🇮🇩
hermawan
2025-10-10 10:20:09
UTC ·
(1 year ago)
[Fri Oct 10 15:59:30.960463 2025] [security2:error] [pid 670155:tid 139629789443776] [client 141.0.8.225:49464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc ...
show more
[Fri Oct 10 15:59:30.960463 2025] [security2:error] [pid 670155:tid 139629789443776] [client 141.0.8.225:49464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "375"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /images/Meteorologi/Prakiraan/Prakiraan-Harian/01-Hari-Ini/Jatim/Prakiraan-Harian_Cuaca_Provinsi_Jawa_Timur_Hari_Ini-28-29-8-2019_analisis_27-8-2019.webp HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Meteorologi/Prakiraan/Prakiraan-Harian/01-Hari-Ini/Jatim/Prakiraan-Harian_Cuaca_Provinsi_Jawa_Timur_Hari_Ini-28-29-8-2019_analisis_27-8-2019.webp"] [unique_id "aOjK8qDyQpwTMT0ORPEMdAAAAIk"], referer https://www.google.com/ [sta
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-08-09 16:24:51
UTC ·
(1 year ago)
[Sat Aug 09 23:23:49.244679 2025] [security2:error] [pid 1016842:tid 139780409923264] [client 141.0.8.225:60114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/et ...
show more
[Sat Aug 09 23:23:49.244679 2025] [security2:error] [pid 1016842:tid 139780409923264] [client 141.0.8.225:60114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "375"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/profil/meteorologi/list-all-categories/4267-konferensi-pers/rilis-prediksi-musim-hujan-2024-2025-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-categories/4267-konferensi-pers/rilis-prediksi-musim-hujan-2024-2025-di-provinsi-jawa-timur"] [unique_id "aJd2FYjh9mTUhnRRQyMiqwAAAQM"], referer https://www.google.com/ [staklim-malang.info] [staklim-malang.info] top=[10168
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-05-03 08:29:56
UTC ·
(1 year ago)
[Sat May 03 15:15:23.275876 2025] [security2:error] [pid 506032:tid 140324408116928] [client 141.0.8.225:38902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc ...
show more
[Sat May 03 15:15:23.275876 2025] [security2:error] [pid 506032:tid 140324408116928] [client 141.0.8.225:38902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "349"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/profil/meteorologi/list-all-categories/536-konferensi-pers/555561790-rilis-prediksi-musim-kemarau-tahun-2025-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/536-konferensi-pers/555561790-rilis-prediksi-musim-kemarau-tahun-2025-provinsi-jawa-timur"] [unique_id "aBXQm7O9xIk0lGOsH04aSwAAALE"], referer https://www.google.com/ [staklim-jatim.bmkg.go.id] [stak
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-04-08 10:53:32
UTC ·
(1 year ago)
[Tue Apr 08 17:53:31.244870 2025] [security2:error] [pid 202378:tid 140069990020800] [client 141.0.8.225:45168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc ...
show more
[Tue Apr 08 17:53:31.244870 2025] [security2:error] [pid 202378:tid 140069990020800] [client 141.0.8.225:45168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "349"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /b/bulananbojonegoro.pdf HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/b/bulananbojonegoro.pdf"] [unique_id "Z_UAK8p4JKlI9Zv5G5fEHgAAAEs"], referer https://www.google.com/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[202441] [COzSKfq3nH4] [Z_UAK8p4JKlI9Zv5G5fEHgAAAEs] keep_alive=[0] [2025-04-08 17:53:31.244874] [R:Z_UAK8p4JKlI9Zv5G5fEHgAAAEs] UA:'Mozilla/5.0 (Linux; U; Android 11; vivo 1904 Build/RP1A.200720.012; wv)
...
show less
Hacking
Web App Attack
🇦🇺
MAGIC
2025-03-08 16:00:53
UTC ·
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
Anonymous
2025-02-18 14:52:08
UTC ·
(1 year ago)
Excessive connections to http/https ports
DDoS Attack
🇮🇩
hermawan
2024-07-31 07:04:13
UTC ·
(2 years ago)
[Wed Jul 31 14:04:12.198665 2024] [security2:error] [pid 17937:tid 135437934921280] [client 141.0.8.225:60672] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwar ...
show more
[Wed Jul 31 14:04:12.198665 2024] [security2:error] [pid 17937:tid 135437934921280] [client 141.0.8.225:60672] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "163"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/555560934-prakiraan-bulanan-curah-hujan-bulan-agustus-tahun-2024-update-dari-analisis-bulan-april-tahun-2024-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/555560934-prakiraan-bulanan-curah-hujan-bulan-agustus-tahun-2024-update-dari-analisis-bu
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2024-07-15 13:18:03
UTC ·
(2 years ago)
[Mon Jul 15 20:09:38.327161 2024] [security2:error] [pid 130703:tid 139476678477376] [client 141.0.8.225:42732] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwa ...
show more
[Mon Jul 15 20:09:38.327161 2024] [security2:error] [pid 130703:tid 139476678477376] [client 141.0.8.225:42732] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "163"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-cuaca-kota-madiun HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-cuaca-kota-madiun"] [unique_id "ZpUfkl_3almXoCmLv8sFSAAAAMA"], referer https://www.google.com/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[130745] [Nbf98Ph6kMk] [ZpUfkl_3almXoCmLv8sFSAAAAMA] keep_alive=[0] [2024-07-15 20:0
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2024-06-03 22:33:34
UTC ·
(2 years ago)
[Tue Jun 04 05:33:31.604591 2024] [security2:error] [pid 211084:tid 131245969245760] [client 141.0.8.225:33968] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwa ...
show more
[Tue Jun 04 05:33:31.604591 2024] [security2:error] [pid 211084:tid 131245969245760] [client 141.0.8.225:33968] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "129"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /images/gempa/webp/20240604041611.mmi.jpg.webp HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/images/gempa/webp/20240604041611.mmi.jpg.webp"] [unique_id "Zl5Eu-DXiQ5aQ5L1fpp2ZAAAAUM"], referer https://staklim-malang.info/index.php/profil/meteorologi/list-of-all-tags/prakiraan-cuaca-kota-probolinggo [staklim-malang.info] [staklim-malang.info] top=[211214] [axRG7HMPQmE] [Zl5Eu-DXiQ5aQ5L1fpp2ZAAAAUM] keep_alive=[0] [202
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2024-05-27 13:39:16
UTC ·
(2 years ago)
[Mon May 27 20:39:13.151820 2024] [security2:error] [pid 324349:tid 138072819762752] [client 141.0.8.225:36146] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwa ...
show more
[Mon May 27 20:39:13.151820 2024] [security2:error] [pid 324349:tid 138072819762752] [client 141.0.8.225:36146] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.0.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "128"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-sifat-hujan-bulanan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-sifat-hujan-bulanan"] [unique_id "ZlSNAcHkuyLcO8E6WFDxXgAAAFE"], referer https://www.google.com/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[324408] [JyyNpJ/YG+o] [ZlSNAcHkuyLcO8E6WFDxXgAAAFE] keep_alive=[0] [2024-05-27 20:3
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2024-04-30 09:41:12
UTC ·
(2 years ago)
[Tue Apr 30 16:41:09.016131 2024] [security2:error] [pid 1164255:tid 128346520290880] [client 141.0.8.225:48220] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forw ...
show more
[Tue Apr 30 16:41:09.016131 2024] [security2:error] [pid 1164255:tid 128346520290880] [client 141.0.8.225:48220] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.0.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "122"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-cuaca-kota-blitar HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-cuaca-kota-blitar"] [unique_id "ZjC8tUp8RZvXqoXXI7DmBwAAAAs"], referer https://www.google.com/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1164308] [Y65qKz0TTQo] [ZjC8tUp8RZvXqoXXI7DmBwAAAAs] keep_alive=[0] [2024-04-30 16
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2024-04-16 04:17:33
UTC ·
(2 years ago)
[Tue Apr 16 11:17:29.996806 2024] [security2:error] [pid 429592:tid 127914303555136] [client 141.0.8.225:52326] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwa ...
show more
[Tue Apr 16 11:17:29.996806 2024] [security2:error] [pid 429592:tid 127914303555136] [client 141.0.8.225:52326] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.0.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "119"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/555560689-prakiraan-bulanan-curah-hujan-bulan-april-tahun-2024-update-dari-analisis-bulan-desember-tahun-2023-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/555560689-prakiraan-bulanan-curah-hujan-bulan-april-tahun-2024-update-dari-analisis-bu
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2024-04-08 20:50:03
UTC ·
(2 years ago)
[Tue Apr 09 03:50:01.167858 2024] [security2:error] [pid 92638:tid 129965404194368] [client 141.0.8.225:34574] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwar ...
show more
[Tue Apr 09 03:50:01.167858 2024] [security2:error] [pid 92638:tid 129965404194368] [client 141.0.8.225:34574] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-4.0.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "119"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/prakiraan-iklim/prakiraan-musim/prakiraan-musim-kemarau/prakiraan-awal-musim-kemarau HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-musim/prakiraan-musim-kemarau/prakiraan-awal-musim-kemarau"] [unique_id "ZhRYeeifoV6556RTmCjIGAAAAYM"], referer https://www.google.com/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[92673] [7rz18lsvK1U] [ZhRYeeifoV6556RTmCjI
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2024-03-06 05:11:37
UTC ·
(2 years ago)
[Wed Mar 06 12:11:35.273363 2024] [security2:error] [pid 54626:tid 135847959594560] [client 141.0.8.225:49830] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwar ...
show more
[Wed Mar 06 12:11:35.273363 2024] [security2:error] [pid 54626:tid 135847959594560] [client 141.0.8.225:49830] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "100"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/profil/meteorologi/list-all-categories/4073-meteorologi/prakiraan-meteorologi/prakiraan-cuaca-harian-tiap-3-jam-sekali-per-kecamatan/1210-prakiraan-cuaca-kediri HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-categories/4073-meteorologi/prakiraan-meteorologi/prakiraan-cuaca-harian-tiap-3-jam-sekali-per-kecamatan/1210-prakiraan-cuaca-kediri"] [unique_id "Zef7B-nu8PW4i-jEO
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2024-03-01 15:20:13
UTC ·
(2 years ago)
[Fri Mar 01 22:20:10.406463 2024] [security2:error] [pid 54983:tid 138763833443904] [client 141.0.8.225:59336] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwar ...
show more
[Fri Mar 01 22:20:10.406463 2024] [security2:error] [pid 54983:tid 138763833443904] [client 141.0.8.225:59336] [client 141.0.8.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "X-Forwarded-For" at REQUEST_HEADERS_NAMES:X-Forwarded-For. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "100"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: X-Forwarded-For found within REQUEST_HEADERS_NAMES:X-Forwarded-For: X-Forwarded-For request_line = GET /index.php/profil/meteorologi/list-all-categories/113-meteorologi/prakiraan-meteorologi/555557338-prakiraan-cuaca-wisata-gunung-di-provinsi-jawa-timur-untuk-hari-ini-pada-pagi-siang-malam-dan-dini-hari-meliputi-tempat-wisata-antara-lain-gunung-semeru-gunung-lawu-gunung-bromo-gunung-kawi-gunung-ijen-gunung-raung HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/113-met
...
show less
Hacking
Web App Attack