๐ฎ๐ฉ
hermawan
2025-03-18 17:09:33
(1 year ago)
[Tue Mar 18 23:54:59.661358 2025] [security2:error] [pid 4594:tid 140048389236416] [client 57.141.3. ...
show more
[Tue Mar 18 23:54:59.661358 2025] [security2:error] [pid 4594:tid 140048389236416] [client 57.141.3.15:33942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/peta-zona-musim-zom-propinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/peta-zona-musim-zom-propinsi-jawa-timur"] [unique_id "Z9mlY_fms6JRaJbHVDiaDAAAAiU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[4632] [QvDgw8irzQ0] [Z9mlY_fms6JRaJbHVDiaDAAAAiU] keep_alive=[1] [2025-03-18 23:54:59.661364] [R:Z9m
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-18 03:05:07
(1 year ago)
[Tue Mar 18 10:04:37.018731 2025] [security2:error] [pid 352978:tid 140359300392640] [client 57.141. ...
show more
[Tue Mar 18 10:04:37.018731 2025] [security2:error] [pid 352978:tid 140359300392640] [client 57.141.3.15:36626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/3958-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2019/701-analisis-dinamika-atmosfer-laut-analisis-dan-prediksi-curah-hujan-update-dasarian-i-mei-2019 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/3958-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2019/701-analisis-dinamika-atmosf
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-17 17:30:42
(1 year ago)
[Tue Mar 18 00:29:12.724288 2025] [security2:error] [pid 74323:tid 140566929262272] [client 57.141.3 ...
show more
[Tue Mar 18 00:29:12.724288 2025] [security2:error] [pid 74323:tid 140566929262272] [client 57.141.3.15:37894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /Prakiraan_Curah_Hujan_Bulanan_Jatim.html HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/Prakiraan_Curah_Hujan_Bulanan_Jatim.html"] [unique_id "Z9hb6HsKbuT60i8N-2uHRgAA1DE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[74373] [N85oIIWYDvw] [Z9hb6HsKbuT60i8N-2uHRgAA1DE] keep_alive=[1] [2025-03-18 00:29:12.724291] [R:Z9hb6HsKbuT60i8N-2uHRgAA1DE] UA:'meta-externalagent/1.1 (+https://developers.facebook.com/d
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-17 02:43:32
(1 year ago)
[Mon Mar 17 09:43:02.306076 2025] [security2:error] [pid 510607:tid 140267856271040] [client 57.141. ...
show more
[Mon Mar 17 09:43:02.306076 2025] [security2:error] [pid 510607:tid 140267856271040] [client 57.141.3.15:41622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-all-categories/4164-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-curah-hujan-dasarian/prakiraan-deterministik-curah-hujan-dasarian/prakiraan-deterministik-curah-hujan-dasarian-provinsi-jawa-timur/prakiraan-dasarian-deterministik-curah-hujan-provinsi-jawa-timur-tahun-2023/2201-prakiraan..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-ca
...
show less
Hacking
Web App Attack
Anonymous
2025-03-16 21:14:33
(1 year ago)
cgi-bin Hack Attempts
Hacking
Brute-Force
Web App Attack
Anonymous
2025-03-14 21:35:22
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐ฎ๐ฉ
hermawan
2025-03-13 07:15:20
(1 year ago)
[Thu Mar 13 07:06:17.537772 2025] [security2:error] [pid 3922:tid 140670079542976] [client 57.141.3. ...
show more
[Thu Mar 13 07:06:17.537772 2025] [security2:error] [pid 3922:tid 140670079542976] [client 57.141.3.15:58472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/using-joomla/extensions/594-meteorologi/prakiraan-meteorologi/prakiraan-cuaca-jombang/1209-prakiraan-cuaca-jombang HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/using-joomla/extensions/594-meteorologi/prakiraan-meteorologi/prakiraan-cuaca-jombang/1209-prakiraan-cuaca-jombang"] [unique_id "Z9KD6e8lwKqpgwOeBlFV1AABVBU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[3944] [6S1P9TuXgso] [Z
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-13 06:44:57
(1 year ago)
[Thu Mar 13 06:32:43.690553 2025] [security2:error] [pid 2182:tid 140625299076800] [client 57.141.3. ...
show more
[Thu Mar 13 06:32:43.690553 2025] [security2:error] [pid 2182:tid 140625299076800] [client 57.141.3.15:44756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-arti HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-arti"] [unique_id "Z9J8CwbfVN8GvzA1JBBSfQAArBI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2201] [OltGfVtI4Vo] [Z9J8CwbfVN8GvzA1JBBSfQAArBI] keep_alive=[1] [2025-03-13 06:32:43.690559] [R:Z9J8CwbfVN8GvzA1J
...
show less
Hacking
Web App Attack
๐บ๐ธ
MPL
2025-03-13 05:07:15
(1 year ago)
tcp/443 (8 or more attempts)
Port Scan
๐บ๐ธ
mnsf
2025-03-13 04:05:18
(1 year ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-12 20:15:15
(1 year ago)
[Thu Mar 13 03:01:27.351446 2025] [security2:error] [pid 11116:tid 140529813669568] [client 57.141.3 ...
show more
[Thu Mar 13 03:01:27.351446 2025] [security2:error] [pid 11116:tid 140529813669568] [client 57.141.3.15:56222] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "142"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ?id= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?id=617&start=180 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?id=617&start=180 Request Basename = arsip-artikel"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "Z9HoF7mR_sJFG4V9MNVSGQABNgo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[11127] [b1arq0Jnxhw] [Z9HoF7mR_sJFG4V9MNVSGQABNgo] keep_alive=[1] [2025-03-13 03:01:27.351449] [
...
show less
Hacking
Web App Attack
๐บ๐ธ
Zandro
2025-03-10 19:20:58
(1 year ago)
significant error rate
Bad Web Bot
Anonymous
2025-03-08 13:47:22
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐ฆ๐บ
oncord
2025-03-07 14:57:30
(1 year ago)
Form spam
Web Spam
๐บ๐ธ
mnsf
2025-03-04 00:05:24
(1 year ago)
Too many Status 40X (13)
Request Overload (235)
Brute-Force
Web App Attack