MAGIC
2025-03-22 18:06:40
(14 hours ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
Anonymous
2025-03-20 05:13:44
(3 days ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Mendip_Defender
2025-03-05 07:54:16
(2 weeks ago)
47.128.24.244 - - [05/Mar/2025:07:54:12 +0000] "GET /?nojs=1&page=3&t=1852 HTTP/1.0" 301 919 "-" "Mo ... show more 47.128.24.244 - - [05/Mar/2025:07:54:12 +0000] "GET /?nojs=1&page=3&t=1852 HTTP/1.0" 301 919 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )"
... show less
Bad Web Bot
backslash
2025-02-27 15:30:21
(3 weeks ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
hermawan
2025-02-24 10:12:21
(3 weeks ago)
[Mon Feb 24 17:09:16.815939 2025] [security2:error] [pid 5528:tid 140667300550336] [client 47.128.24 ... show more [Mon Feb 24 17:09:16.815939 2025] [security2:error] [pid 5528:tid 140667300550336] [client 47.128.24.244:12724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] ) request_line = GET /index.php/analisis-bulanan/4229-tingkat-ketersediaan-air-tanah/tingkat-ketersediaan-air-tanah-di-provinsi-jawa-timur/analisis-bulanan-tingkat-ketersediaan-air-tanah-di-provinsi-jawa-timur-tahun-2024/555560806-analisis-bulanan-tingkat-ketersediaan-air-tanah-bulan-februari-tahun-20..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/4229-tingkat-k
... show less
Hacking
Web App Attack
Séfora Srl
2025-02-21 05:00:20
(1 month ago)
Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache ... show more Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache-badbot jail show less
Bad Web Bot
hermawan
2025-02-18 13:17:53
(1 month ago)
[Tue Feb 18 20:15:53.110289 2025] [security2:error] [pid 687641:tid 140247675356864] [client 47.128. ... show more [Tue Feb 18 20:15:53.110289 2025] [security2:error] [pid 687641:tid 140247675356864] [client 47.128.24.244:64768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "165"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-all-categories/4083-klimatologi/infografis/infografis-klimatologi/infografis-dasarian/infografis-dasarian-tahun-2021/555558528-infografis-dasarian-informasi-iklim-jatim-update-31-januari-2021 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-categories/4083-klimatologi/infografis/infografis-klima
... show less
Hacking
Web App Attack
Anonymous
2025-02-10 16:31:07
(1 month ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2025-02-08 07:37:30
(1 month ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2025-02-07 03:41:48
(1 month ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2025-02-05 03:36:37
(1 month ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Mendip_Defender
2025-02-03 20:49:28
(1 month ago)
47.128.24.244 - - [03/Feb/2025:20:49:30 +0000] "GET /?%3Fs=7ff467dfc8365fffaaa01f343773add5 HTTP/1.0 ... show more 47.128.24.244 - - [03/Feb/2025:20:49:30 +0000] "GET /?%3Fs=7ff467dfc8365fffaaa01f343773add5 HTTP/1.0" 301 824 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )"
... show less
Bad Web Bot
backslash
2025-01-24 01:35:18
(1 month ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
Anonymous
2025-01-17 09:20:46
(2 months ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2025-01-15 08:52:19
(2 months ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH