๐ฎ๐ฉ
hermawan
2025-03-18 16:15:26
(1 year ago)
[Tue Mar 18 23:14:38.028306 2025] [security2:error] [pid 704825:tid 140241987090112] [client 57.141. ...
show more
[Tue Mar 18 23:14:38.028306 2025] [security2:error] [pid 704825:tid 140241987090112] [client 57.141.3.30:57144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/pengaduan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/pengaduan"] [unique_id "Z9mb7tOi1pYDzZg0msjQRAAB7UY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[704896] [34aJMyh/fVk] [Z9mb7tOi1pYDzZg0msjQRAAB7UY] keep_alive=[1] [2025-03-18 23:14:38.028310] [R:Z9mb7tOi1pYDzZg0msjQRAAB7UY] UA:'meta-externalagent/1.1 (+h
...
show less
Hacking
Web App Attack
Anonymous
2025-03-16 18:39:02
(1 year ago)
Malicious activity detected
Hacking
Web App Attack
Anonymous
2025-03-14 21:33:41
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐บ๐ธ
mnsf
2025-03-13 05:05:26
(1 year ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-12 19:42:42
(1 year ago)
[Thu Mar 13 02:31:44.388028 2025] [security2:error] [pid 5819:tid 140529805276864] [client 57.141.3. ...
show more
[Thu Mar 13 02:31:44.388028 2025] [security2:error] [pid 5819:tid 140529805276864] [client 57.141.3.30:46188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/prakiraan-bulanan/250-prakiraan-curah-hujan-bulanan/prakiraan-curah-hujan-bulanan-di-malang/prakiraan-curah-hujan-bulanan-di-malang-tahun-2015/521-prakiraan-curah-hujan-di-malang-bulan-juni-tahun-2015 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/250-prakiraan-curah-hujan-bulanan/prakiraan-curah-hujan-bulanan-di-malang/prakiraan-curah-hujan-bulanan-di-malang-tahun-2015/521-prakira
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-11 02:18:30
(1 year ago)
[Tue Mar 11 09:15:00.211877 2025] [security2:error] [pid 103355:tid 139784022378176] [client 57.141. ...
show more
[Tue Mar 11 09:15:00.211877 2025] [security2:error] [pid 103355:tid 139784022378176] [client 57.141.3.30:53756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-meteorologi?format=feed&type=atom HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-meteorologi"] [unique_id "Z8-cpPt1e-CTCiyQp0_5ZwAA4Qo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[103366] [UMLlpw9Fr3s] [Z8-cpPt1e-CTCiyQp0_5ZwAA4Qo] keep_alive=[1] [2025-03-11 09:15:00.211882] [R:Z8-cpPt1e-CTC
...
show less
Hacking
Web App Attack
Anonymous
2025-03-08 05:12:08
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐ป๐ณ
Xuan Can
2025-03-05 06:01:38
(1 year ago)
(mod_security) mod_security (id:1010119) triggered by 57.141.3.30 (US/United States/-): 1 in the las ...
show more
(mod_security) mod_security (id:1010119) triggered by 57.141.3.30 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 13:01:34.634801 2025] [security2:error] [pid 32911:tid 32952] [client 57.141.3.30:0] [client 57.141.3.30] ModSecurity: Access denied with code 500 (phase 2). Pattern match "union" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "39"] [id "1010119"] [severity "CRITICAL"] [hostname "www.diendanmaychu.vn"] [uri "/member.php/10455-thuyunion"] [unique_id "Z8fovqn7cpmbMg_Rr6jhXwAAAU4"]
show less
Brute-Force
SSH
๐บ๐ธ
mnsf
2025-03-04 00:05:23
(1 year ago)
Request Overload (161)
Brute-Force
Web App Attack
๐บ๐ธ
MPL
2025-03-03 23:17:45
(1 year ago)
tcp/443 (12 or more attempts)
Port Scan
Anonymous
2025-03-01 15:16:10
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐ฎ๐ฉ
hermawan
2025-03-01 07:25:27
(1 year ago)
[Sat Mar 01 14:24:56.379641 2025] [security2:error] [pid 12616:tid 139660448171712] [client 57.141.3 ...
show more
[Sat Mar 01 14:24:56.379641 2025] [security2:error] [pid 12616:tid 139660448171712] [client 57.141.3.30:53508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/prakiraan-bulanan/4117-prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman/prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-provinsi-jawa-timur/prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-provinsi-jawa-timur-tahun-2022/1734-prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-jawa-timur-untuk..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/4117-prakiraa
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-03-01 04:59:56
(1 year ago)
[Sat Mar 01 11:52:34.392052 2025] [security2:error] [pid 3632:tid 140023307368128] [client 57.141.3. ...
show more
[Sat Mar 01 11:52:34.392052 2025] [security2:error] [pid 3632:tid 140023307368128] [client 57.141.3.30:37848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/159-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2016/927-analisis-dinamika-atmosfer-dan-laut-dasarian-i-maret-2016 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/159-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2016/927-analisis-dinamika-atmosfer-dan-laut-dasarian-i-maret-2016"] [un
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-02-28 19:57:26
(1 year ago)
[Sat Mar 01 02:34:32.242846 2025] [security2:error] [pid 12158:tid 140199768037056] [client 57.141.3 ...
show more
[Sat Mar 01 02:34:32.242846 2025] [security2:error] [pid 12158:tid 140199768037056] [client 57.141.3.30:39496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561302-prakiraan-bulanan-curah-hujan-bulan-september-tahun-2024-update-dari-analisis-bulan-juli-tahun-2024-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561302-prakiraan-bulanan-curah-hujan-bulan-september-tah
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-02-28 17:03:02
(1 year ago)
[Fri Feb 28 23:57:19.659055 2025] [security2:error] [pid 7182:tid 140162203866816] [client 57.141.3. ...
show more
[Fri Feb 28 23:57:19.659055 2025] [security2:error] [pid 7182:tid 140162203866816] [client 57.141.3.30:33238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /Prakiraan_Daerah_Potensi_Banjir_Bulanan_di_Jatim-v1.html HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/Prakiraan_Daerah_Potensi_Banjir_Bulanan_di_Jatim-v1.html"] [unique_id "Z8Hq704hVcsIO5ajquN7OwAA5RQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[7203] [v4gUs74+Ios] [Z8Hq704hVcsIO5ajquN7OwAA5RQ] keep_alive=[1] [2025-02-28 23:57:19.659058] [R:Z8Hq704hVcsIO5ajquN7OwAA5RQ] UA:'meta-externalagent/1.1 (+htt
...
show less
Hacking
Web App Attack