IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
Important Note: 57.141.3.28 is an IP address from within
our whitelist belonging to the subnet
57.141.3.0/24,
which we identify as: "Facebook".
Whitelisted netblocks are typically owned by trusted entities, such as Google
or Microsoft who may use them for search engine spiders. However, these same entities
sometimes also provide cloud servers and mail services which are easily abused. Pay special
attention when trusting or distrusting these IPs.
(mod_security) mod_security (id:20000222) triggered by 57.141.3.28 (US/United States/-): 1 in the la ...
show more(mod_security) mod_security (id:20000222) triggered by 57.141.3.28 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 16 22:42:16.050633 2025] [security2:error] [pid 12515:tid 12522] [remote 57.141.3.28:43374] [client 57.141.3.28] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-admin" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "46"] [id "20000222"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/huong-dan-thay-doi-duong-dan-dang-nhap-wp-admin-bang-plugin-wps-hide-login-tren-wordpress.html"] [unique_id "Z9bxWMjkpKSjiELi2waMGAAA2AY"]
show less
(mod_security) mod_security (id:20000222) triggered by 57.141.3.28 (US/United States/-): 1 in the la ...
show more(mod_security) mod_security (id:20000222) triggered by 57.141.3.28 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 21:26:03.801200 2025] [security2:error] [pid 36304:tid 37376] [remote 57.141.3.28:60346] [client 57.141.3.28] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-admin" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "46"] [id "20000222"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/huong-dan-sua-loi-khong-duoc-phep-truy-cap-wp-admin-trong-wordpress.html/amp"] [unique_id "Z8W7-73EOaJeFQMabfCr2gAADiM"]
show less
[Sat Mar 01 14:01:47.468135 2025] [security2:error] [pid 4745:tid 139661590648512] [client 57.141.3. ...
show more[Sat Mar 01 14:01:47.468135 2025] [security2:error] [pid 4745:tid 139661590648512] [client 57.141.3.28:52266] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "142"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ?id= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?id=853:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-12-18-januari-2016&catid=472&start=20 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?id=853:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-12-18-januari-2016&catid=472&start=20 R..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "Z8Kw2_-C_LIe
...
show less