Anonymous
2025-12-16 05:17:59
(10 months ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
๐ฆ๐ท
RocketEmi
2025-11-29 07:01:14
(10 months ago)
Repeated access attempts from blocked IP after being denied. Behavior consistent with brute-force or ...
show more
Repeated access attempts from blocked IP after being denied. Behavior consistent with brute-force or persistent unauthorized probing.
show less
Hacking
๐บ๐ธ
TPI-Abuse
2025-11-17 15:31:00
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.28.64 (ec2-47-128-28-64.ap-southeast-1.c ...
show more
(mod_security) mod_security (id:210730) triggered by 47.128.28.64 (ec2-47-128-28-64.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 17 10:30:54.360249 2025] [security2:error] [pid 13027:tid 13027] [client 47.128.28.64:12346] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||med-engineering.com|F|2"] [data ".uwzo.med-engineering.com.dnc.vb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/kcj.uwzo.med-engineering.com.dnc.vb"] [unique_id "aRs_rlQRr-_HdzosUiIAUgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
xmission.com
2025-11-17 09:03:27
(11 months ago)
47.128.28.64 - - [16/Nov/2025:23:25:35 -0700] "GET /category/nubbin/page/93/doocecom.uoycbnb4-liquid ...
show more
47.128.28.64 - - [16/Nov/2025:23:25:35 -0700] "GET /category/nubbin/page/93/doocecom.uoycbnb4-liquidwebsites.com/archives/mastheads/?page=49 HTTP/2.0" 301 162 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36"
47.128.28.64 - - [16/Nov/2025:23:25:35 -0700] "GET /category/nubbin/page/93/dooce.com/archives/mastheads/ HTTP/2.0" 200 7536 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36"
47.128.28.64 - - [16/Nov/2025:23:25:36 -0700] "GET /wp-content/uploads/2015/04/masthead.jpg HTTP/2.0" 206 500 "https://dooce.com/category/nubbin/page/93/dooce.com/archives/mastheads/" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36"
47.128.28.64 - - [17/Nov/2025:02:03:26 -0700] "GET /category/photos/daily-photo/page/786/?page=181 HTTP/2.0
...
show less
Bad Web Bot
๐ฆ๐ท
RocketEmi
2025-11-03 09:33:44
(11 months ago)
Automated web crawling detected: high request rate, scraping multiple pages. Behavior consistent wit ...
show more
Automated web crawling detected: high request rate, scraping multiple pages. Behavior consistent with Bad Web Bot.
show less
Bad Web Bot
๐ช๐ธ
masterguru
2025-11-02 13:20:27
(11 months ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122)
show less
Bad Web Bot
Anonymous
2025-10-17 02:25:52
(1 year ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐บ๐ธ
xmission.com
2025-10-14 15:42:46
(1 year ago)
47.128.28.64 - - [14/Oct/2025:09:42:44 -0600] "GET /related/listening/page/154/?page=115 HTTP/2.0" 2 ...
show more
47.128.28.64 - - [14/Oct/2025:09:42:44 -0600] "GET /related/listening/page/154/?page=115 HTTP/2.0" 200 10737 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )"
47.128.28.64 - - [14/Oct/2025:09:42:44 -0600] "GET /wp-content/uploads/2012/07/385.jpg HTTP/2.0" 206 500 "https://dooce.com/related/listening/page/154/?page=115" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )"
47.128.28.64 - - [14/Oct/2025:09:42:45 -0600] "GET /photos/leta/385.jpg HTTP/2.0" 404 146 "https://dooce.com/related/listening/page/154/?page=115" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )"
47.128.28.64 - - [14/Oct/2025:09:42:45 -0600] "GET /photos/leta/381.jpg HTTP/2.0" 404 146 "https://dooce.com/related/listenin
...
show less
Bad Web Bot
Anonymous
2025-09-23 23:43:17
(1 year ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2025-09-22 15:40:19
(1 year ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2025-09-17 10:08:03
(1 year ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐ซ๐ท
bigorre.org
2025-09-14 15:31:13
(1 year ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
Anonymous
2025-09-10 03:53:04
(1 year ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐ซ๐ท
bigorre.org
2025-09-02 13:03:50
(1 year ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
Anonymous
2025-08-26 14:49:23
(1 year ago)
Ports: 80,443; Direction: 1; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH