๐บ๐ธ
Step Modifications
2025-07-08 10:21:34
(1 year ago)
wiki-badbots: Fail2Ban ban
Brute-Force
๐ฆ๐บ
MAGIC
2025-07-07 02:08:13
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ฆ๐บ
MAGIC
2025-06-25 14:04:07
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ฎ๐ฉ
hermawan
2025-06-16 08:18:25
(1 year ago)
[Mon Jun 16 15:18:25.110720 2025] [security2:error] [pid 33641:tid 140535351097024] [client 4.151.24 ...
show more
[Mon Jun 16 15:18:25.110720 2025] [security2:error] [pid 33641:tid 140535351097024] [client 4.151.241.246:3942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "205"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aE_TUSNXLvH5Zl26ksfVBwAAAR0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[33671] [7rUsCrRK6VA] [aE_TUSNXLvH5Zl26ksfVBwAAAR0] keep_alive=[1] [2025-06-16 15:18:25.110724] [R:aE_TUSNXLvH5Zl26ksfVBwAAAR0] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/b
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-06-15 00:45:25
(1 year ago)
[Sun Jun 15 07:44:09.696009 2025] [security2:error] [pid 161111:tid 140215426451136] [client 4.151.2 ...
show more
[Sun Jun 15 07:44:09.696009 2025] [security2:error] [pid 161111:tid 140215426451136] [client 4.151.241.246:35914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aE4XWVqQpsJyAYnmQ6yGpQAASAc"] [staklim-malang.info] [staklim-malang.info] top=[161119] [OfrIk4lVpsA] [aE4XWVqQpsJyAYnmQ6yGpQAASAc] keep_alive=[1] [2025-06-15 07:44:09.696015] [R:aE4XWVqQpsJyAYnmQ6yGpQAASAc] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'st
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-06-13 14:37:03
(1 year ago)
[Fri Jun 13 21:35:33.397894 2025] [security2:error] [pid 72099:tid 140220969141952] [client 4.151.24 ...
show more
[Fri Jun 13 21:35:33.397894 2025] [security2:error] [pid 72099:tid 140220969141952] [client 4.151.241.246:50527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/analisis-bulanan/4298-analisis-distribusi-hujan/analisis-distribusi-sifat-hujan/analisis-distribusi-sifat-hujan-jawa-timur-bulanan/analisis-bulanan-distribusi-sifat-hujan-di-provinsi-jawa-timur-tahun-2025/555561735-analisis-bulanan-distribusi-sifat-hujan-bulan-januari-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/4298-analisis-dist
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-06-12 17:04:47
(1 year ago)
[Fri Jun 13 00:04:46.402839 2025] [security2:error] [pid 5188:tid 140166040549056] [client 4.151.241 ...
show more
[Fri Jun 13 00:04:46.402839 2025] [security2:error] [pid 5188:tid 140166040549056] [client 4.151.241.246:23201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEsIrtXVgJpm2TpMAr8kXwABFxw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[5217] [Wccz7bpaA1c] [aEsIrtXVgJpm2TpMAr8kXwABFxw] keep_alive=[1] [2025-06-13 00:04:46.402844] [R:aEsIrtXVgJpm2TpMAr8kXwABFxw] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bo
...
show less
Hacking
Web App Attack
๐ฆ๐บ
MAGIC
2025-06-11 23:10:36
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ฎ๐ฉ
hermawan
2025-06-11 10:42:30
(1 year ago)
[Wed Jun 11 17:40:29.556386 2025] [security2:error] [pid 208891:tid 140473996854976] [client 4.151.2 ...
show more
[Wed Jun 11 17:40:29.556386 2025] [security2:error] [pid 208891:tid 140473996854976] [client 4.151.241.246:34449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/component/tags/tag/182-prakiraan-awal-musim-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/182-prakiraan-awal-musim-hujan"] [unique_id "aEldHVbLvVkb7sraHxQoagAAxRM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[208911] [ndUQcdHY2M4] [aEldHVbLvVkb7sraHxQoagAAxRM] keep_alive=[1] [2025-06-11 17:40:29.556390] [R:aEldHVbLvVkb7sraHxQoagAAxRM] UA:'Mo
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-06-11 01:37:50
(1 year ago)
[Wed Jun 11 08:33:48.748785 2025] [security2:error] [pid 329308:tid 140271625950912] [client 4.151.2 ...
show more
[Wed Jun 11 08:33:48.748785 2025] [security2:error] [pid 329308:tid 140271625950912] [client 4.151.241.246:1933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEjc_BJ868r1fLq0K8PPEQAAWQU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[329314] [pTz8zZmiEOQ] [aEjc_BJ868r1fLq0K8PPEQAAWQU] keep_alive=[1] [2025-06-11 08:33:48.748789] [R:aEjc_BJ868r1fLq0K8PPEQAAWQU] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-06-10 13:42:21
(1 year ago)
[Tue Jun 10 20:40:06.096610 2025] [security2:error] [pid 47646:tid 140215480972992] [client 4.151.24 ...
show more
[Tue Jun 10 20:40:06.096610 2025] [security2:error] [pid 47646:tid 140215480972992] [client 4.151.241.246:56352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEg1tk-nmazO8CFXL_93_wAAxgk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[47657] [JDqO1W+sj4c] [aEg1tk-nmazO8CFXL_93_wAAxgk] keep_alive=[1] [2025-06-10 20:40:06.096616] [R:aEg1tk-nmazO8CFXL_93_wAAxgk] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-06-10 03:09:54
(1 year ago)
[Tue Jun 10 09:43:58.118507 2025] [security2:error] [pid 54427:tid 139652747921088] [client 4.151.24 ...
show more
[Tue Jun 10 09:43:58.118507 2025] [security2:error] [pid 54427:tid 139652747921088] [client 4.151.241.246:6548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEeb7rpMm0GKN6j2yJ5a2AAACRc"] [staklim-malang.info] [staklim-malang.info] top=[54451] [hsgKq3bqyr0] [aEeb7rpMm0GKN6j2yJ5a2AAACRc] keep_alive=[1] [2025-06-10 09:43:58.118511] [R:aEeb7rpMm0GKN6j2yJ5a2AAACRc] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'stakl
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-06-09 04:44:40
(1 year ago)
[Mon Jun 09 11:42:21.809823 2025] [security2:error] [pid 892449:tid 139881685673664] [client 4.151.2 ...
show more
[Mon Jun 09 11:42:21.809823 2025] [security2:error] [pid 892449:tid 139881685673664] [client 4.151.241.246:64112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEZmLb4hLADEjr-6kS-gpwAAQQg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[892458] [NAudNET9wug] [aEZmLb4hLADEjr-6kS-gpwAAQQg] keep_alive=[1] [2025-06-09 11:42:21.809829] [R:aEZmLb4hLADEjr-6kS-gpwAAQQg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.co
...
show less
Hacking
Web App Attack
๐บ๐ธ
masterguru
2025-06-08 21:07:07
(1 year ago)
BAD BOT - Detected and Blocked.. Matched phrase "ChatGPT-User" at REQUEST_HEADERS:User-Agent. (11000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "ChatGPT-User" at REQUEST_HEADERS:User-Agent. (1100000-173)
show less
Bad Web Bot
๐ฎ๐ฉ
hermawan
2025-06-08 02:34:09
(1 year ago)
[Sun Jun 08 09:32:34.601528 2025] [security2:error] [pid 256043:tid 139881912190656] [client 4.151.2 ...
show more
[Sun Jun 08 09:32:34.601528 2025] [security2:error] [pid 256043:tid 139881912190656] [client 4.151.241.246:56681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aET2QhY4cqPn9-si3QlZ8gAA2gM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[256047] [TmGeRl4mSdo] [aET2QhY4cqPn9-si3QlZ8gAA2gM] keep_alive=[1] [2025-06-08 09:32:34.601531] [R:aET2QhY4cqPn9-si3QlZ8gAA2gM] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.co
...
show less
Hacking
Web App Attack