๐ณ๐ฑ
sabrinagoom
2025-05-12 14:59:16
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
ASN: 23724 (CHINANET-IDC-BJ-A ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
ASN: 23724 (CHINANET-IDC-BJ-AP IDC, China Telecommunications Corporation)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2025-05-12T12:15:04Z
UA: Go-http-client/2.0
show less
Bad Web Bot
๐ฎ๐ฉ
hermawan
2025-02-12 04:23:07
(1 year ago)
[Wed Feb 12 11:13:25.929965 2025] [security2:error] [pid 254795:tid 140356844656320] [client 36.110. ...
show more
[Wed Feb 12 11:13:25.929965 2025] [security2:error] [pid 254795:tid 140356844656320] [client 36.110.131.81:17020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "165"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z6wf5TD_uIQUlbrpIOmCaAACeyQ"], referer https://staklim-malang.info/index.php/buku/492-buku-edisi-setiap-1-bulan-sekali/buku-analisis-dan-prakiraan-bulanan-jawa-timur/buku-analisis-dan-prakiraan-bulanan-jawa-timur-tahun-2015/838-11-buku-analisis-hujan-nopember-2015-dan-prakiraan-hujan
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-02-05 21:16:45
(1 year ago)
[Thu Feb 06 03:09:56.805274 2025] [security2:error] [pid 64037:tid 140377321240256] [client 36.110.1 ...
show more
[Thu Feb 06 03:09:56.805274 2025] [security2:error] [pid 64037:tid 140377321240256] [client 36.110.131.81:62355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "148"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z6PFlHlh4u6rmGe704-wdwAAziI"], referer https://staklim-malang.info/index.php/profil/meteorologi/list-all-categories/3996-galeri-kegiatan/galeri-kegiatan-tahun-2019/06-galeri-kegiatan-bulan-juni-tahun-2019/889-galeri-kegiatan-bmkg-stasiun-klimatologi-malang-periode-24-28-juni-2019 [sta
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-02-02 16:46:25
(1 year ago)
[Sun Feb 02 23:07:25.889709 2025] [security2:error] [pid 18079:tid 139654451951296] [client 36.110.1 ...
show more
[Sun Feb 02 23:07:25.889709 2025] [security2:error] [pid 18079:tid 139654451951296] [client 36.110.131.81:19877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "93"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z5-YPbWywgC5GgxYQ4VE2AAA3wI"], referer https://staklim-malang.info/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561084-prakiraan-bulanan-curah-hujan-bulan-agustus-tahun-2024-update-dari-analisis-bulan-juni-tahun-2024-di-provinsi-jawa-tim
...
show less
Hacking
Web App Attack
๐บ๐ธ
mohammed-khalil-alalem.com
2025-01-24 18:44:30
(1 year ago)
Automated report: Detected malicious activity. Categories: 19,21
Bad Web Bot
Web App Attack
๐ฎ๐น
Progetto1
2025-01-24 04:08:02
(1 year ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ฆ๐บ
MAGIC
2025-01-24 03:00:40
(1 year ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ฎ๐ฉ
hermawan
2025-01-18 22:11:46
(1 year ago)
[Sat Jan 18 16:31:09.256046 2025] [security2:error] [pid 443715:tid 133935852734144] [client 36.110. ...
show more
[Sat Jan 18 16:31:09.256046 2025] [security2:error] [pid 443715:tid 133935852734144] [client 36.110.131.81:1339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "59"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "Z4t03eSiRy3Lx4McDS2RHwAAlxA"], referer https://staklim-jatim.bmkg.go.id/index.php/prakiraan-bulanan/4114-prakiraan-potensi-banjir/prakiraan-potensi-banjir-di-propinsi-jawa-timur/prakiraan-bulanan-daerah-potensi-banjir-provinsi-jawa-timur-tahun-2022/555559268-prakiraan-bulanan-daerah-potensi-b
...
show less
Hacking
Web App Attack
๐จ๐ณ
ThreatBook.io
2025-01-17 23:13:00
(1 year ago)
ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/36.110.131.81
2025-01-17 10:42: ...
show more
ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/36.110.131.81
2025-01-17 10:42:02 /cc.gif
show less
Web App Attack
๐ฎ๐น
Progetto1
2025-01-16 10:52:03
(1 year ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ฎ๐ฉ
hermawan
2025-01-15 20:20:31
(1 year ago)
[Wed Jan 15 09:35:28.623880 2025] [security2:error] [pid 258496:tid 137707728611008] [client 36.110. ...
show more
[Wed Jan 15 09:35:28.623880 2025] [security2:error] [pid 258496:tid 137707728611008] [client 36.110.131.81:59559] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "59"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z4ce8AMgf9qQDC8biSJY0wADFQw"], referer https://staklim-malang.info/index.php/profil/arsip-artikel?catid=474&id=1067%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-12-18-juli-2016&start=20 [staklim-malang.info] [staklim-malang.info] top=[258509] [9N/Vhz3eRD8
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-01-10 14:45:07
(1 year ago)
[Fri Jan 10 20:53:59.338165 2025] [security2:error] [pid 13607:tid 132636629030592] [client 36.110.1 ...
show more
[Fri Jan 10 20:53:59.338165 2025] [security2:error] [pid 13607:tid 132636629030592] [client 36.110.131.81:49342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "64"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z4Emd1F6bVBSXgrqF9K-BwABbAc"], referer https://staklim-malang.info/index.php/profil/arsip-artikel?catid=619&id=1315%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-10-16-januari-2017&start=140 [staklim-malang.info] [staklim-malang.info] top=[13615] [NAcsbdKk1
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-01-06 10:39:02
(1 year ago)
[Mon Jan 06 17:18:36.746412 2025] [security2:error] [pid 43648:tid 127989761087168] [client 36.110.1 ...
show more
[Mon Jan 06 17:18:36.746412 2025] [security2:error] [pid 43648:tid 127989761087168] [client 36.110.131.81:32768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "64"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z3ut_E3P4xrC5uKizlFwJQAAKRY"], referer https://staklim-malang.info/index.php/informasi-iklim/infografis-iklim/infografis-harian/monitoring-kualitas-udara/555560496-monitoring-kualitas-udara-pm2-5-tanggal-23-oktober-2023 [staklim-malang.info] [staklim-malang.info] top=[43671] [AVGQ807ei
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-01-05 09:46:16
(1 year ago)
[Sun Jan 05 06:34:20.481258 2025] [security2:error] [pid 75391:tid 140360414340800] [client 36.110.1 ...
show more
[Sun Jan 05 06:34:20.481258 2025] [security2:error] [pid 75391:tid 140360414340800] [client 36.110.131.81:16047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "64"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "Z3nFfFzRgiR3tfEIWauLEwAATEQ"], referer https://staklim-jatim.bmkg.go.id/index.php/profil/meteorologi/list-all-categories/537-konferensi-pers/konferensi-pers-tahun-2016/1107-perkembangan-musim-kemarau-2016-dan-prakiraan-musim-hujan-2016-2017 [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-01-04 13:23:17
(1 year ago)
[Sat Jan 04 14:40:21.899213 2025] [security2:error] [pid 105652:tid 126533354043072] [client 36.110. ...
show more
[Sat Jan 04 14:40:21.899213 2025] [security2:error] [pid 105652:tid 126533354043072] [client 36.110.131.81:63905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "64"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "Z3jl5UQsD197W0Qsz7rlAwADxxQ"], referer https://staklim-jatim.bmkg.go.id/index.php/profil/meteorologi/list-all-categories/4012-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur/prakiraa
...
show less
Hacking
Web App Attack