๐ฉ๐ช
ghostwarriors
2025-02-18 11:50:03
(1 year ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ksol-hostmaster
2025-02-18 11:32:01
(1 year ago)
2025/02/18 12:32:00 [error] 93183#468816: *1999495 limiting requests, excess: 0.667 by zone "crawler ...
show more
2025/02/18 12:32:00 [error] 93183#468816: *1999495 limiting requests, excess: 0.667 by zone "crawler", client: 2001:41d0:1004:be::1, server: new.hondaforum.hu, request: "GET /do-not-scrape/ HTTP/1.1", host: "new.hondaforum.hu"
...
show less
Bad Web Bot
Anonymous
2025-02-18 06:28:03
(1 year ago)
Scenario: crowdsecurity/http-bad-user-agent
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2025-02-14 12:34:01
(1 year ago)
(mod_security) mod_security (id:210381) triggered by 2001:41d0:1004:be::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210381) triggered by 2001:41d0:1004:be::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 14 07:33:53.713253 2025] [security2:error] [pid 1983755:tid 1983755] [client 2001:41d0:1004:be::1:51682] [client 2001:41d0:1004:be::1] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||menafert.com|F|4"] [data "REQUEST_URI=/uploads/products/Advanced_Mg_7_4%_IDHA_TDS.pdf"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menafert.com"] [uri "/uploads/products/Advanced_Mg_7_4%_IDHA_TDS.pdf"] [unique_id "Z684MQsu2T75oXiFrl0nhgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
MarkGGN
2025-02-14 02:41:36
(1 year ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Bad Web Bot
Web App Attack
๐ฆ๐บ
MAGIC
2025-02-13 06:02:05
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐จ๐ฆ
Mediashaker
2025-02-11 13:09:55
(1 year ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:1004:be::1 ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 2001:41d0:1004:be::1 (FR/France/-)
show less
Bad Web Bot
Anonymous
2025-02-09 11:58:39
(1 year ago)
Scenario: crowdsecurity/http-bad-user-agent
Bad Web Bot
๐ฆ๐บ
MAGIC
2025-02-08 10:03:48
(1 year ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2025-02-07 07:57:00
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:41d0:1004:be::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:41d0:1004:be::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 07 02:56:55.106966 2025] [security2:error] [pid 11090:tid 11090] [client 2001:41d0:1004:be::1:45214] [client 2001:41d0:1004:be::1] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.kln.ne.jp|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kln.ne.jp"] [uri "/ann/gmail.com"] [unique_id "Z6W8xxlKFS7YKWnGk2qtvgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
MarkGGN
2025-01-29 05:49:46
(1 year ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Bad Web Bot
Web App Attack
๐ซ๐ท
Murazaki
2025-01-27 23:02:02
(1 year ago)
lemmy.balamb.fr 2001:41d0:1004:be::1 - - [27/Jan/2025:06:34:19 +0100] "GET /robots.txt HTTP/1.1" 200 ...
show more
lemmy.balamb.fr 2001:41d0:1004:be::1 - - [27/Jan/2025:06:34:19 +0100] "GET /robots.txt HTTP/1.1" 200 300 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" "172.22.0.22:80"
lemmy.balamb.fr 2001:41d0:1004:be::1 - - [27/Jan/2025:06:34:23 +0100] "GET /comment/71708 HTTP/1.1" 200 18099 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" "172.22.0.22:80"
lemmy.balamb.fr 2001:41d0:1004:be::1 - - [27/Jan/2025:06:34:28 +0100] "GET /comment/71735 HTTP/1.1" 200 17489 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" "172.22.0.22:80"
lemmy.balamb.fr 2001:41d0:1004:be::1 - - [27/Jan/2025:06:34:34 +0100] "GET /comment/717803 HTTP/1.1" 200 20505 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" "172.22.0.22:80"
lemmy.balamb.fr 2001:41d0:1004:be::1 - - [27/Jan/2025:06:34:39 +0100] "GET /comment/719257 HTTP/1.1" 200 18733 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" "172.22.0.22:80"
...
show less
Bad Web Bot
๐ฉ๐ช
ghostwarriors
2025-01-27 04:20:11
(1 year ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ksol-hostmaster
2025-01-27 03:57:53
(1 year ago)
2025/01/27 04:57:51 [error] 25021#454168: *1822621 limiting requests, excess: 0.664 by zone "crawler ...
show more
2025/01/27 04:57:51 [error] 25021#454168: *1822621 limiting requests, excess: 0.664 by zone "crawler", client: 2001:41d0:1004:be::1, server: new.hondaforum.hu, request: "GET /do-not-scrape/ HTTP/1.1", host: "new.hondaforum.hu"
...
show less
Bad Web Bot
๐ฉ๐ช
MarkGGN
2025-01-26 19:37:34
(1 year ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Bad Web Bot
Web App Attack