๐ฉ๐ช
ghostwarriors
2024-07-19 17:21:42
(2 years ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ksol-hostmaster
2024-07-19 17:12:22
(2 years ago)
2024/07/19 18:22:33 [error] 29074#102743: *16229078 limiting requests, excess: 0.658 by zone "crawle ...
show more
2024/07/19 18:22:33 [error] 29074#102743: *16229078 limiting requests, excess: 0.658 by zone "crawler", client: 2a03:2880:ff:b::face:b00c, server: git.ksol.io, request: "GET /karolyi/xapian-haystack/src/commit/7c00117043062f5ab3e9802d60c3a3c8cd90ce92/tests/xapian_backend.py HTTP/2.0", host: "git.ksol.io"
...
show less
SSH
๐ฌ๐ง
Mendip_Defender
2024-07-17 12:08:13
(2 years ago)
2a03:2880:ff:b::face:b00c - - [17/Jul/2024:13:08:23 +0100] "GET /picture.php/IC_10-08-2012_0007/tags ...
show more
2a03:2880:ff:b::face:b00c - - [17/Jul/2024:13:08:23 +0100] "GET /picture.php/IC_10-08-2012_0007/tags/135-day_2 HTTP/1.0" 200 3268 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
show less
Bad Web Bot
๐ฌ๐ง
Mendip_Defender
2024-07-15 06:29:11
(2 years ago)
2a03:2880:ff:b::face:b00c - - [15/Jul/2024:07:29:20 +0100] "GET /_data/i/galleries/2007/2007-10-07_- ...
show more
2a03:2880:ff:b::face:b00c - - [15/Jul/2024:07:29:20 +0100] "GET /_data/i/galleries/2007/2007-10-07_-_BSSA_Wessex_Alan_Brown_Time_Trial_at_Hanaham_Hills_Bristol/TT_07-10-2007_235-th.jpg HTTP/2.0" 200 16379 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2024-07-14 09:50:10
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a03:2880:ff:b::face:b00c (fwdproxy-prn-011.fbs ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:2880:ff:b::face:b00c (fwdproxy-prn-011.fbsv.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 14 05:50:05.384010 2024] [security2:error] [pid 29739] [client 2a03:2880:ff:b::face:b00c:47576] [client 2a03:2880:ff:b::face:b00c] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.angelabcomics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.angelabcomics.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZpOfTZRHwIaLmmUVjgs9sgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Mendip_Defender
2024-07-13 03:24:43
(2 years ago)
2a03:2880:ff:b::face:b00c - - [13/Jul/2024:04:24:52 +0100] "GET /_data/i/galleries/2007/2007-10-21_- ...
show more
2a03:2880:ff:b::face:b00c - - [13/Jul/2024:04:24:52 +0100] "GET /_data/i/galleries/2007/2007-10-21_-_WBR_Adult_Solo/Adult_Solo_WBR_21-10-07_0273-th.jpg HTTP/2.0" 200 19762 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
show less
Bad Web Bot
๐ฌ๐ง
Mendip_Defender
2024-07-11 03:23:12
(2 years ago)
2a03:2880:ff:b::face:b00c - - [11/Jul/2024:04:23:20 +0100] "GET /23_summer_orangejacket.jpg HTTP/1.0 ...
show more
2a03:2880:ff:b::face:b00c - - [11/Jul/2024:04:23:20 +0100] "GET /23_summer_orangejacket.jpg HTTP/1.0" 404 1581 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
show less
Bad Web Bot
๐ฌ๐ง
Mendip_Defender
2024-07-09 02:26:07
(2 years ago)
2a03:2880:ff:b::face:b00c - - [09/Jul/2024:03:26:13 +0100] "GET /picture.php/20200814_IC24_3562/tags ...
show more
2a03:2880:ff:b::face:b00c - - [09/Jul/2024:03:26:13 +0100] "GET /picture.php/20200814_IC24_3562/tags/9-track_day HTTP/1.0" 200 3316 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
show less
Bad Web Bot
๐ฌ๐ง
Mendip_Defender
2024-07-07 01:20:40
(2 years ago)
2a03:2880:ff:b::face:b00c - - [07/Jul/2024:02:20:46 +0100] "GET /_data/i/galleries/2015/20150827_Ixi ...
show more
2a03:2880:ff:b::face:b00c - - [07/Jul/2024:02:20:46 +0100] "GET /_data/i/galleries/2015/20150827_Ixion_at_Cadwell_2015/IC_20150828_2881-sq.JPG HTTP/1.0" 200 9370 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2024-07-05 17:19:37
(2 years ago)
(mod_security) mod_security (id:210381) triggered by 2a03:2880:ff:b::face:b00c (fwdproxy-prn-011.fbs ...
show more
(mod_security) mod_security (id:210381) triggered by 2a03:2880:ff:b::face:b00c (fwdproxy-prn-011.fbsv.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 05 13:19:31.614520 2024] [security2:error] [pid 3962:tid 47071451186944] [client 2a03:2880:ff:b::face:b00c:35740] [client 2a03:2880:ff:b::face:b00c] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||www.mentzlaw.com|F|4"] [data "REQUEST_URI=/louisianaweldingrodlawyer/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mentzlaw.com"] [uri "/louisianaweldingrodlawyer/%url%"] [unique_id "ZogrIzTA43H9kCaMJ5KyagAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Mendip_Defender
2024-07-04 22:07:23
(2 years ago)
2a03:2880:ff:b::face:b00c - - [04/Jul/2024:23:07:29 +0100] "GET /picture.php/20050714_IC2005_0894/ta ...
show more
2a03:2880:ff:b::face:b00c - - [04/Jul/2024:23:07:29 +0100] "GET /picture.php/20050714_IC2005_0894/tags/876-2005?action=rate HTTP/1.0" 200 3259 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
show less
Bad Web Bot
๐ฌ๐ง
Mendip_Defender
2024-07-02 14:59:30
(2 years ago)
2a03:2880:ff:b::face:b00c - - [02/Jul/2024:15:59:34 +0100] "GET /wp-content/uploads/2020/10/image-3- ...
show more
2a03:2880:ff:b::face:b00c - - [02/Jul/2024:15:59:34 +0100] "GET /wp-content/uploads/2020/10/image-3-355x1024.png HTTP/1.0" 200 791 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
show less
Bad Web Bot
๐ฌ๐ง
Mendip_Defender
2024-06-30 14:13:12
(2 years ago)
2a03:2880:ff:b::face:b00c - - [30/Jun/2024:15:13:16 +0100] "GET /galleries/2015/20150827_Ixion_at_Ca ...
show more
2a03:2880:ff:b::face:b00c - - [30/Jun/2024:15:13:16 +0100] "GET /galleries/2015/20150827_Ixion_at_Cadwell_2015/IC_20150828_2018.JPG HTTP/1.0" 200 61022 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2024-06-29 11:05:34
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:ff:b::face:b00c (fwdproxy-prn-011.fbs ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:ff:b::face:b00c (fwdproxy-prn-011.fbsv.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 29 07:05:29.297124 2024] [security2:error] [pid 8440] [client 2a03:2880:ff:b::face:b00c:49910] [client 2a03:2880:ff:b::face:b00c] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.civilwarzone.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "Zn_qeWev9oEWPmFW7a4kYQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Mendip_Defender
2024-06-28 10:28:02
(2 years ago)
2a03:2880:ff:b::face:b00c - - [28/Jun/2024:11:28:06 +0100] "GET /picture.php/IC_09-08-2012_0423/cate ...
show more
2a03:2880:ff:b::face:b00c - - [28/Jun/2024:11:28:06 +0100] "GET /picture.php/IC_09-08-2012_0423/category/75 HTTP/1.0" 200 3226 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
show less
Bad Web Bot