🇹🇷
selahattinalan
2024-10-17 13:29:47
UTC ·
(2 years ago)
47.128.26.55 - - [17/Oct/2024:16:29:47 +0300] "GET /index.php?limit=25&order=DESC&route=product%2Fsearch&sort=p.price&tag=29.6676.00%20%20%20-%20%20Bottom%20Clutch%20Centre HTTP/1.1" 301 747 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (K ...
show more
47.128.26.55 - - [17/Oct/2024:16:29:47 +0300] "GET /index.php?limit=25&order=DESC&route=product%2Fsearch&sort=p.price&tag=29.6676.00%20%20%20-%20%20Bottom%20Clutch%20Centre HTTP/1.1" 301 747 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )"
show less
Brute-Force
🇦🇺
MAGIC
2024-10-17 08:03:52
UTC ·
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇹🇷
rtbh.com.tr
2024-10-15 20:53:46
UTC ·
(2 years ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2024-10-14 20:53:43
UTC ·
(2 years ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪
ghostwarriors
2024-10-13 10:50:05
UTC ·
(2 years ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2024-10-13 10:28:37
UTC ·
(2 years ago)
2024/10/13 12:28:36 [error] 57466#102265: *5513326 limiting requests, excess: 0.125 by zone "crawler", client: 47.128.26.55, server: crxforum.ksol.io, request: "GET /showTopic.php?first=750&offset=50&seed=670864660db05&topicId=526 HTTP/2.0", host: "c ...
show more
2024/10/13 12:28:36 [error] 57466#102265: *5513326 limiting requests, excess: 0.125 by zone "crawler", client: 47.128.26.55, server: crxforum.ksol.io, request: "GET /showTopic.php?first=750&offset=50&seed=670864660db05&topicId=526 HTTP/2.0", host: "crxforum.ksol.io"
...
show less
Bad Web Bot
2024-10-12 07:16:04
UTC ·
(2 years ago)
Excessive crawling/scraping
Hacking
Brute-Force
🇹🇷
rtbh.com.tr
2024-09-30 20:54:09
UTC ·
(2 years ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪
ghostwarriors
2024-09-28 19:50:11
UTC ·
(2 years ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2024-09-28 19:29:08
UTC ·
(2 years ago)
2024/09/28 21:29:07 [error] 57658#444284: *323234 limiting requests, excess: 0.126 by zone "crawler", client: 47.128.26.55, server: crxforum.ksol.io, request: "GET /showTopic.php?first=126000&offset=50&seed=66f544548dce9&topicId=5 HTTP/2.0", host: "c ...
show more
2024/09/28 21:29:07 [error] 57658#444284: *323234 limiting requests, excess: 0.126 by zone "crawler", client: 47.128.26.55, server: crxforum.ksol.io, request: "GET /showTopic.php?first=126000&offset=50&seed=66f544548dce9&topicId=5 HTTP/2.0", host: "crxforum.ksol.io"
...
show less
Bad Web Bot
🇦🇺
clapper
2024-09-23 09:03:11
UTC ·
(2 years ago)
(mod_security) mod_security (id:980001) triggered by 47.128.26.55 (SG/Singapore/ec2-47-128-26-55.ap-southeast-1.compute.amazonaws.com): 5 in the last 3600 secs; ID: Dan
Brute-Force
Bad Web Bot
🇮🇪
Jim Keir
2024-09-21 02:12:31
UTC ·
(2 years ago)
2024-09-21 02:12:29 47.128.26.55 Bad bot, blocking Mozilla/5.0
Bad Web Bot
🇺🇸
TPI-Abuse
2024-09-19 17:11:45
UTC ·
(2 years ago)
(mod_security) mod_security (id:243420) triggered by 47.128.26.55 (ec2-47-128-26-55.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 19 13:11:39.051279 2024] [security2:error] [ ...
show more
(mod_security) mod_security (id:243420) triggered by 47.128.26.55 (ec2-47-128-26-55.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 19 13:11:39.051279 2024] [security2:error] [pid 30438:tid 30566] [client 47.128.26.55:16530] [client 47.128.26.55] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:/upload/2020/03/06/20200306204004-7ad39f1b-xl.jpg" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||www.ajbruner.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.ajbruner.com"] [uri "/ct/artlib/i.php"] [unique_id "ZuxbSvP-sNau54d2tdk5RAAAAM0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-09-15 18:11:00
UTC ·
(2 years ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇮🇩
hermawan
2024-09-12 13:30:50
UTC ·
(2 years ago)
[Thu Sep 12 17:19:31.397108 2024] [security2:error] [pid 294765:tid 127651121465024] [client 47.128.26.55:30496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/corerule ...
show more
[Thu Sep 12 17:19:31.397108 2024] [security2:error] [pid 294765:tid 127651121465024] [client 47.128.26.55:30496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "39"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] ) request_line = GET /index.php/profil/meteorologi/list-all-categories/4216-klimatologi/analisis-klimatologi/monitoring-dan-prakiraan-curah-hujan-dasarian-di-provinsi-jawa-timur/monitoring-dan-prakiraan-curah-hujan-dasarian-di-provinsi-jawa-timur-tahun-2024/555561316-monitoring-dan-prakiraan-curah-huj..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-cate
...
show less
Hacking
Web App Attack
