๐บ๐ธ
etu brutus
2025-12-25 22:46:38
(7 months ago)
57.141.14.43 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
sockominfo
2025-12-08 04:00:53
(7 months ago)
Double URL encoding detection. Threat Score: 7.2/10 (HIGH). Reported by TangerangKota-CSIRT. Status: ...
show more
Double URL encoding detection. Threat Score: 7.2/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
๐ฎ๐ฉ
sockominfo
2025-12-08 03:00:15
(7 months ago)
Double URL encoding detection. Threat Score: 7.3/10 (HIGH). Reported by TangerangKota-CSIRT. Status: ...
show more
Double URL encoding detection. Threat Score: 7.3/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
๐ฎ๐ฉ
sockominfo
2025-12-07 20:28:13
(7 months ago)
[WAZUH] Double URL encoding detection
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-12-02 04:44:12
(7 months ago)
[Tue Dec 02 11:03:30.429325 2025] [security2:error] [pid 495080:tid 140718723442368] [client 57.141. ...
show more
[Tue Dec 02 11:03:30.429325 2025] [security2:error] [pid 495080:tid 140718723442368] [client 57.141.14.43:50038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "252"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561891-prediksi-bulanan-curah-hujan-bulan-juni-tahun-2025-update-dari-analisis-bulan-maret-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561891-prediksi-bulanan-curah-hujan-bulan-juni-tahun-2025-update-dari-analisis-bulan-maret-tahun-2025-di
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-12-01 21:46:08
(7 months ago)
[Tue Dec 02 04:43:30.827988 2025] [security2:error] [pid 172514:tid 140718799857344] [client 57.141. ...
show more
[Tue Dec 02 04:43:30.827988 2025] [security2:error] [pid 172514:tid 140718799857344] [client 57.141.14.43:33060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".asp" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "88"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: .asp found within REQUEST_FILENAME: /SiteMap.aspx request_line = GET /SiteMap.aspx HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/SiteMap.aspx"] [unique_id "aS4MAlWbQ3trMmhk_cNYhAAABgA"] [staklim-malang.info] [staklim-malang.info] top=[172517] [8aTB3qrV9as] [aS4MAlWbQ3trMmhk_cNYhAAABgA] keep_alive=[1] [2025-12-02 04:43:30.827993] [R:aS4MAlWbQ3trMmhk_cNYhAAABgA] UA:'meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)' Host:'staklim-malang.info' ACCEPT:'*/*'
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-25 16:19:40
(8 months ago)
[Tue Nov 25 23:19:10.188351 2025] [security2:error] [pid 735165:tid 139696957978304] [client 57.141. ...
show more
[Tue Nov 25 23:19:10.188351 2025] [security2:error] [pid 735165:tid 139696957978304] [client 57.141.14.43:37336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-all-categories/4083-klimatologi/infografis/infografis-klimatologi/infografis-dasarian/infografis-dasarian-tahun-2021/555558800-infografis-dasarian-informasi-iklim-jatim-update-30-juni-2021 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-categories/4083-klimatologi/infografis/infografis-klimatologi/infografis-dasarian/infografis-dasarian-tahun-2021/555
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-24 13:17:02
(8 months ago)
[Mon Nov 24 20:09:44.419315 2025] [security2:error] [pid 159230:tid 140557356615360] [client 57.141. ...
show more
[Mon Nov 24 20:09:44.419315 2025] [security2:error] [pid 159230:tid 140557356615360] [client 57.141.14.43:43234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /images/Klimatologi/Prakiraan/02-Prakiraan-Dasarian/Prakiraan_Deterministik_Curah_Hujan_Dasarian/Prakiraan_Deterministik_Curah_Hujan_Dasarian_Provinsi_Jawa_Timur/2024/01_Januari_2024/Das-III/Peta_Prakiraan-Dasarian-Deterministik_Curah_Hujan_Dasarian_I_FEBRUARI-I_MARET_2024_Provinsi_Jawa_Timur_Update_31_Januari_2024.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/images/Klimatologi/Prakiraan/02-Prakiraan-Dasarian/Praki
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-23 19:54:12
(8 months ago)
[Mon Nov 24 02:50:55.107389 2025] [security2:error] [pid 64115:tid 140015456069312] [client 57.141.1 ...
show more
[Mon Nov 24 02:50:55.107389 2025] [security2:error] [pid 64115:tid 140015456069312] [client 57.141.14.43:42446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-all-categories/3890-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-curah-hujan-dasarian/prakiraan-probabilistik-curah-hujan-dasarian/prakiraan-probabilistik-curah-hujan-dasarian-provinsi-jawa-timur/prakiraan-probabilistik-curah-hujan-dasarian-provinsi-jawa-timur-tahun-2018/555556730-prak..."] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-categor
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-22 00:10:19
(8 months ago)
[Sat Nov 22 06:57:42.113014 2025] [security2:error] [pid 511714:tid 139908992034496] [client 57.141. ...
show more
[Sat Nov 22 06:57:42.113014 2025] [security2:error] [pid 511714:tid 139908992034496] [client 57.141.14.43:48602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-all-categories/4217-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-curah-hujan-dasarian/prakiraan-probabilistik-curah-hujan-dasarian/prakiraan-probabilistik-curah-hujan-dasarian-provinsi-jawa-timur/prakiraan-dasarian-probabilistik-curah-hujan-provinsi-jawa-timur-tahun-2024/555561036-prak..."] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-catego
...
show less
Hacking
Web App Attack
๐บ๐ธ
juguemosalacarioca.com
2025-11-21 17:24:36
(8 months ago)
Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-21 15:19:34
(8 months ago)
[Fri Nov 21 22:17:15.342567 2025] [security2:error] [pid 213186:tid 139908774618816] [client 57.141. ...
show more
[Fri Nov 21 22:17:15.342567 2025] [security2:error] [pid 213186:tid 139908774618816] [client 57.141.14.43:59560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Tingkat_Ketersediaan_Air_Bagi_Tanaman/Provinsi_Jawa_Timur/2024/02_Februari_2024/01_Prakiraan-Bulanan_Tingkat_Ketersediaan_Air_Bagi_Tanaman_di_Jawa_Timur_Untuk_Bulan_APRIL_2024_Update_dari_Analisis_Bulan_Februari_2024.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Tingkat_Ketersediaan_Air_Bagi_Tanam
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-21 05:48:32
(8 months ago)
[Fri Nov 21 12:36:01.569377 2025] [security2:error] [pid 159877:tid 140004469679808] [client 57.141. ...
show more
[Fri Nov 21 12:36:01.569377 2025] [security2:error] [pid 159877:tid 140004469679808] [client 57.141.14.43:34068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Daerah_Potensi_Banjir_Bulanan/Prakiraan_Daerah_Potensi_Banjir_Bulan_Provinsi_Jawa_Timur/2018/10_Oktober_2018/15-8-Prakiraan_Daerah_Potensi_Banjir_di_Provinsi_Jawa_Timur_Bulan_Oktober_2018_update_10_Agustus_2018.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-of-all-tags/images/Kli
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-21 02:38:05
(8 months ago)
[Fri Nov 21 09:37:34.686816 2025] [security2:error] [pid 16708:tid 140416474494656] [client 57.141.1 ...
show more
[Fri Nov 21 09:37:34.686816 2025] [security2:error] [pid 16708:tid 140416474494656] [client 57.141.14.43:38322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/prakiraan-bulanan/4116-prakiraan-sifat-hujan-bulanan/prakiraan-sifat-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-bulanan-sifat-hujan-di-propinsi-jawa-timur-tahun-2022/2159-prakiraan-bulanan-sifat-hujan-bulan-maret-tahun-2023-update-dari-analisis-bulan-november-tahun-2022-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-bulanan/4116-prakiraan-sifat-hujan-bulanan/prakira
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-20 16:06:05
(8 months ago)
[Thu Nov 20 23:06:04.912902 2025] [security2:error] [pid 97576:tid 140513364666048] [client 57.141.1 ...
show more
[Thu Nov 20 23:06:04.912902 2025] [security2:error] [pid 97576:tid 140513364666048] [client 57.141.14.43:50100] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ?id= found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?id=788:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-10-16-nopember-2015&catid=471 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?id=788:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-10-16-nopember-2015&catid=471 Request Basename = ars..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aR88bMO_UC9Geo0
...
show less
Hacking
Web App Attack