🇺🇸
nodepile
2025-12-26 21:07:22
(6 months ago)
UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/hella ...
show more
UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/hella-celis-oe-e39-led-taillights-2001-03.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot')
show less
Bad Web Bot
Web App Attack
🇺🇸
nodepile
2025-12-16 21:03:12
(7 months ago)
UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/2003- ...
show more
UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/2003-2006-mercedes-benz-e-class-w211-facelift-style-projector-headlight-for-stock-bi-xenon-model-without-afs-made-by-depo.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot')
show less
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2025-09-16 03:07:31
(10 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
Starburst SysOp Team
2025-09-13 07:40:05
(10 months ago)
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 188.186.98.23.rbl.malwa ...
show more
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 188.186.98.23.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3)
show less
Hacking
🇮🇩
hermawan
2025-09-03 05:22:09
(10 months ago)
[Wed Sep 03 12:19:40.746687 2025] [security2:error] [pid 123086:tid 140449560905408] [client 23.98.1 ...
show more
[Wed Sep 03 12:19:40.746687 2025] [security2:error] [pid 123086:tid 140449560905408] [client 23.98.186.188:1887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aLfP7GfiG18WN0MXXoWuwwABiAM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[123090] [neBqwB5QrQ8] [aLfP7GfiG18WN0MXXoWuwwABiAM] keep_alive=[1] [2025-09-03 12:19:40.746693] [R:aLfP7GfiG18WN0MXXoWuwwABiAM] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'staklim-
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-09-02 14:54:04
(10 months ago)
[Tue Sep 02 21:38:11.048848 2025] [security2:error] [pid 214763:tid 140261297481408] [client 23.98.1 ...
show more
[Tue Sep 02 21:38:11.048848 2025] [security2:error] [pid 214763:tid 140261297481408] [client 23.98.186.188:27562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/video HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/video"] [unique_id "aLcBU7iyZQIO9O6UloDu-wACQgE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[214765] [UxDyb5JUETc] [aLcBU7iyZQIO9O6UloDu-wACQgE] keep_alive=[1] [2025-09-02 21:38:11.048853] [R:aLcBU7iyZQIO9O6UloDu-wACQgE] UA:'Mozilla/5.0 AppleW
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-09-01 23:04:53
(10 months ago)
[Tue Sep 02 06:04:04.153237 2025] [security2:error] [pid 186155:tid 139890386769600] [client 23.98.1 ...
show more
[Tue Sep 02 06:04:04.153237 2025] [security2:error] [pid 186155:tid 139890386769600] [client 23.98.186.188:8886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/gempa-terkini"] [unique_id "aLYmZGFxgQfcbMVzvzAy-wADFQY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[186162] [vxJIY8Wh4Nk] [aLYmZGFxgQfcbMVzvzAy-wADFQY] keep_alive=[1] [2025-09-02 06:04:04.153246] [R:aLYmZGFxgQfcbMVzvzAy-wADFQY] UA:'Moz
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-09-01 07:42:16
(10 months ago)
[Mon Sep 01 14:38:45.486739 2025] [security2:error] [pid 1090993:tid 139782997923520] [client 23.98. ...
show more
[Mon Sep 01 14:38:45.486739 2025] [security2:error] [pid 1090993:tid 139782997923520] [client 23.98.186.188:17710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/analisis-iklim/analisis-musim/normal-musim/normal-awal-musim-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/analisis-iklim/analisis-musim/normal-musim/normal-awal-musim-hujan"] [unique_id "aLVNhRhqrm6RZEKdsLsaWwADywQ"] [staklim-malang.info] [staklim-malang.info] top=[1090998] [aG4edji4+u8] [aLVNhRhqrm6RZEKdsLsaWwADywQ] keep_alive=[1] [2025-09-01 14:38:45.486745] [R:aLVNhRhqrm6RZE
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-08-31 15:07:57
(10 months ago)
[Sun Aug 31 22:07:56.586463 2025] [security2:error] [pid 148738:tid 139983237449408] [client 23.98.1 ...
show more
[Sun Aug 31 22:07:56.586463 2025] [security2:error] [pid 148738:tid 139983237449408] [client 23.98.186.188:20748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561891-prediksi-bulanan-curah-hujan-bulan-juni-tahun-2025-update-dari-analisis-bulan-maret-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561891-prediksi-bulanan-curah-hujan-bulan-juni-tahun-2025-update-dari-analisis-bulan-mare
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-08-31 02:12:32
(10 months ago)
[Sun Aug 31 09:12:01.700557 2025] [security2:error] [pid 642723:tid 139689664161472] [client 23.98.1 ...
show more
[Sun Aug 31 09:12:01.700557 2025] [security2:error] [pid 642723:tid 139689664161472] [client 23.98.186.188:1946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561113-prakiraan-bulanan-curah-hujan-di-kabupaten-banyuwangi-untuk-6-bulan-ke-depan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561113-prakiraan-bulanan-curah-hujan-di-kabupaten-banyuwangi-untuk-6-bulan-ke-depan"]
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-08-30 05:32:31
(10 months ago)
[Sat Aug 30 12:31:16.700033 2025] [security2:error] [pid 1605020:tid 139676735141568] [client 23.98. ...
show more
[Sat Aug 30 12:31:16.700033 2025] [security2:error] [pid 1605020:tid 139676735141568] [client 23.98.186.188:38027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561122-prakiraan-bulanan-curah-hujan-di-kota-kabupaten-kediri-untuk-6-bulan-ke-depan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561122-prakiraan-bulanan-curah-hujan-di-kota-kabupaten-kediri-untuk-6-bulan-ke-depan"] [
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-08-28 08:33:11
(10 months ago)
[Thu Aug 28 15:32:39.977562 2025] [security2:error] [pid 1214051:tid 139746238949056] [client 23.98. ...
show more
[Thu Aug 28 15:32:39.977562 2025] [security2:error] [pid 1214051:tid 139746238949056] [client 23.98.186.188:31647] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/analisis-iklim/analisis-musim/images-klimatologi-analisis-peta-zona-musim-peta-zona-musim-zom-di-provinsi-jawa-timur-tahun-1991-2020 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/analisis-iklim/analisis-musim/images-klimatologi-analisis-peta-zona-musim-peta-zona-musim-zom-di-provinsi-jawa-timur-tahun-1991-2020"] [unique_id "aLAUJxhoxvk-hJAugFPFwgACQhg"] [staklim-malang.info] [staklim-
...
show less
Hacking
Web App Attack
🇭🇳
unph
2025-08-27 21:27:22
(10 months ago)
Intento de acceso sospechoso en el login de WordPress
Brute-Force
🇮🇩
hermawan
2025-08-27 13:42:26
(10 months ago)
[Wed Aug 27 20:39:01.506272 2025] [security2:error] [pid 87611:tid 139748438181568] [client 23.98.18 ...
show more
[Wed Aug 27 20:39:01.506272 2025] [security2:error] [pid 87611:tid 139748438181568] [client 23.98.186.188:16344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim/555561680-infografis-dasarian-informasi-iklim-jatim-update-20-januari-tahun-2025 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim/555561680-infografis-dasarian-informasi-iklim-jatim-update-20-januari-tahun-2025"] [unique_id "aK8K
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-08-27 09:10:39
(10 months ago)
[Wed Aug 27 16:09:30.216427 2025] [security2:error] [pid 1182170:tid 140651644573376] [client 23.98. ...
show more
[Wed Aug 27 16:09:30.216427 2025] [security2:error] [pid 1182170:tid 140651644573376] [client 23.98.186.188:13710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/analisis-bulanan/4174-tingkat-ketersediaan-air-tanah/tingkat-ketersediaan-air-tanah-di-provinsi-jawa-timur/analisis-bulanan-tingkat-ketersediaan-air-tanah-di-provinsi-jawa-timur-tahun-2023/555559970-analisis-bulanan-tingkat-ketersediaan-air-tanah-bulan-januari-tahun-2023-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/4174-tingkat-ketersediaa
...
show less
Hacking
Web App Attack