๐ฎ๐ฉ
hermawan
2025-03-18 17:24:23
(1 year ago)
[Wed Mar 19 00:00:17.568582 2025] [security2:error] [pid 8013:tid 140049438443200] [client 57.141.3. ...
show more
[Wed Mar 19 00:00:17.568582 2025] [security2:error] [pid 8013:tid 140049438443200] [client 57.141.3.20:34836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-all-categories/4076-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur/prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-tahun-2021/1585-prakiraan-dasarian-daerah-potensi-banjir-di-pr..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-cate
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-18 02:53:36
(1 year ago)
[Tue Mar 18 09:51:44.479804 2025] [security2:error] [pid 346686:tid 140351156258496] [client 57.141. ...
show more
[Tue Mar 18 09:51:44.479804 2025] [security2:error] [pid 346686:tid 140351156258496] [client 57.141.3.20:40040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-all-categories/4076-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur/prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-tahun-2021/555558476-prakiraan-dasarian-daerah-potensi-banjir-..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-ca
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-17 17:39:38
(1 year ago)
[Tue Mar 18 00:35:39.524722 2025] [security2:error] [pid 77064:tid 140568382400192] [client 57.141.3 ...
show more
[Tue Mar 18 00:35:39.524722 2025] [security2:error] [pid 77064:tid 140568382400192] [client 57.141.3.20:38042] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "142"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ?id= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?id=1287:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-desember-2016-3-januari-2017&catid=472&start=30 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?id=1287:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-desember-2016-3-janua..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "Z9hda5D9vKx
...
show less
Hacking
Web App Attack
๐บ๐ธ
mnsf
2025-03-15 19:05:27
(1 year ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
Anonymous
2025-03-14 21:50:53
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐บ๐ธ
mnsf
2025-03-13 05:05:28
(1 year ago)
Too many Status 40X (16)
Request Overload (119)
Brute-Force
Web App Attack
Anonymous
2025-03-13 04:40:33
(1 year ago)
[13/Mar/2025:15:40:32 +1100] "GET /sitemap.xml HTTP/1.1" 404 196 "meta-externalagent/1.1 (+https://d ...
show more
[13/Mar/2025:15:40:32 +1100] "GET /sitemap.xml HTTP/1.1" 404 196 "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-12 20:22:39
(1 year ago)
[Thu Mar 13 03:06:50.801880 2025] [security2:error] [pid 12701:tid 140529822062272] [client 57.141.3 ...
show more
[Thu Mar 13 03:06:50.801880 2025] [security2:error] [pid 12701:tid 140529822062272] [client 57.141.3.20:40926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/3880-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2018/462-analisis-dinamika-atmosfer-laut-analisis-dan-prediksi-curah-hujan-update-dasarian-ii-november-2018 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/3880-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2018/462-analisis-dinamika-a
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-11 02:20:20
(1 year ago)
[Tue Mar 11 09:15:11.005207 2025] [security2:error] [pid 103355:tid 139783955236544] [client 57.141. ...
show more
[Tue Mar 11 09:15:11.005207 2025] [security2:error] [pid 103355:tid 139783955236544] [client 57.141.3.20:32868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-sifat-hujan/555560303-analisis-bulanan-distribusi-sifat-hujan-bulan-juli-tahun-2023-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-sifat-hujan/555560303-analisis-bulanan-distribusi-sifat-hujan-bulan-juli-tahun-2023-di-pro
...
show less
Hacking
Web App Attack
Anonymous
2025-03-07 22:40:37
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐ฎ๐ฉ
hermawan
2025-03-06 13:35:05
(1 year ago)
[Thu Mar 06 20:28:33.701816 2025] [security2:error] [pid 578923:tid 140589869811392] [client 57.141. ...
show more
[Thu Mar 06 20:28:33.701816 2025] [security2:error] [pid 578923:tid 140589869811392] [client 57.141.3.20:46056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-all-categories/3961-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur/prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-tahun-2019/1161-prakiraan-dasarian-daerah-potensi-banjir-di-pr..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-ca
...
show less
Hacking
Web App Attack
๐บ๐ธ
mnsf
2025-03-04 00:05:23
(1 year ago)
Too many Status 40X (19)
Request Overload (219)
Brute-Force
Web App Attack
๐ป๐ณ
Xuan Can
2025-03-03 16:38:20
(1 year ago)
(mod_security) mod_security (id:1010111) triggered by 57.141.3.20 (US/United States/-): 1 in the las ...
show more
(mod_security) mod_security (id:1010111) triggered by 57.141.3.20 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 23:38:13.677145 2025] [security2:error] [pid 29037:tid 29079] [client 57.141.3.20:0] [client 57.141.3.20] ModSecurity: Access denied with code 500 (phase 2). Pattern match "=shell" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "25"] [id "1010111"] [severity "CRITICAL"] [hostname "www.diendanmaychu.vn"] [uri "/tags.php"] [unique_id "Z8Xa9cp42L12m-LVeroXMgAAAM8"]
show less
Brute-Force
SSH
๐ฎ๐ฉ
hermawan
2025-03-01 07:36:33
(1 year ago)
[Sat Mar 01 14:33:14.957692 2025] [security2:error] [pid 14530:tid 139661447972544] [client 57.141.3 ...
show more
[Sat Mar 01 14:33:14.957692 2025] [security2:error] [pid 14530:tid 139661447972544] [client 57.141.3.20:33868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-all-categories/4080-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-curah-hujan-dasarian/prakiraan-deterministik-curah-hujan-dasarian/prakiraan-deterministik-curah-hujan-dasarian-provinsi-jawa-timur/prakiraan-dasarian-deterministik-curah-hujan-provinsi-jawa-timur-tahun-2021/555558582-prak..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-cat
...
show less
Hacking
Web App Attack
Anonymous
2025-03-01 07:34:26
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force