๐ฎ๐ฉ
hermawan
2025-06-09 21:27:50
(11 months ago)
[Tue Jun 10 04:27:19.951443 2025] [security2:error] [pid 1309513:tid 139881601816256] [client 69.171 ...
show more
[Tue Jun 10 04:27:19.951443 2025] [security2:error] [pid 1309513:tid 139881601816256] [client 69.171.230.12:51908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/gempa-terkini"] [unique_id "aEdRt6F-zJhnLL4Y3cgZOAAABQE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1309515] [Sr2pPjIrRwk] [aEdRt6F-zJhnLL4Y3cgZOAAABQE] keep_alive=[1] [2025-06-10 04:27:19.951451] [R:aEdRt6F-zJhnLL4Y3cgZOAAABQE] UA:'meta-externala
...
show less
Hacking
Web App Attack
๐ซ๐ท
Sklurk
2025-06-09 20:30:15
(11 months ago)
Web App Attack
Web App Attack
๐ฎ๐ฉ
hermawan
2025-06-05 03:26:25
(11 months ago)
[Thu Jun 05 10:08:55.193467 2025] [security2:error] [pid 59602:tid 140562502960832] [client 69.171.2 ...
show more
[Thu Jun 05 10:08:55.193467 2025] [security2:error] [pid 59602:tid 140562502960832] [client 69.171.230.12:34982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561950-prediksi-bulanan-curah-hujan-bulan-juni-tahun-2025-update-dari-analisis-bulan-april-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561950-prediksi-bulanan-curah-hujan-bulan-juni-tahun-2025-update-dari-analisis-bulan-april-tahun-20
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-06-03 23:52:24
(1 year ago)
[Wed Jun 04 06:45:12.134621 2025] [security2:error] [pid 61472:tid 139724439062208] [client 69.171.2 ...
show more
[Wed Jun 04 06:45:12.134621 2025] [security2:error] [pid 61472:tid 139724439062208] [client 69.171.230.12:53184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [unique_id "aD-JCG-8fAtAbFsC-jijVQAACho"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[61499] [LTKteCvgino] [aD-JCG-
...
show less
Hacking
Web App Attack
๐บ๐ธ
ersei.net
2025-06-03 14:53:45
(1 year ago)
Brute force multiple 403s
Brute-Force
๐ฎ๐ฉ
hermawan
2025-06-03 10:13:48
(1 year ago)
[Tue Jun 03 17:13:02.962149 2025] [security2:error] [pid 148146:tid 140474829498048] [client 69.171. ...
show more
[Tue Jun 03 17:13:02.962149 2025] [security2:error] [pid 148146:tid 140474829498048] [client 69.171.230.12:52358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/analisis-iklim/analisis-dasarian/distribusi-curah-hujan-dasarian-provinsi-jawa-timur/555561865-analisis-dasarian-distribusi-curah-hujan-dasarian-ii-april-2025-tanggal-11-20-april-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-dasarian/distribusi-curah-hujan-dasarian-provinsi-jawa-timur/555561865-analisis-dasarian-distribusi-curah-hujan-dasarian
...
show less
Hacking
Web App Attack
๐ฉ๐ช
v1nc
2025-05-31 02:06:44
(1 year ago)
69.171.230.12 - - [31/May/2025:02:06:44 +0000] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexter ...
show more
69.171.230.12 - - [31/May/2025:02:06:44 +0000] "GET /robots.txt HTTP/1.1" 301 162 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
show less
Hacking
Anonymous
2025-05-30 22:19:07
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐ฎ๐ฉ
hermawan
2025-05-29 18:31:18
(1 year ago)
[Fri May 30 01:24:55.422677 2025] [security2:error] [pid 69819:tid 139909986657984] [client 69.171.2 ...
show more
[Fri May 30 01:24:55.422677 2025] [security2:error] [pid 69819:tid 139909986657984] [client 69.171.230.12:42478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561857-prediksi-bulanan-curah-hujan-bulan-juni-tahun-2025-update-dari-analisis-bulan-februari-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561857-prediksi-bulanan-curah-hujan-bulan-juni-tahun-2025-update-dari-analisis-bulan-februari-ta
...
show less
Hacking
Web App Attack
๐ฌ๐ง
Mendip_Defender
2025-05-29 15:38:09
(1 year ago)
69.171.230.12 - - [29/May/2025:16:28:06 +0100] "GET /robots.txt HTTP/1.0" 404 1607 "-" "facebookexte ...
show more
69.171.230.12 - - [29/May/2025:16:28:06 +0100] "GET /robots.txt HTTP/1.0" 404 1607 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
69.171.230.12 - - [29/May/2025:16:36:13 +0100] "GET /robots.txt HTTP/1.0" 404 1607 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
69.171.230.12 - - [29/May/2025:16:38:07 +0100] "GET /robots.txt HTTP/1.0" 404 1607 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-05-29 14:13:34
(1 year ago)
[Thu May 29 20:54:45.155851 2025] [security2:error] [pid 32846:tid 140008311662272] [client 69.171.2 ...
show more
[Thu May 29 20:54:45.155851 2025] [security2:error] [pid 32846:tid 140008311662272] [client 69.171.230.12:35754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561464-prakiraan-bulanan-curah-hujan-bulan-januari-tahun-2025-update-dari-analisis-bulan-september-tahun-2024-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561464-prakiraan-bulanan-curah-hujan-bulan-januari-
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-05-29 10:20:46
(1 year ago)
[Thu May 29 17:14:02.331036 2025] [security2:error] [pid 18073:tid 140697997924032] [client 69.171.2 ...
show more
[Thu May 29 17:14:02.331036 2025] [security2:error] [pid 18073:tid 140697997924032] [client 69.171.230.12:48722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/gempa-terkini"] [unique_id "aDgzakcAheRh3H0twp6G7gABDQU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[18079] [fduFjtunYRA] [aDgzakcAheRh3H0twp6G7gABDQU] keep_alive=[1] [2025-05-29 17:14:02.331042] [R:aDgzakcAheRh3H0twp6G7gABDQU] UA:'meta-externalagent
...
show less
Hacking
Web App Attack
๐ฌ๐ง
Mendip_Defender
2025-05-28 14:06:35
(1 year ago)
69.171.230.12 - - [28/May/2025:14:57:08 +0100] "GET /robots.txt HTTP/1.0" 404 1607 "-" "facebookexte ...
show more
69.171.230.12 - - [28/May/2025:14:57:08 +0100] "GET /robots.txt HTTP/1.0" 404 1607 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
69.171.230.12 - - [28/May/2025:15:05:54 +0100] "GET /robots.txt HTTP/1.0" 404 1607 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
69.171.230.12 - - [28/May/2025:15:06:34 +0100] "GET /robots.txt HTTP/1.0" 404 1607 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-05-28 13:53:44
(1 year ago)
[Wed May 28 20:51:24.855830 2025] [security2:error] [pid 369769:tid 139775959824064] [client 69.171. ...
show more
[Wed May 28 20:51:24.855830 2025] [security2:error] [pid 369769:tid 139775959824064] [client 69.171.230.12:43588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/gempa-terkini"] [unique_id "aDcU3MzCJOtPC038aaDLLQAAEhA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[369787] [Lo8TeqoHVkE] [aDcU3MzCJOtPC038aaDLLQAAEhA] keep_alive=[1] [2025-05-28 20:51:24.855837] [R:aDcU3MzCJOtPC038aaDLLQAAEhA] UA:'meta-externalage
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-05-28 06:17:44
(1 year ago)
[Wed May 28 12:45:22.886209 2025] [security2:error] [pid 148835:tid 140335488415424] [client 69.171. ...
show more
[Wed May 28 12:45:22.886209 2025] [security2:error] [pid 148835:tid 140335488415424] [client 69.171.230.12:46152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Agent" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Agent found within REQUEST_HEADERS:User-Agent: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/gempa-terkini"] [unique_id "aDai8kRtyCfUy4dYAstVrAABFQU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[148841] [24/jrzO8vKs] [aDai8kRtyCfUy4dYAstVrAABFQU] keep_alive=[1] [2025-05-28 12:45:22.886213] [R:aDai8kRtyCfUy4dYAstVrAABFQU] UA:'meta-externalage
...
show less
Hacking
Web App Attack