🇳🇱
DrLex0
2026-07-31 02:53:08
(1 month ago)
Suspect crawler/scraper using obvious fake user agent
52.5.231.217 443 - [31/Jul/2026:02:53:08 +000 ...
show more
Suspect crawler/scraper using obvious fake user agent
52.5.231.217 443 - [31/Jul/2026:02:53:08 +0000] "GET [redacted] HTTP/1.1" 301 5520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) CurseForge/1.276.2-25131 Chrome/132.0.6834.210 Electron/34.3.3 Safari/537.36"
52.5.231.217 443 - [31/Jul/2026:02:53:08 +0000] "GET [redacted] HTTP/1.1" 503 4225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) CurseForge/1.276.2-25131 Chrome/132.0.6834.210 Electron/34.3.3 Safari/537.36"
show less
Bad Web Bot
🇺🇸
TheJimmo
2026-07-22 04:56:16
(1 month ago)
52.5.231.217 52.5.231.217 - - [22/Jul/2026:04:56:15 +0000] "GET /index.php?app=core&module=system&co ...
show more
52.5.231.217 52.5.231.217 - - [22/Jul/2026:04:56:15 +0000] "GET /index.php?app=core&module=system&controller=ajax&do=attachmentInfo&csrfKey=575e6a94ce5778fc2b73bb067cad6c62&attachIDs%5B54863%5D=true HTTP/1.1" 403 61 "https://foreverpontiac.com/forums/topic/23685-2027-forever-pontiac-calendar-contest-enter-here/page/4" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
52.5.231.217 52.5.231.217 - - [22/Jul/2026:04:56:15 +0000] "GET /index.php?app=core&module=system&controller=ajax&do=attachmentInfo&csrfKey=575e6a94ce5778fc2b73bb067cad6c62&attachIDs%5B54864%5D=true HTTP/1.1" 403 61 "https://foreverpontiac.com/forums/topic/23685-2027-forever-pontiac-calendar-contest-enter-here/page/4" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
52.5.231.217 52.5.231.217 - - [22/Jul/2026:04:56:15 +0000] "GET /index.php?app=core&module=system&controller=a
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TheJimmo
2026-07-22 03:56:04
(1 month ago)
52.5.231.217 52.5.231.217 - - [22/Jul/2026:03:56:03 +0000] "GET /index.php?app=core&module=system&co ...
show more
52.5.231.217 52.5.231.217 - - [22/Jul/2026:03:56:03 +0000] "GET /index.php?app=core&module=system&controller=ajax&do=attachmentInfo&csrfKey=61b41374942a054da2b2d98756ce6aa0&attachIDs%5B20842%5D=true&attachIDs%5B20844%5D=true HTTP/1.1" 403 61 "https://foreverpontiac.com/forums/topic/18214-1964-bonneville-convertable-restore/page/6" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
52.5.231.217 52.5.231.217 - - [22/Jul/2026:03:56:03 +0000] "GET /index.php?app=core&module=system&controller=ajax&do=attachmentInfo&csrfKey=61b41374942a054da2b2d98756ce6aa0&attachIDs%5B20792%5D=true HTTP/1.1" 403 61 "https://foreverpontiac.com/forums/topic/18214-1964-bonneville-convertable-restore/page/6" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
52.5.231.217 52.5.231.217 - - [22/Jul/2026:03:56:03 +0000] "GET /index.php?app=core&module=system&controller=a
...
show less
Bad Web Bot
Web App Attack
🇬🇧
Oakley
2026-06-24 03:20:32
(2 months ago)
(antiscrape_rule) Web application abuse detected 52.5.231.217 (US/United States/ec2-52-5-231-217.com ...
show more
(antiscrape_rule) Web application abuse detected 52.5.231.217 (US/United States/ec2-52-5-231-217.compute-1.amazonaws.com): 5 in the last 900 secs
show less
Hacking
🇺🇸
TheJimmo
2026-06-14 04:30:51
(2 months ago)
52.5.231.217 52.5.231.217 - - [14/Jun/2026:04:14:01 +0000] "GET /index.php?app=core&module=system&co ...
show more
52.5.231.217 52.5.231.217 - - [14/Jun/2026:04:14:01 +0000] "GET /index.php?app=core&module=system&controller=ajax&do=attachmentInfo&csrfKey=0d4d4582f3e536ec6d7f91cbb95378a5&attachIDs%5B53164%5D=true HTTP/1.1" 403 61 "https://foreverpontiac.com/forums/topic/23505-hot-rod-power-tour-2026/page/2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
52.5.231.217 52.5.231.217 - - [14/Jun/2026:04:14:01 +0000] "GET /index.php?app=core&module=system&controller=ajax&do=attachmentInfo&csrfKey=0d4d4582f3e536ec6d7f91cbb95378a5&attachIDs%5B53130%5D=true&attachIDs%5B53131%5D=true&attachIDs%5B53132%5D=true&attachIDs%5B53133%5D=true&attachIDs%5B53134%5D=true&attachIDs%5B53135%5D=true&attachIDs%5B53136%5D=true&attachIDs%5B53137%5D=true&attachIDs%5B53138%5D=true&attachIDs%5B53139%5D=true&attachIDs%5B53140%5D=true&attachIDs%5B53141%5D=true&attachIDs%5B53142%5D=true HTTP/1.1" 403 61 "https://foreverpontiac.com/forums/topic/23505-hot-rod-pow
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TheJimmo
2026-06-14 03:17:50
(2 months ago)
52.5.231.217 52.5.231.217 - - [14/Jun/2026:03:17:50 +0000] "GET /index.php?app=core&module=system&co ...
show more
52.5.231.217 52.5.231.217 - - [14/Jun/2026:03:17:50 +0000] "GET /index.php?app=core&module=system&controller=ajax&do=attachmentInfo&csrfKey=84d70b171e3c8cf41f7acca2cc7c883e&attachIDs%5B52876%5D=true HTTP/1.1" 403 61 "https://foreverpontiac.com/forums/topic/23685-2027-forever-pontiac-calendar-contest-enter-here" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
52.5.231.217 52.5.231.217 - - [14/Jun/2026:03:17:50 +0000] "GET /index.php?app=core&module=system&controller=ajax&do=attachmentInfo&csrfKey=84d70b171e3c8cf41f7acca2cc7c883e&attachIDs%5B52877%5D=true&attachIDs%5B52878%5D=true HTTP/1.1" 403 61 "https://foreverpontiac.com/forums/topic/23685-2027-forever-pontiac-calendar-contest-enter-here" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
52.5.231.217 52.5.231.217 - - [14/Jun/2026:03:17:50 +0000] "GET /index.php?app=core&module=system&controller=a
...
show less
Bad Web Bot
Web App Attack
🇳🇱
DrLex0
2026-06-09 03:39:56
(3 months ago)
Suspicious crawler with obviously fake user agent string
52.5.231.217 443 - [09/Jun/2026:03:39:56 + ...
show more
Suspicious crawler with obviously fake user agent string
52.5.231.217 443 - [09/Jun/2026:03:39:56 +0000] "GET [redacted] HTTP/1.1" 503 4207 "[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) CurseForge/1.276.2-25131 Chrome/132.0.6834.210 Electron/34.3.3 Safari/537.36"
52.5.231.217 443 - [09/Jun/2026:03:39:56 +0000] "GET [redacted] HTTP/1.1" 503 4207 "[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) CurseForge/1.276.2-25131 Chrome/132.0.6834.210 Electron/34.3.3 Safari/537.36"
52.5.231.217 443 - [09/Jun/2026:03:39:56 +0000] "GET [redacted] HTTP/1.1" 503 7194 "[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) CurseForge/1.276.2-25131 Chrome/132.0.6834.210 Electron/34.3.3 Safari/537.36"
show less
Bad Web Bot
🇬🇧
Oakley
2026-06-09 02:54:02
(3 months ago)
(antiscrape_rule) Web application abuse detected 52.5.231.217 (US/United States/ec2-52-5-231-217.com ...
show more
(antiscrape_rule) Web application abuse detected 52.5.231.217 (US/United States/ec2-52-5-231-217.compute-1.amazonaws.com): 5 in the last 900 secs
show less
Hacking
🇬🇧
Oakley
2026-05-31 02:38:45
(3 months ago)
(antiscrape_rule) Web application abuse detected 52.5.231.217 (US/United States/ec2-52-5-231-217.com ...
show more
(antiscrape_rule) Web application abuse detected 52.5.231.217 (US/United States/ec2-52-5-231-217.compute-1.amazonaws.com): 5 in the last 900 secs
show less
Hacking
🇬🇧
Oakley
2026-05-14 04:18:40
(3 months ago)
(mod_security) mod_security (id:900209) triggered by 52.5.231.217 (US/United States/ec2-52-5-231-217 ...
show more
(mod_security) mod_security (id:900209) triggered by 52.5.231.217 (US/United States/ec2-52-5-231-217.compute-1.amazonaws.com): 5 in the last 900 secs
show less
Web App Attack
Hacking
🇺🇸
TheJimmo
2026-04-27 04:28:56
(4 months ago)
52.5.231.217 52.5.231.217 - - [27/Apr/2026:04:28:55 +0000] "GET /index.php?app=core&module=system&co ...
show more
52.5.231.217 52.5.231.217 - - [27/Apr/2026:04:28:55 +0000] "GET /index.php?app=core&module=system&controller=ajax&do=attachmentInfo&csrfKey=6667651294e74f12e70c3ca645ebc540&attachIDs%5B49948%5D=true HTTP/1.1" 403 61 "https://foreverpontiac.com/forums/topic/23535-potm-nominations-february-2026" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
52.5.231.217 52.5.231.217 - - [27/Apr/2026:04:28:55 +0000] "GET /index.php?app=core&module=system&controller=ajax&do=attachmentInfo&csrfKey=6667651294e74f12e70c3ca645ebc540&attachIDs%5B49953%5D=true HTTP/1.1" 403 61 "https://foreverpontiac.com/forums/topic/23535-potm-nominations-february-2026" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
52.5.231.217 52.5.231.217 - - [27/Apr/2026:04:28:55 +0000] "GET /index.php?app=core&module=system&controller=ajax&do=attachmentInfo&csrfKey=6667651294e74f12e70c3ca645ebc540
...
show less
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-04-22 09:00:04
(4 months ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇨🇦
SSH-Admin
2026-04-22 04:36:04
(4 months ago)
Probing for Exploits on ns124
Exploited Host
Web App Attack
🇫🇷
bigorre.org
2026-04-19 04:13:00
(4 months ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇳🇱
DrLex0
2026-04-19 03:10:53
(4 months ago)
Suspicious crawling with obvious fake user agent
52.5.231.217 443 - [19/Apr/2026:03:10:53 +0000] "G ...
show more
Suspicious crawling with obvious fake user agent
52.5.231.217 443 - [19/Apr/2026:03:10:53 +0000] "GET [redacted] HTTP/1.1" 503 7003 "[redacted]" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
52.5.231.217 443 - [19/Apr/2026:03:10:53 +0000] "GET [redacted] HTTP/1.1" 503 7003 "[redacted]" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
52.5.231.217 443 - [19/Apr/2026:03:10:53 +0000] "GET [redacted] HTTP/1.1" 503 4016 "[redacted]" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
52.5.231.217 443 - [19/Apr/2026:03:10:53 +0000] "GET [redacted] HTTP/1.1" 503 7003 "[redacted]" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
show less
Bad Web Bot