkskunde;algemene-wetenschaptechniek;biologie;kunst;kunstvakken;maatschappijvakken;maatschappijwetenschappen;wiskunde/page/7/ HTTP/1.1" 404 24341 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
2001:41d0:1004:be::1 - - [10/Mar/2025:03:31:55 +0100] "GET /database/?c=aardrijkskunde;algemene-wetenschaptechniek;burgerschap;economie;exacte-vakken;filosofie;geschiedenis;informatica;kunst;maatschappijvakken;natuur-leven-en-technologie/page/7/ HTTP/1.1" 404 24341 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
2001:41d0:1004:be::1 - - [10/Mar/2025:03:31:57 +0100] "GET /database/?c=aard
...
show less
DDoS Attack
Anonymous
2025-03-07 18:30:29
(1 year ago)
2001:41d0:1004:be::1 - - [07/Mar/2025:19:27:05 +0100] "GET /database/?c=aardrijkskunde;algemene-wete ...
show more
2001:41d0:1004:be::1 - - [07/Mar/2025:19:27:05 +0100] "GET /database/?c=aardrijkskunde;algemene-wetenschaptechniek;biologie;burgerschap;economie;exacte-vakken;filosofie;geschiedenis;informatica;kunst;kunstvakken;maatschappijleer/page/9/ HTTP/1.1" 404 24341 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
2001:41d0:1004:be::1 - - [07/Mar/2025:19:27:08 +0100] "GET /database/?c=aardrijkskunde;algemene-wetenschaptechniek;biologie;filosofie;geschiedenis;maatschappijleer;maatschappijwetenschappen;natuurkunde;scheikunde/page/6/ HTTP/1.1" 404 24341 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
2001:41d0:1004:be::1 - - [07/Mar/2025:19:27:10 +0100] "GET /database/?c=aardrijkskunde;algemene-wetenschaptechniek;biologie;filosofie;geschiedenis;maatschappijwetenschappen;natuur-leven-en-technologie;wiskunde/page/8/ HTTP/1.1" 404 24341 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
2001:41d0:1004:be::1 - - [07/Mar/2025:19:27:12 +0100] "GET /
...
show less
DDoS Attack
Anonymous
2025-03-07 10:18:01
(1 year ago)
Scenario: crowdsecurity/http-bad-user-agent
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2025-03-05 06:02:51
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:41d0:1004:be::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:41d0:1004:be::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 01:02:44.096999 2025] [security2:error] [pid 11702:tid 11702] [client 2001:41d0:1004:be::1:50772] [client 2001:41d0:1004:be::1] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||paulshorrock.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "paulshorrock.com"] [uri "/wp-content/plugins/classic-editor/z3thv/\\xe2\\x80\\x9dhttps:/mycrochetpattern.com"] [unique_id "Z8fpBONOHNvNGsdr9ssC5wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
noxtec GmbH
2025-03-05 03:33:20
(1 year ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:1004:be::1 ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:1004:be::1 (FR/France/-)
show less
Bad Web Bot
Anonymous
2025-03-03 21:26:46
(1 year ago)
2001:41d0:1004:be::1 - - [03/Mar/2025:22:23:22 +0100] "GET /database/?c=aardrijkskunde;algemene-wete ...
show more
2001:41d0:1004:be::1 - - [03/Mar/2025:22:23:22 +0100] "GET /database/?c=aardrijkskunde;algemene-wetenschaptechniek;biologie;economie;geschiedenis;kunst;maatschappijleer;maatschappijwetenschappen;natuur-leven-en-technologie;natuurkunde/page/7/ HTTP/1.1" 404 24341 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
2001:41d0:1004:be::1 - - [03/Mar/2025:22:23:24 +0100] "GET /database/?c=aardrijkskunde;algemene-wetenschaptechniek;biologie;economie;geschiedenis;kunst;maatschappijleer;maatschappijwetenschappen;natuur-leven-en-technologie;natuurkunde/page/8/ HTTP/1.1" 404 24341 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
2001:41d0:1004:be::1 - - [03/Mar/2025:22:23:28 +0100] "GET /database/?c=aardrijkskunde;algemene-wetenschaptechniek;biologie;economie;geschiedenis;kunst;maatschappijleer;maatschappijwetenschappen;natuur-leven-en-technologie;natuurkunde;scheikunde/page/2/ HTTP/1.1" 404 24341 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com
...
show less
DDoS Attack
๐ฌ๐ง
Mendip_Defender
2025-03-03 03:56:01
(1 year ago)
2001:41d0:1004:be::1 - - [03/Mar/2025:03:55:58 +0000] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozill ...
show more
2001:41d0:1004:be::1 - - [03/Mar/2025:03:55:58 +0000] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
...
show less
Bad Web Bot
๐ญ๐ฐ
Mehmet_The_Script_Kiddie
2025-03-03 02:31:28
(1 year ago)
Disobey robots.txt. Suspicious web crawler.
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2025-03-01 12:20:08
(1 year ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ksol-hostmaster
2025-03-01 12:15:07
(1 year ago)
2025/03/01 13:15:06 [error] 60677#102798: *2095131 limiting requests, excess: 0.635 by zone "crawler ...
show more
2025/03/01 13:15:06 [error] 60677#102798: *2095131 limiting requests, excess: 0.635 by zone "crawler", client: 2001:41d0:1004:be::1, server: new.hondaforum.hu, request: "GET /do-not-scrape/ HTTP/1.1", host: "new.hondaforum.hu"
...
show less
Bad Web Bot
๐ฉ๐ช
DerLukas
2025-03-01 02:33:20
(1 year ago)
Port Scan
๐ซ๐ฎ
kumiko
2025-02-22 17:15:56
(1 year ago)
[2025-02-22 17:15:56] Known bad bot [Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)]
Bad Web Bot
Web App Attack