Anonymous
2025-03-14 21:45:11
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐บ๐ธ
mnsf
2025-03-13 04:05:15
(1 year ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-12 21:10:11
(1 year ago)
[Thu Mar 13 03:37:43.920372 2025] [security2:error] [pid 17215:tid 140529595459264] [client 57.141.3 ...
show more
[Thu Mar 13 03:37:43.920372 2025] [security2:error] [pid 17215:tid 140529595459264] [client 57.141.3.2:32924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/informasi-iklim/artikel/126-artikel-perubahan-iklim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/artikel/126-artikel-perubahan-iklim"] [unique_id "Z9Hwl253AacjXp6aBK8LNAACCiA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[17248] [1iZnLeNCahE] [Z9Hwl253AacjXp6aBK8LNAACCiA] keep_alive=[1] [2025-03-13 03:37:43.920375] [R:Z9Hwl253AacjXp6aBK8LNAACCiA] UA:'meta-externalagen
...
show less
Hacking
Web App Attack
Anonymous
2025-03-08 13:52:05
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
Anonymous
2025-03-05 13:52:18
(1 year ago)
Excessive connections to http/https ports
DDoS Attack
๐บ๐ธ
mnsf
2025-03-04 00:05:24
(1 year ago)
Too many Status 40X (22)
Request Overload (229)
Brute-Force
Web App Attack
๐ป๐ณ
Xuan Can
2025-03-02 22:49:08
(1 year ago)
(mod_security) mod_security (id:1010113) triggered by 57.141.3.2 (US/United States/-): 1 in the last ...
show more
(mod_security) mod_security (id:1010113) triggered by 57.141.3.2 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 05:49:01.803995 2025] [security2:error] [pid 24828:tid 24871] [client 57.141.3.2:0] [client 57.141.3.2] ModSecurity: Access denied with code 500 (phase 2). Pattern match "boom" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "27"] [id "1010113"] [severity "CRITICAL"] [hostname "www.diendanmaychu.vn"] [uri "/member.php/386-bboomm"] [unique_id "Z8TgXagaeDq4svXfr4Qc2AAAAAg"]
show less
Brute-Force
SSH
๐ป๐ณ
Xuan Can
2025-03-02 17:37:45
(1 year ago)
(mod_security) mod_security (id:1010119) triggered by 57.141.3.2 (US/United States/-): 1 in the last ...
show more
(mod_security) mod_security (id:1010119) triggered by 57.141.3.2 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 00:37:42.113489 2025] [security2:error] [pid 27749:tid 27935] [client 57.141.3.2:0] [client 57.141.3.2] ModSecurity: Access denied with code 500 (phase 2). Pattern match "union" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "39"] [id "1010119"] [severity "CRITICAL"] [hostname "www.diendanmaychu.vn"] [uri "/member.php/3051-uniontran"] [unique_id "Z8SXZhbHiYezvfUPEP4jLQAAAcw"]
show less
Brute-Force
SSH
๐ป๐ณ
Xuan Can
2025-03-01 10:07:13
(1 year ago)
(mod_security) mod_security (id:1010113) triggered by 57.141.3.2 (US/United States/-): 1 in the last ...
show more
(mod_security) mod_security (id:1010113) triggered by 57.141.3.2 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 01 17:07:09.307765 2025] [security2:error] [pid 20047:tid 20075] [client 57.141.3.2:0] [client 57.141.3.2] ModSecurity: Access denied with code 500 (phase 2). Pattern match "boom" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "27"] [id "1010113"] [severity "CRITICAL"] [hostname "www.diendanmaychu.vn"] [uri "/member.php/386-bboomm"] [unique_id "Z8LcTXZHiETFHe7hRXB71gAAAEE"]
show less
Brute-Force
SSH
๐ฎ๐ฉ
hermawan
2025-03-01 07:13:08
(1 year ago)
[Sat Mar 01 14:11:42.077493 2025] [security2:error] [pid 8927:tid 139661187798720] [client 57.141.3. ...
show more
[Sat Mar 01 14:11:42.077493 2025] [security2:error] [pid 8927:tid 139661187798720] [client 57.141.3.2:53144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/prakiraan-bulanan/3876-prakiraan-potensi-banjir/prakiraan-potensi-banjir-di-propinsi-jawa-timur/prakiraan-daerah-potensi-banjir-provinsi-jawa-timur-tahun-2018/555556516-prakiraan-daerah-potensi-banjir-provinsi-jawa-timur-bulan-oktober-2018-update-10-juli-2018 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/3876-prakiraan-potensi-banjir/prakiraan-potensi-banjir-di-propinsi-jawa-timur/
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-01 05:20:05
(1 year ago)
[Sat Mar 01 12:03:22.207149 2025] [security2:error] [pid 3632:tid 140022424753856] [client 57.141.3. ...
show more
[Sat Mar 01 12:03:22.207149 2025] [security2:error] [pid 3632:tid 140022424753856] [client 57.141.3.2:43016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/gempa-terkini"] [unique_id "Z8KVGmN8S6_4PBgHdiBNfAAApkM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[3700] [Kzec16jjPzc] [Z8KVGmN8S6_4PBgHdiBNfAAApkM] keep_alive=[1] [2025-03-01 12:03:22.207152] [R:Z8KVGmN8S6_4PBgHdiBNfAAApkM] UA:'meta-externalagent/1.1
...
show less
Hacking
Web App Attack
Anonymous
2025-03-01 05:12:29
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐ฎ๐ฉ
hermawan
2025-02-28 20:06:29
(1 year ago)
[Sat Mar 01 02:54:02.768272 2025] [security2:error] [pid 12158:tid 140198911149760] [client 57.141.3 ...
show more
[Sat Mar 01 02:54:02.768272 2025] [security2:error] [pid 12158:tid 140198911149760] [client 57.141.3.2:35868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-all-categories/4012-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur/prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-tahun-2020/555558446-prakiraan-dasarian-daerah-potensi-banjir-..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-cate
...
show less
Hacking
Web App Attack
Anonymous
2025-02-28 01:03:01
(1 year ago)
cgi-bin Hack Attempts
Hacking
Brute-Force
Web App Attack
Anonymous
2025-02-26 09:26:49
(1 year ago)
[26/Feb/2025:20:26:48 +1100] "GET /sitemap HTTP/1.1" 404 196 "meta-externalagent/1.1 (+https://devel ...
show more
[26/Feb/2025:20:26:48 +1100] "GET /sitemap HTTP/1.1" 404 196 "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
show less
Hacking
Web App Attack