🇺🇸
nodepile
2026-08-21 13:57:54
(2 weeks ago)
UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/fits- ...
show more
UA claims known bot but FCrDNS checks do not match official ranges (tenant=82 method=GET path=/fits-08-18-toyota-sequoia-trd-style-front-grill-abs-unpainted-with-led-drl-lights.html ua='Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot')
show less
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2025-08-19 19:06:49
(1 year ago)
[Wed Aug 20 02:06:48.305924 2025] [security2:error] [pid 142589:tid 139730671879872] [client 52.156. ...
show more
[Wed Aug 20 02:06:48.305924 2025] [security2:error] [pid 142589:tid 139730671879872] [client 52.156.77.150:44774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/gempa-terkini"] [unique_id "aKTLSIqkxWAtA-algVzLlAAAAQI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[142596] [evfTjvyT5Kg] [aKTLSIqkxWAtA-algVzLlAAAAQI] keep_alive=[1] [2025-08-20 02:06:48.305934] [R:aKTLSIqkxWAtA-algVzLlAAAAQI] UA:'Mo
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-07-21 14:18:55
(1 year ago)
[Mon Jul 21 21:18:09.451872 2025] [security2:error] [pid 51057:tid 140520117450432] [client 52.156.7 ...
show more
[Mon Jul 21 21:18:09.451872 2025] [security2:error] [pid 51057:tid 140520117450432] [client 52.156.77.150:54632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-bulanan/4177-prakiraan-curah-hujan-bulanan/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-bulanan-curah-hujan-di-propinsi-jawa-timur-tahun-2023/555560632-prakiraan-bulanan-curah-hujan-bulan-januari-tahun-2024-update-dari-analisis-bulan-november-tahun-2023-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-bulanan/4177-prakiraan-curah
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-07-21 00:51:55
(1 year ago)
[Mon Jul 21 07:51:54.308170 2025] [security2:error] [pid 241652:tid 140081655412416] [client 52.156. ...
show more
[Mon Jul 21 07:51:54.308170 2025] [security2:error] [pid 241652:tid 140081655412416] [client 52.156.77.150:44877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-tingkat-ketersediaan-air-tanah/555562016-analisis-bulanan-tingkat-ketersediaan-air-tanah-bulan-mei-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-tingkat-ketersediaan-air-tanah/555562016-analisis-bulanan-tingkat-ketersediaan-air-tanah-bulan-mei-tahun-2025-di-provinsi-jawa-
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-07-20 08:49:38
(1 year ago)
[Sun Jul 20 15:46:15.570017 2025] [security2:error] [pid 69126:tid 140552245851840] [client 52.156.7 ...
show more
[Sun Jul 20 15:46:15.570017 2025] [security2:error] [pid 69126:tid 140552245851840] [client 52.156.77.150:2758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/component/tags/tag/32 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/32"] [unique_id "aHys16i9TAhgW0wHbKbT9AAAgwQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[69131] [e4FZZNjeZTU] [aHys16i9TAhgW0wHbKbT9AAAgwQ] keep_alive=[1] [2025-07-20 15:46:15.570020] [R:aHys16i9TAhgW0wHbKbT9AAAgwQ] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatibl
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-07-17 17:02:31
(1 year ago)
[Fri Jul 18 00:02:19.988538 2025] [security2:error] [pid 417152:tid 139951929812672] [client 52.156. ...
show more
[Fri Jul 18 00:02:19.988538 2025] [security2:error] [pid 417152:tid 139951929812672] [client 52.156.77.150:51278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-musim/298-prakiraan-musim-hujan/prakiraan-curah-hujan-musim-hujan/prakiraan-curah-hujan-musim-hujan-di-malang HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/298-prakiraan-musim-hujan/prakiraan-curah-hujan-musim-hujan/prakiraan-curah-hujan-musim-hujan-di-malang"] [unique_id "aHksm_8mrcynbCY5RgfeIwAAQwQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id]
...
show less
Hacking
Web App Attack
🇭🇳
unph
2025-07-16 16:14:02
(1 year ago)
Intento de acceso sospechoso en el login de WordPress
Brute-Force
🇩🇪
SCHAPPY
2025-07-16 14:55:12
(1 year ago)
Bad bot identified by user agent
Bad Web Bot
🇮🇩
hermawan
2025-07-16 14:03:04
(1 year ago)
[Wed Jul 16 20:56:22.154156 2025] [security2:error] [pid 23089:tid 140451261679296] [client 52.156.7 ...
show more
[Wed Jul 16 20:56:22.154156 2025] [security2:error] [pid 23089:tid 140451261679296] [client 52.156.77.150:28779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/buku/479-buku-edisi-setiap-1-bulan-sekali/555558934-e-buletin-prakiraan-sifat-dan-curah-hujan-di-kabupaten-ngawi HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/buku/479-buku-edisi-setiap-1-bulan-sekali/555558934-e-buletin-prakiraan-sifat-dan-curah-hujan-di-kabupaten-ngawi"] [unique_id "aHevhi3BLoL8jFBpn_K1QwAAmAk"] [staklim-malang.info] [staklim-malang.info] top=[23099] [nOkFQsxMEWs] [aH
...
show less
Hacking
Web App Attack
🇩🇪
CommanderRoot
2025-07-15 17:49:00
(1 year ago)
AI Bot crawler
DDoS Attack
Web Spam
🇮🇩
hermawan
2025-07-15 16:43:37
(1 year ago)
[Tue Jul 15 23:42:07.548566 2025] [security2:error] [pid 57227:tid 140015723435712] [client 52.156.7 ...
show more
[Tue Jul 15 23:42:07.548566 2025] [security2:error] [pid 57227:tid 140015723435712] [client 52.156.77.150:56132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555562010-prediksi-bulanan-sifat-hujan-bulan-agustus-tahun-2025-update-dari-analisis-bulan-mei-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555562010-prediksi-bulanan-sifat-hujan-bulan-agustus-tahun-2025-update-dari-analisis-bulan-m
...
show less
Hacking
Web App Attack
🇺🇸
Starburst SysOp Team
2025-07-15 13:33:05
(1 year ago)
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 150.77.156.52.rbl.malwa ...
show more
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 150.77.156.52.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3)
show less
Hacking
🇮🇩
hermawan
2025-07-15 13:02:09
(1 year ago)
[Tue Jul 15 19:59:55.860338 2025] [security2:error] [pid 162924:tid 140573999560384] [client 52.156. ...
show more
[Tue Jul 15 19:59:55.860338 2025] [security2:error] [pid 162924:tid 140573999560384] [client 52.156.77.150:53046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/peta-zona-musim-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/informasi-iklim/peta-zona-musim-di-provinsi-jawa-timur"] [unique_id "aHZQy6hJJW548m3OYSwCCgAA0BA"] [staklim-malang.info] [staklim-malang.info] top=[162941] [c41XWrfAb0k] [aHZQy6hJJW548m3OYSwCCgAA0BA] keep_alive=[1] [2025-07-15 19:59:55.860345] [R:aHZQy6hJJW548m3OYSwCCgAA0BA] UA:'Mozilla
...
show less
Hacking
Web App Attack
🇺🇸
masterguru
2025-07-14 22:33:37
(1 year ago)
BAD BOT - Detected and Blocked.. Matched phrase "ChatGPT-User" at REQUEST_HEADERS:User-Agent. (11000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "ChatGPT-User" at REQUEST_HEADERS:User-Agent. (1100000-173)
show less
Bad Web Bot
🇭🇳
unph
2025-07-14 20:39:19
(1 year ago)
Intento de acceso sospechoso en el login de WordPress
Brute-Force