hermawan
2024-11-06 14:09:47
(23 hours ago)
[Wed Nov 06 17:01:19.848050 2024] [security2:error] [pid 232261:tid 123767908992704] [client 47.128. ... show more [Wed Nov 06 17:01:19.848050 2024] [security2:error] [pid 232261:tid 123767908992704] [client 47.128.118.222:44206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.7.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "59"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] ) request_line = GET /index.php/profil/arsip-artikel?catid=487&id=954%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-12-18-april-2016&start=20 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "Zys-bx88vYNpKt9rrpwWvgACc04"] [staklim-malang.info] [staklim-malang.info] top=[232340] [IcpymePeIrM] [Zys-bx88vYNpKt9rrpwWvgAC
... show less
Hacking
Web App Attack
Anonymous
2024-11-06 11:29:48
(1 day ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
MAGIC
2024-11-05 07:02:04
(2 days ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
Anonymous
2024-11-02 16:31:57
(4 days ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
TPI-Abuse
2024-11-02 15:07:57
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 47.128.118.222 (ec2-47-128-118-222.ap-southeast ... show more (mod_security) mod_security (id:210730) triggered by 47.128.118.222 (ec2-47-128-118-222.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 02 11:07:53.203221 2024] [security2:error] [pid 18709:tid 18820] [client 47.128.118.222:59124] [client 47.128.118.222] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.billpratt.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.billpratt.com"] [uri "/4corner/WS_FTP.LOG"] [unique_id "ZyZAScHXzfP30XZ_JxTQ4AAAANE"] show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2024-10-31 03:31:05
(1 week ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
MAGIC
2024-10-30 13:11:30
(1 week ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
MAGIC
2024-10-27 08:04:55
(1 week ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
hermawan
2024-10-20 22:15:46
(2 weeks ago)
[Mon Oct 21 01:43:43.147975 2024] [security2:error] [pid 99144:tid 133778798282432] [client 47.128.1 ... show more [Mon Oct 21 01:43:43.147975 2024] [security2:error] [pid 99144:tid 133778798282432] [client 47.128.118.222:43106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.7.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "39"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] ) request_line = GET /index.php/profil/arsip-artikel?catid=479&id=866%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-januari-1-pebruari-2016&start=30 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "ZxVPX2z3eYNeLzFVByqMhgAAoBE"] [staklim-malang.info] [staklim-malang.info] top=[99162] [E7Fa6lTcpQ0] [ZxVPX2z3eYNeLzFV
... show less
Hacking
Web App Attack
MAGIC
2024-10-19 03:08:03
(2 weeks ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
MAGIC
2024-10-18 09:03:20
(2 weeks ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
MAGIC
2024-10-17 15:11:24
(2 weeks ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
Anonymous
2024-10-15 21:57:02
(3 weeks ago)
Malicious activity detected
Hacking
Web App Attack
hermawan
2024-10-14 10:17:21
(3 weeks ago)
[Mon Oct 14 07:40:16.053255 2024] [security2:error] [pid 208519:tid 131553518683840] [client 47.128. ... show more [Mon Oct 14 07:40:16.053255 2024] [security2:error] [pid 208519:tid 131553518683840] [client 47.128.118.222:26900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.7.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "39"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] ) request_line = GET /index.php/profil/arsip-artikel?catid=479&id=1170%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-11-17-oktober-2016&start=190 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "ZwxocB9NAtqdnGLVBWl65wABSiM"] [staklim-malang.info] [staklim-malang.info] top=[208555] [TryUFO1JWjs] [ZwxocB9NAtqdnGLVBWl6
... show less
Hacking
Web App Attack
Anonymous
2024-10-12 10:28:33
(3 weeks ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH