๐ฎ๐ฉ
David Koswari
2026-08-28 05:04:00
(5 days ago)
REQ_BLOCKED_ACL
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
๐ฎ๐ฉ
hermawan
2025-02-04 21:51:15
(1 year ago)
[Wed Feb 05 01:40:39.535250 2025] [security2:error] [pid 64958:tid 139877285516992] [client 36.110.1 ...
show more
[Wed Feb 05 01:40:39.535250 2025] [security2:error] [pid 64958:tid 139877285516992] [client 36.110.131.179:19011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "148"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "Z6JfJ39G3XpZiAxjqmkNtgAABDo"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[65017] [6tZrWL3bdyE] [Z6JfJ39G3XpZiAxjqmkNtgAABDo] keep_alive=[1] [2025-02-05 01:40:39.535253] [R:Z6JfJ39G3XpZiAxjqmkNtgAABDo] UA:'Mozilla/5.0 (X11; Linux x86_
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-01-28 16:29:44
(1 year ago)
[Tue Jan 28 23:18:05.401092 2025] [security2:error] [pid 4373:tid 140710776841920] [client 36.110.13 ...
show more
[Tue Jan 28 23:18:05.401092 2025] [security2:error] [pid 4373:tid 140710776841920] [client 36.110.131.179:35826] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "59"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z5kDPWIwraCjNoUpTl2YkAAB0xY"], referer https://staklim-malang.info/index.php/monitoring-hari-tanpa-hujan-berturut-turut/4020-monitoring-hari-tanpa-hujan-berturut-turut-propinsi-jawa-timur/monitoring-hari-tanpa-hujan-berturut-turut-dasarian-provinsi-jawa-timur/analisis-dasarian-monitori
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-01-22 19:12:54
(1 year ago)
[Thu Jan 23 00:29:30.167477 2025] [security2:error] [pid 39336:tid 140311904872128] [client 36.110.1 ...
show more
[Thu Jan 23 00:29:30.167477 2025] [security2:error] [pid 39336:tid 140311904872128] [client 36.110.131.179:19043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "59"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "Z5Eq-r_HjptCqjdhotWZBAAB-wk"], referer https://staklim-jatim.bmkg.go.id/index.php/prakiraan-bulanan/3937-prakiraan-curah-hujan-bulanan/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur-tahun-2019/1124-prakiraan-bulanan-curah-hujan-bulan
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-01-20 22:16:00
(1 year ago)
[Tue Jan 21 05:01:03.755183 2025] [security2:error] [pid 8308:tid 132980301354688] [client 36.110.13 ...
show more
[Tue Jan 21 05:01:03.755183 2025] [security2:error] [pid 8308:tid 132980301354688] [client 36.110.131.179:13782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "59"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z47HnzgfmCKLtT4n555k-AAAnAE"], referer https://staklim-malang.info/index.php/profil/arsip-artikel?catid=480&id=901:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-23-29-pebruari-2016&start=70 [staklim-malang.info] [staklim-malang.info] top=[8310] [Rv5/ZYJhazI]
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-01-14 02:35:14
(1 year ago)
[Tue Jan 14 04:00:48.892802 2025] [security2:error] [pid 203793:tid 128348171220672] [client 36.110. ...
show more
[Tue Jan 14 04:00:48.892802 2025] [security2:error] [pid 203793:tid 128348171220672] [client 36.110.131.179:42720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "59"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "Z4V_AICCnIvYWbTqZIzdiwAA3Bk"], referer https://staklim-jatim.bmkg.go.id/index.php/analisis-bulanan/4134-analisis-distribusi-hujan/analisis-distribusi-sifat-hujan/analisis-distribusi-sifat-hujan-jawa-timur-bulanan/analisis-bulanan-distribusi-sifat-hujan-di-provinsi-jawa-timur-tahun-2022/5555
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-01-09 18:49:04
(1 year ago)
[Thu Jan 09 18:16:29.478990 2025] [security2:error] [pid 285758:tid 129466401384128] [client 36.110. ...
show more
[Thu Jan 09 18:16:29.478990 2025] [security2:error] [pid 285758:tid 129466401384128] [client 36.110.131.179:60102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "64"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z3-wDZ_tJdDTc_4oj4R59AAARyk"], referer https://staklim-malang.info/index.php/profil/arsip-artikel?catid=476&id=517%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-april-4-mei-2015&start=110 [staklim-malang.info] [staklim-malang.info] top=[285800] [MAAUHE
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2024-12-22 22:14:08
(1 year ago)
[Sun Dec 22 20:11:57.203403 2024] [security2:error] [pid 81294:tid 125203702986432] [client 36.110.1 ...
show more
[Sun Dec 22 20:11:57.203403 2024] [security2:error] [pid 81294:tid 125203702986432] [client 36.110.131.179:27879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.9.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "61"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z2gQHXv-9-7jpyCh-KYVZwABVDA"], referer https://staklim-malang.info/index.php/prakiraan-bulanan/3876-prakiraan-potensi-banjir/prakiraan-potensi-banjir-di-propinsi-jawa-timur/prakiraan-daerah-potensi-banjir-provinsi-jawa-timur-tahun-2018/91-peta-prakiraan-daerah-potensi-banjir-jawa-timur
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2024-12-18 06:54:44
(1 year ago)
[Wed Dec 18 05:57:31.783284 2024] [security2:error] [pid 149146:tid 139402768668352] [client 36.110. ...
show more
[Wed Dec 18 05:57:31.783284 2024] [security2:error] [pid 149146:tid 139402768668352] [client 36.110.131.179:45659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.9.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "61"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z2IB26i42d46zzdpKzWY0gACbTs"], referer https://staklim-malang.info/index.php/profil/arsip-artikel?catid=485&id=901%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-23-29-pebruari-2016&start=10 [staklim-malang.info] [staklim-malang.info] top=[149206] [H9LWOBev
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2024-12-08 14:49:02
(1 year ago)
[Sun Dec 08 14:40:00.792141 2024] [security2:error] [pid 361497:tid 127198780450496] [client 36.110. ...
show more
[Sun Dec 08 14:40:00.792141 2024] [security2:error] [pid 361497:tid 127198780450496] [client 36.110.131.179:40476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "61"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z1VNUFd0QxIoR71rxxddmwAGegA"], referer https://staklim-malang.info/index.php/profil/arsip-artikel?catid=485&id=902%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-1-7-maret-2016&start=10 [staklim-malang.info] [staklim-malang.info] top=[361498] [uKz4WhUY0RM]
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2024-12-05 22:24:04
(1 year ago)
[Fri Dec 06 02:12:26.147578 2024] [security2:error] [pid 193323:tid 133905059366592] [client 36.110. ...
show more
[Fri Dec 06 02:12:26.147578 2024] [security2:error] [pid 193323:tid 133905059366592] [client 36.110.131.179:19399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "61"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z1H7GrroNMM7NOXJzk4qrQACCAo"], referer https://staklim-malang.info/index.php/profil/arsip-artikel?catid=472&id=479%3Aprakiraan-cuaca-daerah-malang-dan-batu-berlaku-tanggal-14-april-20-april-2015&start=140 [staklim-malang.info] [staklim-malang.info] top=[193335] [FGu+rfJWzOo] [Z1H7Grro
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2024-11-24 01:22:50
(1 year ago)
[Sun Nov 24 07:56:55.693237 2024] [security2:error] [pid 58035:tid 131408794154688] [client 36.110.1 ...
show more
[Sun Nov 24 07:56:55.693237 2024] [security2:error] [pid 58035:tid 131408794154688] [client 36.110.131.179:35754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "61"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z0J518DtkUTtbbWNnct2KAAEUw8"], referer https://staklim-malang.info/index.php/profil/arsip-artikel?catid=481&id=673%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-25-31-agustus-2015&start=140 [staklim-malang.info] [staklim-malang.info] top=[58051] [FBSmF6ZmxG
...
show less
Hacking
Web App Attack
๐ฆ๐บ
MAGIC
2024-11-22 21:00:26
(1 year ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ฆ๐บ
MAGIC
2024-11-22 17:04:40
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ฎ๐ฉ
hermawan
2024-11-16 05:29:33
(1 year ago)
[Sat Nov 16 06:17:01.383146 2024] [security2:error] [pid 697029:tid 128485160822464] [client 36.110. ...
show more
[Sat Nov 16 06:17:01.383146 2024] [security2:error] [pid 697029:tid 128485160822464] [client 36.110.131.179:26627] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.7.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "60"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "ZzfWbbXlivIwmIG4LJJpTgACeBM"], referer https://staklim-malang.info/index.php/profil/arsip-artikel?catid=476&id=594%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-30-juni-6-juli-2015&start=40 [staklim-malang.info] [staklim-malang.info] top=[697049] [ez6hw6P5
...
show less
Hacking
Web App Attack