๐จ๐ด
j458rjqwi348fhjq46
2025-07-22 20:05:18
(1 year ago)
Malicious IP detected by WAF with anomaly score 11.0. Attack types: Suspicious short random path, Ex ...
show more
Malicious IP detected by WAF with anomaly score 11.0. Attack types: Suspicious short random path, Exposure of ASPX page, Exposure of environment file (.env) (+1 more). Activity: 2134 requests to 491 URLs. Period: 2025-07-20 00:01:56 - 2025-07-20 00:01:56 (America/Bogota). Origin: US. Source: Automated WAF log analysis.
show less
Hacking
Web App Attack
๐บ๐ธ
Alvino
2025-07-22 07:22:13
(1 year ago)
Blocked due to using a VPN or data center IP with abuse: 42
Web Spam
VPN IP
๐บ๐ธ
Alvino
2025-07-22 06:51:00
(1 year ago)
Blocked due to using a VPN or data center IP with abuse: 38
Web Spam
VPN IP
๐ฉ๐ช
CommanderRoot
2025-07-21 19:09:04
(1 year ago)
AI Bot crawler
DDoS Attack
Web Spam
๐ฎ๐ฉ
hermawan
2025-07-20 18:01:51
(1 year ago)
[Mon Jul 21 00:58:26.878312 2025] [security2:error] [pid 99246:tid 140082071938752] [client 4.151.24 ...
show more
[Mon Jul 21 00:58:26.878312 2025] [security2:error] [pid 99246:tid 140082071938752] [client 4.151.241.246:13919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/"] [unique_id "aH0uQtPJVmTaG6I2Ne_zdwAAigE"] [staklim-malang.info] [staklim-malang.info] top=[99248] [NpQgGyAAKKc] [aH0uQtPJVmTaG6I2Ne_zdwAAigE] keep_alive=[1] [2025-07-21 00:58:26.878317] [R:aH0uQtPJVmTaG6I2Ne_zdwAAigE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'staklim-malang.info' ACC
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-07-20 02:11:01
(1 year ago)
[Sun Jul 20 09:11:00.742523 2025] [security2:error] [pid 771941:tid 139893835761344] [client 4.151.2 ...
show more
[Sun Jul 20 09:11:00.742523 2025] [security2:error] [pid 771941:tid 139893835761344] [client 4.151.241.246:27865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/555561725-infografis-bulanan-iklim-curah-hujan-maksimum-bulan-januari-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/555561725-infografis-bulanan-iklim-curah-hujan-maksimum-bulan-januari-tahun-2025-di-provinsi-jawa-timur"] [unique_id "aHxQNFmktgsycvxYYLbhPAAAhwA"] [stakli
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-07-17 04:16:58
(1 year ago)
[Thu Jul 17 11:16:15.892032 2025] [security2:error] [pid 132872:tid 140535745398464] [client 4.151.2 ...
show more
[Thu Jul 17 11:16:15.892032 2025] [security2:error] [pid 132872:tid 140535745398464] [client 4.151.241.246:23317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/analisis-distribusi-curah-hujan-jawa-timur-bulanan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-of-all-tags/analisis-distribusi-curah-hujan-jawa-timur-bulanan"] [unique_id "aHh5D4dQs3gmhScnU9JEEgABBBM"] [staklim-malang.info] [staklim-malang.info] top=[132904] [lYM+RdgAq00] [aHh5D4dQs3gmhScnU9JEEgABBBM] keep_alive=[1] [2025-07
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-07-16 14:55:15
(1 year ago)
[Wed Jul 16 21:46:41.924182 2025] [security2:error] [pid 43391:tid 139849238570688] [client 4.151.24 ...
show more
[Wed Jul 16 21:46:41.924182 2025] [security2:error] [pid 43391:tid 139849238570688] [client 4.151.241.246:15318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/tingkat-ketersediaan-air-bagi-tanaman/555561873-prediksi-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-jawa-timur-untuk-bulan-mei-tahun-2025-update-dari-analisis-bulan-maret-tahun-2025 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/tingkat-ketersediaan-air-bagi-tanaman/555561873-prediksi-bulanan-tingkat-ketersediaan-
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-07-16 06:54:32
(1 year ago)
[Wed Jul 16 13:44:01.287679 2025] [security2:error] [pid 319442:tid 140015100131008] [client 4.151.2 ...
show more
[Wed Jul 16 13:44:01.287679 2025] [security2:error] [pid 319442:tid 140015100131008] [client 4.151.241.246:60474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prediksi-6-bulanan-awal-musim-kemarau-tahun-2025-zona-musim-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prediksi-6-bulanan-awal-musim-kemarau-tahun-2025-zona-musim-di-provinsi-jawa-timur"] [unique_id "aHdKMTjpB7bzdlUDa3FPhwAAwRg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] t
...
show less
Hacking
Web App Attack
๐ฆ๐บ
MAGIC
2025-07-16 01:00:42
(1 year ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ฎ๐ฉ
hermawan
2025-07-15 13:12:03
(1 year ago)
[Tue Jul 15 20:10:39.661112 2025] [security2:error] [pid 170072:tid 140573957596864] [client 4.151.2 ...
show more
[Tue Jul 15 20:10:39.661112 2025] [security2:error] [pid 170072:tid 140573957596864] [client 4.151.241.246:19736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/analisis-bulanan?start=500 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/analisis-bulanan"] [unique_id "aHZTTye5sAkF7ybe-k1VuQABARU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[170094] [8xq2gPcTKxA] [aHZTTye5sAkF7ybe-k1VuQABARU] keep_alive=[1] [2025-07-15 20:10:39.661122] [R:aHZTTye5sAkF7ybe-k1
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-07-14 04:52:09
(1 year ago)
[Mon Jul 14 11:51:22.412384 2025] [security2:error] [pid 443329:tid 140524706027200] [client 4.151.2 ...
show more
[Mon Jul 14 11:51:22.412384 2025] [security2:error] [pid 443329:tid 140524706027200] [client 4.151.241.246:58109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/20 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/20"] [unique_id "aHSMyg7uLAaiSl00_k_ByQAAFgo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[443340] [BRlIaZwfj8U] [aHSMyg7uLAaiSl00_k_ByQAAFgo] keep_alive=[1] [2025-07-14 11:51:22.412390] [R:aHSMyg7uLAaiSl00_k_ByQAAFgo] UA:'Mozilla/5.0 AppleWebKit/
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-07-13 11:26:11
(1 year ago)
[Sun Jul 13 18:25:24.064046 2025] [security2:error] [pid 41110:tid 140709920233152] [client 4.151.24 ...
show more
[Sun Jul 13 18:25:24.064046 2025] [security2:error] [pid 41110:tid 140709920233152] [client 4.151.241.246:17148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562049-press-release-kewaspadaan-peningkatan-cuaca-ekstrem-di-jawa-timur-pada-tanggal-8-11-juli-2025 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562049-press-release-kewaspadaan-peningkatan-
...
show less
Hacking
Web App Attack
๐บ๐ธ
masterguru
2025-07-11 21:16:26
(1 year ago)
BAD BOT - Detected and Blocked.. Matched phrase "ChatGPT-User" at REQUEST_HEADERS:User-Agent. (11000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "ChatGPT-User" at REQUEST_HEADERS:User-Agent. (1100000-173)
show less
Bad Web Bot
๐ซ๐ท
แดสแด
2025-07-10 01:36:33
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from US.
ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK)
Protocol: ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK)
Protocol: HTTP/2 (GET method)
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
