๐บ๐ธ
mnsf
2025-03-15 19:05:35
(1 year ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
Anonymous
2025-03-14 21:49:29
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐บ๐ธ
mnsf
2025-03-13 05:05:28
(1 year ago)
Too many Status 40X (19)
Brute-Force
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-12 20:13:11
(1 year ago)
[Thu Mar 13 02:59:06.155129 2025] [security2:error] [pid 11116:tid 140528694884032] [client 57.141.3 ...
show more
[Thu Mar 13 02:59:06.155129 2025] [security2:error] [pid 11116:tid 140528694884032] [client 57.141.3.26:58724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /profil/meteorologi/list-all-categories/575-meteorologi/prakiraan-meteorologi/index.php/profil/sitemap HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/profil/meteorologi/list-all-categories/575-meteorologi/prakiraan-meteorologi/index.php/profil/sitemap"] [unique_id "Z9HnirmR_sJFG4V9MNVSBgABLE8"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[11196] [pdhAo8Jkxhw] [Z9HnirmR_sJFG4V9MNVSBgABLE8] keep_alive=[1] [
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-10 15:58:09
(1 year ago)
[Mon Mar 10 22:56:13.679431 2025] [security2:error] [pid 11986:tid 140321941857984] [client 57.141.3 ...
show more
[Mon Mar 10 22:56:13.679431 2025] [security2:error] [pid 11986:tid 140321941857984] [client 57.141.3.26:35592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/prakiraan-bulanan/622-prakiraan-potensi-banjir/prakiraan-daerah-potensi-banjir-di-indonesia/prakiraan-daerah-potensi-banjir-di-indonesia-tahun-2017/2434-prakiraan-daerah-potensi-banjir-di-indonesia-bulan-april-2017-update-10-februari-2017 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/622-prakiraan-potensi-banjir/prakiraan-daerah-potensi-banjir-di-indonesia/prakiraan-daerah-potens
...
show less
Hacking
Web App Attack
Anonymous
2025-03-07 23:41:13
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐ฎ๐ฉ
hermawan
2025-03-06 13:32:47
(1 year ago)
[Thu Mar 06 20:28:29.062720 2025] [security2:error] [pid 578923:tid 140590654867136] [client 57.141. ...
show more
[Thu Mar 06 20:28:29.062720 2025] [security2:error] [pid 578923:tid 140590654867136] [client 57.141.3.26:38968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/buku/493-buku-edisi-setiap-1-bulan-sekali/buku-analisis-dan-prakiraan-bulanan-jawa-timur/buku-analisis-dan-prakiraan-bulanan-jawa-timur-tahun-2016/1251-buku-analisis-hujan-bulan-oktober-2016-dan-prakiraan-hujan-bulan-desember-2016-dan-januari-2017-serta-februari-2017 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/buku/493-buku-edisi-setiap-1-bulan-sekali/buku-analisis-dan-prakiraan-bulanan-jawa-ti
...
show less
Hacking
Web App Attack
๐ป๐ณ
Xuan Can
2025-03-05 03:56:32
(1 year ago)
(mod_security) mod_security (id:1010119) triggered by 57.141.3.26 (US/United States/-): 1 in the las ...
show more
(mod_security) mod_security (id:1010119) triggered by 57.141.3.26 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 10:56:24.716742 2025] [security2:error] [pid 22905:tid 22937] [client 57.141.3.26:0] [client 57.141.3.26] ModSecurity: Access denied with code 500 (phase 2). Pattern match "union" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "39"] [id "1010119"] [severity "CRITICAL"] [hostname "www.diendanmaychu.vn"] [uri "/member.php/3051-uniontran"] [unique_id "Z8fLaKJ32-xrIDnu3Yg2HwAAAAU"]
show less
Brute-Force
SSH
๐ป๐ณ
Xuan Can
2025-03-03 01:16:13
(1 year ago)
(mod_security) mod_security (id:1010119) triggered by 57.141.3.26 (US/United States/-): 1 in the las ...
show more
(mod_security) mod_security (id:1010119) triggered by 57.141.3.26 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 08:16:08.092966 2025] [security2:error] [pid 10355:tid 10404] [client 57.141.3.26:0] [client 57.141.3.26] ModSecurity: Access denied with code 500 (phase 2). Pattern match "union" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "39"] [id "1010119"] [severity "CRITICAL"] [hostname "www.diendanmaychu.vn"] [uri "/member.php/10455-thuyunion"] [unique_id "Z8UC2KK6DrE-_s7quohAEwAAARY"]
show less
Brute-Force
SSH
๐ฎ๐ฉ
hermawan
2025-03-01 08:50:15
(1 year ago)
[Sat Mar 01 15:07:55.149836 2025] [security2:error] [pid 25941:tid 139661393430208] [client 57.141.3 ...
show more
[Sat Mar 01 15:07:55.149836 2025] [security2:error] [pid 25941:tid 139661393430208] [client 57.141.3.26:36512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-all-categories/477-skema HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/477-skema"] [unique_id "Z8LAWzosoE77Wz85DZmH8gAA0Rc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[25965] [hQGca8vAfOw] [Z8LAWzosoE77Wz85DZmH8gAA0Rc] keep_alive=[1] [2025-03-01 15:07:55.149840] [R:Z8LAWzosoE77Wz85DZmH8gAA0Rc] UA:'meta-externalagent/1.1
...
show less
Hacking
Web App Attack
๐ป๐ณ
Xuan Can
2025-03-01 07:20:29
(1 year ago)
(mod_security) mod_security (id:1010119) triggered by 57.141.3.26 (US/United States/-): 1 in the las ...
show more
(mod_security) mod_security (id:1010119) triggered by 57.141.3.26 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 01 14:20:25.482707 2025] [security2:error] [pid 6085:tid 6130] [client 57.141.3.26:0] [client 57.141.3.26] ModSecurity: Access denied with code 500 (phase 2). Pattern match "union" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "39"] [id "1010119"] [severity "CRITICAL"] [hostname "www.diendanmaychu.vn"] [uri "/member.php/10455-thuyunion"] [unique_id "Z8K1OXhd1UJwWfqONa48kQAAAEs"]
show less
Brute-Force
SSH
Anonymous
2025-03-01 06:41:55
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐ฎ๐ฉ
hermawan
2025-03-01 05:21:06
(1 year ago)
[Sat Mar 01 12:03:51.310628 2025] [security2:error] [pid 3632:tid 140023038801600] [client 57.141.3. ...
show more
[Sat Mar 01 12:03:51.310628 2025] [security2:error] [pid 3632:tid 140023038801600] [client 57.141.3.26:55608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/analisis-iklim/analisis-dasarian/distribusi-curah-hujan-dasarian-provinsi-jawa-timur/555560315-analisis-dasarian-distribusi-curah-hujan-dasarian-ii-agustus-2023-tanggal-11-20-agustus-2023-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-dasarian/distribusi-curah-hujan-dasarian-provinsi-jawa-timur/555560315-analisis-dasarian-distribusi-curah-hujan-dasarian
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-02-28 19:54:25
(1 year ago)
[Sat Mar 01 02:33:43.740416 2025] [security2:error] [pid 12158:tid 140199801607872] [client 57.141.3 ...
show more
[Sat Mar 01 02:33:43.740416 2025] [security2:error] [pid 12158:tid 140199801607872] [client 57.141.3.26:33926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/analisis-distribusi-curah-hujan-jawa-timur-bulanan-tahun-2009 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/analisis-distribusi-curah-hujan-jawa-timur-bulanan-tahun-2009"] [unique_id "Z8IPl9Db98UiaL2dKzMLpAAA3BQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[12179] [WS9q4nCsY0o] [Z8IPl9Db98UiaL2dKzMLpAAA3BQ] keep
...
show less
Hacking
Web App Attack
๐ป๐ณ
Xuan Can
2025-02-28 05:03:33
(1 year ago)
(mod_security) mod_security (id:1010119) triggered by 57.141.3.26 (US/United States/-): 1 in the las ...
show more
(mod_security) mod_security (id:1010119) triggered by 57.141.3.26 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 28 12:03:27.166510 2025] [security2:error] [pid 2436:tid 2477] [client 57.141.3.26:0] [client 57.141.3.26] ModSecurity: Access denied with code 500 (phase 2). Pattern match "union" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "39"] [id "1010119"] [severity "CRITICAL"] [hostname "www.diendanmaychu.vn"] [uri "/member.php/10455-thuyunion"] [unique_id "Z8FDn4v2M4jyF-FMaNqcaAAAAE4"]
show less
Brute-Force
SSH