๐บ๐ธ
kosada.com
2026-03-08 10:14:33
(4 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
๐จ๐ฆ
ISPLtd
2026-03-05 02:16:09
(4 months ago)
Web server scanner, TCP/443, requests no pages. Robot with null/bogus/varying user agent issuing dir ...
show more
Web server scanner, TCP/443, requests no pages. Robot with null/bogus/varying user agent issuing direct requests with fake/varying referrer.
show less
Port Scan
Bad Web Bot
๐ต๐ฑ
IROK
2026-02-27 17:27:32
(4 months ago)
Firewall Blocked - Unauthorized Port Scanning
...
Port Scan
๐ฉ๐ช
filstal.org
2026-02-19 17:02:34
(5 months ago)
Aggressive Web Bot/Crawler detected by Fail2ban.
Bad Web Bot
๐บ๐ธ
nodepile
2025-12-29 22:30:45
(6 months ago)
UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/fits- ...
show more
UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/fits-03-09-mercedes-benz-c209-clk-class-amg-style-unpainted-rear-trunk-spoiler.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot')
show less
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-15 14:00:14
(8 months ago)
[Sat Nov 15 20:59:37.924178 2025] [security2:error] [pid 968933:tid 140213117511360] [client 51.8.15 ...
show more
[Sat Nov 15 20:59:37.924178 2025] [security2:error] [pid 968933:tid 140213117511360] [client 51.8.155.125:18096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-musim/4333-prakiraan-musim-hujan/prakiraan-durasi-musim-hujan/prediksi-6-bulanan-prediksi-durasi-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur/555562421-prediksi-6-bulanan-durasi-musim-hujan-tahun-2025-2026-zona-musim-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-musim/4333-prakiraan-musim-hujan/prakiraan-durasi-musim-hujan/pred
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-14 04:07:26
(8 months ago)
[Fri Nov 14 10:27:20.556169 2025] [security2:error] [pid 223723:tid 140172812342976] [client 51.8.15 ...
show more
[Fri Nov 14 10:27:20.556169 2025] [security2:error] [pid 223723:tid 140172812342976] [client 51.8.155.125:41565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/component/tags/tag/182 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/182"] [unique_id "aRahmMGl8mfVqEcShl7EwQACxwU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[223732] [89M9kwVLk5o] [aRahmMGl8mfVqEcShl7EwQACxwU] keep_alive=[1] [2025-11-14 10:27:20.556176] [R:aRahmMGl8mfVqEcShl7EwQACxwU] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compa
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-12 08:51:37
(8 months ago)
[Wed Nov 12 15:46:01.844705 2025] [security2:error] [pid 91694:tid 140346911614656] [client 51.8.155 ...
show more
[Wed Nov 12 15:46:01.844705 2025] [security2:error] [pid 91694:tid 140346911614656] [client 51.8.155.125:50995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/4326-konferensi-pers/rilis-prediksi-musim-hujan-tahun-2025-2026-provinsi-jawa-timur/555562378-rilis-prediksi-musim-hujan-tahun-2025-2026-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4326-konferensi-pers/rilis-prediksi-musim-hujan-tahun-2025-2026-provinsi-jawa-timur/555562378-rilis-pred
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-08 06:37:06
(8 months ago)
[Sat Nov 08 13:35:36.194277 2025] [security2:error] [pid 801311:tid 140251510044352] [client 51.8.15 ...
show more
[Sat Nov 08 13:35:36.194277 2025] [security2:error] [pid 801311:tid 140251510044352] [client 51.8.155.125:19757] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562275-prediksi-bulanan-curah-hujan-bulan-november-tahun-2025-update-dari-analisis-bulan-juli-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562275-prediksi-bulanan-curah-hujan-bulan-november-tahun-2025-update-dari-analisis
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-02 16:16:48
(8 months ago)
[Sun Nov 02 23:15:33.439552 2025] [security2:error] [pid 909444:tid 140527677720256] [client 51.8.15 ...
show more
[Sun Nov 02 23:15:33.439552 2025] [security2:error] [pid 909444:tid 140527677720256] [client 51.8.155.125:6486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "231"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555562272-prediksi-bulanan-sifat-hujan-bulan-november-tahun-2025-update-dari-analisis-bulan-juli-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555562272-prediksi-bulanan-sifat-hujan-bulan-november-tahun-2025-update-dari-analisis-bulan
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-10-29 11:14:52
(8 months ago)
[Wed Oct 29 18:13:49.577952 2025] [security2:error] [pid 143045:tid 140693849667264] [client 51.8.15 ...
show more
[Wed Oct 29 18:13:49.577952 2025] [security2:error] [pid 143045:tid 140693849667264] [client 51.8.155.125:23537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "227"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/"] [unique_id "aQH27Yd6qYIRaLZ9g0aiZAADQRg"] [staklim-malang.info] [staklim-malang.info] top=[143070] [ZbwOOoqmQxw] [aQH27Yd6qYIRaLZ9g0aiZAADQRg] keep_alive=[1] [2025-10-29 18:13:49.577955] [R:aQH27Yd6qYIRaLZ9g0aiZAADQRg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'staklim-malang.info' AC
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-10-28 11:03:10
(8 months ago)
[Tue Oct 28 18:02:22.944091 2025] [security2:error] [pid 2553407:tid 139674895939264] [client 51.8.1 ...
show more
[Tue Oct 28 18:02:22.944091 2025] [security2:error] [pid 2553407:tid 139674895939264] [client 51.8.155.125:10676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "227"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aQCivsX-ogJJc8yoRlQ3zwAAARg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2553432] [FhNK8/VsHpE] [aQCivsX-ogJJc8yoRlQ3zwAAARg] keep_alive=[1] [2025-10-28 18:02:22.944094] [R:aQCivsX-ogJJc8yoRlQ3zwAAARg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'stakli
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-10-24 00:35:16
(8 months ago)
[Fri Oct 24 07:35:14.532112 2025] [security2:error] [pid 2041376:tid 140157138233024] [client 51.8.1 ...
show more
[Fri Oct 24 07:35:14.532112 2025] [security2:error] [pid 2041376:tid 140157138233024] [client 51.8.155.125:3484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562360-prediksi-bulanan-curah-hujan-bulan-november-tahun-2025-update-dari-analisis-bulan-agustus-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562360-prediksi-bulanan-curah-hujan-bulan-november-tahun-2025-update-dari-analisis-b
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-10-18 07:23:35
(9 months ago)
[Sat Oct 18 14:21:56.416275 2025] [security2:error] [pid 3910788:tid 140210718353088] [client 51.8.1 ...
show more
[Sat Oct 18 14:21:56.416275 2025] [security2:error] [pid 3910788:tid 140210718353088] [client 51.8.155.125:32666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aPNAFPhJqzXtxHa2M8ykFwADlQk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[3910804] [H+J/tKmTJ6w] [aPNAFPhJqzXtxHa2M8ykFwADlQk] keep_alive=[1] [2025-10-18 14:21:56.416290] [R:aPNAFPhJqzXtxHa2M8ykFwADlQk] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'stakli
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-10-15 04:28:04
(9 months ago)
[Wed Oct 15 11:22:23.038920 2025] [security2:error] [pid 4030242:tid 140020080862912] [client 51.8.1 ...
show more
[Wed Oct 15 11:22:23.038920 2025] [security2:error] [pid 4030242:tid 140020080862912] [client 51.8.155.125:16130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aO8hfzd5qprTLTcKFWtdUAACARg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[4030267] [F8XY2OrSgxs] [aO8hfzd5qprTLTcKFWtdUAACARg] keep_alive=[1] [2025-10-15 11:22:23.038925] [R:aO8hfzd5qprTLTcKFWtdUAACARg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'stakli
...
show less
Hacking
Web App Attack