TPI-Abuse
2024-09-20 18:22:59
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 47.128.50.240 (ec2-47-128-50-240.ap-southeast-1 ... show more (mod_security) mod_security (id:210730) triggered by 47.128.50.240 (ec2-47-128-50-240.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 20 14:22:55.534207 2024] [security2:error] [pid 9857:tid 9857] [client 47.128.50.240:53372] [client 47.128.50.240] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Kendall/Thumbs.db"] [unique_id "Zu29fyz9ABLB7hxg-AhVSgAAACg"] show less
Brute-Force
Bad Web Bot
Web App Attack
hermawan
2024-09-16 11:00:26
(4 months ago)
[Mon Sep 16 13:58:37.602854 2024] [security2:error] [pid 653170:tid 134066630297280] [client 47.128. ... show more [Mon Sep 16 13:58:37.602854 2024] [security2:error] [pid 653170:tid 134066630297280] [client 47.128.50.240:23674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "39"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] ) request_line = GET /index.php/prakiraan-bulanan/3874-prakiraan-sifat-hujan-bulanan/prakiraan-sifat-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-sifat-hujan-bulanan-di-propinsi-jawa-timur-tahun-2018/555556498-prakiraan-sifat-hujan-bulan-juli-tahun-2018-jawa-timur-update-dari-analisis-bulan-mei-tahu..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/3874-prakiraa
... show less
Hacking
Web App Attack
Mendip_Defender
2024-09-15 00:28:08
(4 months ago)
47.128.50.240 - - [15/Sep/2024:01:28:16 +0100] "GET /robots.txt HTTP/1.0" 404 1047 "-" "Mozilla/5.0 ... show more 47.128.50.240 - - [15/Sep/2024:01:28:16 +0100] "GET /robots.txt HTTP/1.0" 404 1047 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; [email protected] )"
... show less
Bad Web Bot
Anonymous
2024-09-06 09:29:13
(4 months ago)
Excessive crawling/scraping
Hacking
Brute-Force
bigorre.org
2024-09-04 20:58:56
(4 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
rtbh.com.tr
2024-09-03 20:55:00
(4 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
rtbh.com.tr
2024-09-02 20:55:02
(4 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
ghostwarriors
2024-09-02 05:50:16
(4 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
ksol-hostmaster
2024-09-02 05:37:03
(4 months ago)
2024/09/02 07:37:02 [error] 34073#714142: *5230188 limiting requests, excess: 0.175 by zone "crawler ... show more 2024/09/02 07:37:02 [error] 34073#714142: *5230188 limiting requests, excess: 0.175 by zone "crawler", client: 47.128.50.240, server: crxforum.ksol.io, request: "GET /showTopic.php?first=125400&offset=50&seed=66d22757296bc&topicId=5 HTTP/2.0", host: "crxforum.ksol.io"
... show less
Bad Web Bot
Melle
2024-09-01 23:19:35
(4 months ago)
Unauthorized connection attempt detected from IP address 47.128.50.240
Bad Web Bot
rtbh.com.tr
2024-09-01 12:55:04
(4 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
rtbh.com.tr
2024-08-28 20:55:11
(4 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
rtbh.com.tr
2024-08-27 20:55:13
(4 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
bigorre.org
2024-08-26 20:26:39
(4 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
ghostwarriors
2024-08-26 11:20:14
(4 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack