๐ฎ๐ฉ
hermawan
2025-03-18 04:15:41
(1 year ago)
[Tue Mar 18 11:15:00.008619 2025] [security2:error] [pid 380395:tid 140358227846848] [client 57.141. ...
show more
[Tue Mar 18 11:15:00.008619 2025] [security2:error] [pid 380395:tid 140358227846848] [client 57.141.3.27:42318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/peringatan-dini-kekeringan-di-propinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/peringatan-dini-kekeringan-di-propinsi-jawa-timur"] [unique_id "Z9jzRD2Efuhu35nUleCBAwACk0k"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[380469] [827tJZ4ROC4] [Z9jzRD2Efuhu35nUleCBAwACk0k] keep_alive=[1] [2025-03-18
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-17 17:29:10
(1 year ago)
[Tue Mar 18 00:27:47.028093 2025] [security2:error] [pid 74323:tid 140567038367424] [client 57.141.3 ...
show more
[Tue Mar 18 00:27:47.028093 2025] [security2:error] [pid 74323:tid 140567038367424] [client 57.141.3.27:47702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-dasarian-deterministik-curah-hujan-provinsi-jawa-timur-tahun-2022 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-dasarian-deterministik-curah-hujan-provinsi-jawa-timur-tahun-2022"] [unique_id "Z9hbk3sKbuT60i8N-2uHNgAAuiQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[74360] [pBxNG0WXDvw] [Z9hbk
...
show less
Hacking
Web App Attack
๐บ๐ธ
mnsf
2025-03-15 19:05:27
(1 year ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
Anonymous
2025-03-14 21:33:18
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐ฆ๐บ
oncord
2025-03-14 08:54:37
(1 year ago)
Form spam
Web Spam
๐ฎ๐ฉ
hermawan
2025-03-12 20:25:13
(1 year ago)
[Thu Mar 13 03:08:46.433752 2025] [security2:error] [pid 12701:tid 140529452783296] [client 57.141.3 ...
show more
[Thu Mar 13 03:08:46.433752 2025] [security2:error] [pid 12701:tid 140529452783296] [client 57.141.3.27:58628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/analisis-bulanan/172-analisis-distribusi-hujan/analisis-distribusi-sifat-hujan/analisis-distribusi-sifat-hujan-jawa-timur-bulanan/analisis-distribusi-sifat-hujan-jawa-timur-bulanan-tahun-2013/294-analisis-distribusi-sifat-hujan-jawa-timur-bulan-september-tahun-2013 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/172-analisis-distribusi-hujan/analisis-distribusi-sifat-hujan/analisis-
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-11 02:15:41
(1 year ago)
[Tue Mar 11 09:14:16.825578 2025] [security2:error] [pid 102728:tid 139783997200064] [client 57.141. ...
show more
[Tue Mar 11 09:14:16.825578 2025] [security2:error] [pid 102728:tid 139783997200064] [client 57.141.3.27:37620] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "142"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ?id= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?id=1170:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-11-17-oktober-2016&catid=472 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?id=1170:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-11-17-oktober-2016&catid=472 Request Basename ..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "Z8-ceDEGds
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-10 15:58:09
(1 year ago)
[Mon Mar 10 22:56:14.670790 2025] [security2:error] [pid 11986:tid 140321933465280] [client 57.141.3 ...
show more
[Mon Mar 10 22:56:14.670790 2025] [security2:error] [pid 11986:tid 140321933465280] [client 57.141.3.27:48702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-all-categories/80-klimatologi/prakiraan-klimatologi/index.php/prakiraan-musim/555-prakiraan-awal-musim/prakiraan-awal-musim-hujan/prakiraan-awal-musim-hujan-propinsi-jawa-timur/prakiraan-awal-musim-hujan-propinsi-jawa-timur-tahun-2017 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-categories/80-klimatologi/prakiraan-klimatologi/index.php/prakiraan-musi
...
show less
Hacking
Web App Attack
Anonymous
2025-03-09 06:57:32
(1 year ago)
cgi-bin Hack Attempts
Hacking
Brute-Force
Web App Attack
Anonymous
2025-03-08 13:40:37
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐ฆ๐บ
oncord
2025-03-05 22:33:12
(1 year ago)
Form spam
Web Spam
Anonymous
2025-03-01 15:31:09
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐ฎ๐ฉ
hermawan
2025-03-01 08:52:49
(1 year ago)
[Sat Mar 01 15:13:01.339487 2025] [security2:error] [pid 31214:tid 139661445899968] [client 57.141.3 ...
show more
[Sat Mar 01 15:13:01.339487 2025] [security2:error] [pid 31214:tid 139661445899968] [client 57.141.3.27:33302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/analisis-bulanan/170-analisis-distribusi-hujan/analisis-distribusi-sifat-hujan/analisis-distribusi-sifat-hujan-jawa-timur-bulanan/analisis-distribusi-sifat-hujan-jawa-timur-bulanan-tahun-2011/264-analisis-distribusi-sifat-hujan-jawa-timur-bulan-april-tahun-2011 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/170-analisis-distribusi-hujan/analisis-distribusi-sifat-hujan/analisis-dist
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-01 01:44:16
(1 year ago)
[Sat Mar 01 08:05:30.704773 2025] [security2:error] [pid 3641:tid 140266589554368] [client 57.141.3. ...
show more
[Sat Mar 01 08:05:30.704773 2025] [security2:error] [pid 3641:tid 140266589554368] [client 57.141.3.27:33020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-all-categories/3940-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-curah-hujan-dasarian/prakiraan-deterministik-curah-hujan-dasarian/prakiraan-deterministik-curah-hujan-dasarian-provinsi-jawa-timur/prakiraan-deterministik-curah-hujan-dasarian-provinsi-jawa-timur-tahun-2019?format=feed&ty..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-cate
...
show less
Hacking
Web App Attack
๐ป๐ณ
Xuan Can
2025-03-01 00:05:38
(1 year ago)
(mod_security) mod_security (id:1010119) triggered by 57.141.3.27 (US/United States/-): 1 in the las ...
show more
(mod_security) mod_security (id:1010119) triggered by 57.141.3.27 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 01 07:05:31.164779 2025] [security2:error] [pid 5831:tid 5863] [client 57.141.3.27:0] [client 57.141.3.27] ModSecurity: Access denied with code 500 (phase 2). Pattern match "union" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "39"] [id "1010119"] [severity "CRITICAL"] [hostname "www.diendanmaychu.vn"] [uri "/member.php/3051-uniontran"] [unique_id "Z8JPS9y6iYVCDvOvuJDQVgAAAAU"]
show less
Brute-Force
SSH