These were the rules in the error logs at fastcomet:
2024-05-21 13:52:59.503698 [NOTICE] [3016206] [T7] [47.128.125.29:51780:HTTP2-1#APVH_auxilic.com:443] [MODSEC] mod_security rule [id "77350374"] at [/etc/apache2/conf.d/modsec_vendor_configs/imunify360-minimal-litespeed/010_i360_otherapps.conf:34] triggered!
[Tue May 21 13:52:59.503008 2024] [error] [client 47.128.125.29] ModSecurity: Access denied with code 403, [Rule: 'REQUEST_HEADERS:User-Agent' '@contains bytespider'] [id "77350374"] [msg "IM360 WAF: Scan attempt by malicious crawler||UA:Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36||T:LITESPEED||"] [severity "CRITICAL"] [tag "service_im360"] [hostname "www.auxilic.com"] [uri "/services/strategic-services"] [unique_id "VDpgRNDraMHPY5xVMzH29v@m"]
2024-05-21 13:52:59.503698 [NOTICE] [3016206] [T7] [47.128.125.29:51780:HTTP2-1#APVH_auxilic.com:443] [MODSEC] mod_security rule [id "77350374"] at [/etc/apache2/conf.d/modsec_vendor_configs/imunify360-minimal-litespeed/010_i360_otherapps.conf:34] triggered!
[Tue May 21 13:52:59.503008 2024] [error] [client 47.128.125.29] ModSecurity: Access denied with code 403, [Rule: 'REQUEST_HEADERS:User-Agent' '@contains bytespider'] [id "77350374"] [msg "IM360 WAF: Scan attempt by malicious crawler||UA:Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36||T:LITESPEED||"] [severity "CRITICAL"] [tag "service_im360"] [hostname "www.auxilic.com"] [uri "/services/strategic-services"] [unique_id "VDpgRNDraMHPY5xVMzH29v@m"]
Statistics: Posted by modernmagic — Wed May 22, 2024 11:41 pm