๐ฉ๐ช
FeG Deutschland
2025-11-18 11:44:43
(10 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
๐ฆ๐บ
MAGIC
2025-11-17 01:26:06
(10 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ฎ๐ฉ
hermawan
2025-11-15 08:55:01
(10 months ago)
[Sat Nov 15 15:54:34.310668 2025] [security2:error] [pid 716411:tid 140212958029504] [client 172.178 ...
show more
[Sat Nov 15 15:54:34.310668 2025] [security2:error] [pid 716411:tid 140212958029504] [client 172.178.141.113:20792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561125-prakiraan-bulanan-curah-hujan-di-kota-kabupaten-madiun-untuk-6-bulan-ke-depan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561125-prakiraan-bulanan-curah-hujan-di-kota-kabupaten-madiun-untuk-6-bulan-ke-depan"]
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-13 04:20:13
(10 months ago)
[Thu Nov 13 11:17:41.576244 2025] [security2:error] [pid 912233:tid 140633575511744] [client 172.178 ...
show more
[Thu Nov 13 11:17:41.576244 2025] [security2:error] [pid 912233:tid 140633575511744] [client 172.178.141.113:30886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562275-prediksi-bulanan-curah-hujan-bulan-november-tahun-2025-update-dari-analisis-bulan-juli-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562275-prediksi-bulanan-curah-hujan-bulan-november-tahun-2025-update-dari-anali
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-11 15:47:21
(10 months ago)
[Tue Nov 11 22:43:46.672199 2025] [security2:error] [pid 282977:tid 139672398300864] [client 172.178 ...
show more
[Tue Nov 11 22:43:46.672199 2025] [security2:error] [pid 282977:tid 139672398300864] [client 172.178.141.113:34807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/"] [unique_id "aRNZstfAfWK8UZ1h6eVZ0AADmAc"] [staklim-malang.info] [staklim-malang.info] top=[282985] [U5lrg5NVjCc] [aRNZstfAfWK8UZ1h6eVZ0AADmAc] keep_alive=[1] [2025-11-11 22:43:46.672203] [R:aRNZstfAfWK8UZ1h6eVZ0AADmAc] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'staklim-malang.info'
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-10 13:02:24
(10 months ago)
[Mon Nov 10 19:45:59.483047 2025] [security2:error] [pid 29042:tid 140246734137024] [client 172.178. ...
show more
[Mon Nov 10 19:45:59.483047 2025] [security2:error] [pid 29042:tid 140246734137024] [client 172.178.141.113:4467] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /b/bulanansurabaya.pdf HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/b/bulanansurabaya.pdf"] [unique_id "aRHeh9IQiQMXCcYuy2ZHqwADigE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[29044] [bLnD6Txl8sk] [aRHeh9IQiQMXCcYuy2ZHqwADigE] keep_alive=[1] [2025-11-10 19:45:59.483054] [R:aRHeh9IQiQMXCcYuy2ZHqwADigE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-10 00:20:27
(10 months ago)
[Mon Nov 10 07:20:04.549753 2025] [security2:error] [pid 1776406:tid 140440465528512] [client 172.17 ...
show more
[Mon Nov 10 07:20:04.549753 2025] [security2:error] [pid 1776406:tid 140440465528512] [client 172.178.141.113:39463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aREvtFaxeJcyQlEZI32HlAADjwk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1776416] [5ewofnJg8xI] [aREvtFaxeJcyQlEZI32HlAADjwk] keep_alive=[1] [2025-11-10 07:20:04.549764] [R:aREvtFaxeJcyQlEZI32HlAADjwk] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'sta
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-08 07:36:29
(10 months ago)
[Sat Nov 08 14:34:43.487233 2025] [security2:error] [pid 858623:tid 140251465987776] [client 172.178 ...
show more
[Sat Nov 08 14:34:43.487233 2025] [security2:error] [pid 858623:tid 140251465987776] [client 172.178.141.113:22490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/113-meteorologi/prakiraan-meteorologi/555561507-prakiraan-harian-cuaca-wisata-di-jawa-timur-untuk-hari-ini-pada-pagi-siang-malam-dan-dini-hari-meliputi-gunung-semeru-lumajang-gunung-bromo-dan-gunung-ijen-banyuwangi HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/113-meteorologi/prakiraan-meteorologi/5555
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-05 15:38:49
(10 months ago)
[Wed Nov 05 22:38:32.001601 2025] [security2:error] [pid 2116467:tid 139655679755968] [client 172.17 ...
show more
[Wed Nov 05 22:38:32.001601 2025] [security2:error] [pid 2116467:tid 139655679755968] [client 172.178.141.113:17670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "246"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aQtvd_zI-8SJ2gB0gHm2QAAD1RI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2116486] [zUydvRrXC2Q] [aQtvd_zI-8SJ2gB0gHm2QAAD1RI] keep_alive=[1] [2025-11-05 22:38:32.001610] [R:aQtvd_zI-8SJ2gB0gHm2QAAD1RI] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'sta
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-03 05:06:24
(10 months ago)
[Mon Nov 03 12:05:36.809654 2025] [security2:error] [pid 1634558:tid 140564272932544] [client 172.17 ...
show more
[Mon Nov 03 12:05:36.809654 2025] [security2:error] [pid 1634558:tid 140564272932544] [client 172.178.141.113:24939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "231"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aQg4IAId0_SB9v2iPram8QABgRg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1634583] [iuduqmn9B9U] [aQg4IAId0_SB9v2iPram8QABgRg] keep_alive=[1] [2025-11-03 12:05:36.809667] [R:aQg4IAId0_SB9v2iPram8QABgRg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'sta
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-02 13:49:33
(10 months ago)
[Sun Nov 02 20:46:01.385587 2025] [security2:error] [pid 750355:tid 140125886379712] [client 172.178 ...
show more
[Sun Nov 02 20:46:01.385587 2025] [security2:error] [pid 750355:tid 140125886379712] [client 172.178.141.113:40224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "231"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555562272-prediksi-bulanan-sifat-hujan-bulan-november-tahun-2025-update-dari-analisis-bulan-juli-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555562272-prediksi-bulanan-sifat-hujan-bulan-november-tahun-2025-update-dari-anali
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-01 04:35:19
(10 months ago)
[Sat Nov 01 11:29:20.675794 2025] [security2:error] [pid 581453:tid 140344520767168] [client 172.178 ...
show more
[Sat Nov 01 11:29:20.675794 2025] [security2:error] [pid 581453:tid 140344520767168] [client 172.178.141.113:39918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "227"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555562272-prediksi-bulanan-sifat-hujan-bulan-november-tahun-2025-update-dari-analisis-bulan-juli-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555562272-prediksi-bulanan-sifat-hujan-bulan-november-tahun-2025-update-dari-analisis-b
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-01 01:16:37
(10 months ago)
[Sat Nov 01 08:16:36.517139 2025] [security2:error] [pid 436457:tid 139716916659904] [client 172.178 ...
show more
[Sat Nov 01 08:16:36.517139 2025] [security2:error] [pid 436457:tid 139716916659904] [client 172.178.141.113:2564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "227"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aQVfdGQKKSNJ3-hZNcJEPgAB1QI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[436720] [s8zCO/5dP6Y] [aQVfdGQKKSNJ3-hZNcJEPgAB1QI] keep_alive=[1] [2025-11-01 08:16:36.517144] [R:aQVfdGQKKSNJ3-hZNcJEPgAB1QI] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'stakli
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-10-29 04:40:42
(10 months ago)
[Wed Oct 29 11:39:56.488912 2025] [security2:error] [pid 856398:tid 140039452255936] [client 172.178 ...
show more
[Wed Oct 29 11:39:56.488912 2025] [security2:error] [pid 856398:tid 140039452255936] [client 172.178.141.113:36023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "227"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aQGanINXA0gYRbPdxY1PjAAAgxg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[856423] [ErpquQS+RaU] [aQGanINXA0gYRbPdxY1PjAAAgxg] keep_alive=[1] [2025-10-29 11:39:56.488915] [R:aQGanINXA0gYRbPdxY1PjAAAgxg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'stakl
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-10-27 14:20:07
(10 months ago)
[Mon Oct 27 21:19:20.794503 2025] [security2:error] [pid 1116340:tid 139659729340096] [client 172.17 ...
show more
[Mon Oct 27 21:19:20.794503 2025] [security2:error] [pid 1116340:tid 139659729340096] [client 172.178.141.113:63657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-musim/4330-prakiraan-musim-hujan/prakiraan-awal-musim-hujan/prakiraan-awal-musim-hujan-propinsi-jawa-timur/prediksi-6-bulanan-prediksi-awal-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur/555562425-prediksi-6-bulanan-awal-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur HTTP/..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/4330-praki
...
show less
Hacking
Web App Attack