Mendip_Defender
2025-03-10 07:29:10
(6 days ago)
47.128.18.99 - - [10/Mar/2025:07:29:07 +0000] "GET /?%3Fs=acad925ed071bd92c95ee942f0b634a8 HTTP/1.0" ... show more 47.128.18.99 - - [10/Mar/2025:07:29:07 +0000] "GET /?%3Fs=acad925ed071bd92c95ee942f0b634a8 HTTP/1.0" 200 12379 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )"
... show less
Bad Web Bot
hermawan
2025-03-06 02:49:36
(1 week ago)
[Thu Mar 06 09:48:51.066474 2025] [security2:error] [pid 320708:tid 139690634065600] [client 47.128. ... show more [Thu Mar 06 09:48:51.066474 2025] [security2:error] [pid 320708:tid 139690634065600] [client 47.128.18.99:39692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] ) request_line = GET /index.php/profil/arsip-artikel?catid=487&id=812%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-24-30-nopember-2015&start=70 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "Z8kNE8Qqpb3jNjjmr3_vKwAA4Aw"] [staklim-malang.info] [staklim-malang.info] top=[320721] [I8+8iytnD4A] [Z8kNE8Qqpb3jNjjmr3_vK
... show less
Hacking
Web App Attack
Séfora Srl
2025-03-03 20:00:19
(1 week ago)
Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache ... show more Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache-badbot jail show less
Bad Web Bot
MAGIC
2025-02-25 00:03:24
(2 weeks ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
backslash
2025-02-24 14:40:14
(2 weeks ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
Josh S.
2025-02-22 00:15:02
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
ASN: 16509 (AMAZO ... show more Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
ASN: 16509 (AMAZON-02)
Protocol: HTTP/2 (GET method)
Zone: git.joshseveros.cloud
Timestamp: 2025-02-21T22:12:46Z
UA: Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36
If this was a mistake contact me: [email protected] show less
Bad Web Bot
Anonymous
2025-02-12 05:21:04
(1 month ago)
Excessive crawling/scraping
Hacking
Brute-Force
Séfora Srl
2025-02-11 10:20:08
(1 month ago)
Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache ... show more Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache-badbot jail show less
Bad Web Bot
Anonymous
2025-02-10 09:39:17
(1 month ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2025-02-08 14:39:10
(1 month ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Mendip_Defender
2025-02-08 01:35:41
(1 month ago)
47.128.18.99 - - [08/Feb/2025:01:35:40 +0000] "GET /?t=5836&goto=nextoldest HTTP/1.0" 301 809 "-" "M ... show more 47.128.18.99 - - [08/Feb/2025:01:35:40 +0000] "GET /?t=5836&goto=nextoldest HTTP/1.0" 301 809 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )"
... show less
Bad Web Bot
MAGIC
2025-02-07 02:09:49
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
Anonymous
2025-02-05 03:03:35
(1 month ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2025-01-31 03:39:22
(1 month ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2025-01-27 06:33:53
(1 month ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH