๐ฎ๐ฉ
hermawan
2025-08-20 16:32:39
(1 year ago)
[Wed Aug 20 23:30:14.863172 2025] [security2:error] [pid 53176:tid 140361555945152] [client 4.151.24 ...
show more
[Wed Aug 20 23:30:14.863172 2025] [security2:error] [pid 53176:tid 140361555945152] [client 4.151.241.246:59196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/publik/kegiatan/1246-press-release-tentang-beredarnya-berita-palsu-prediksi-akan-terjadinya-gempa-dan-tsunami HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/publik/kegiatan/1246-press-release-tentang-beredarnya-berita-palsu-prediksi-akan-terjadinya-gempa-dan-tsunami"] [unique_id "aKX4FhBCwUcBxngflazC2wAAwRg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[53201] [AVTHfA5
...
show less
Hacking
Web App Attack
๐ณ๐ฑ
exxos
2025-08-19 19:03:01
(1 year ago)
Attacks with Bad user agents
Hacking
๐ฎ๐ฉ
hermawan
2025-08-19 15:00:07
(1 year ago)
[Tue Aug 19 21:58:21.934471 2025] [security2:error] [pid 24854:tid 139730958370496] [client 4.151.24 ...
show more
[Tue Aug 19 21:58:21.934471 2025] [security2:error] [pid 24854:tid 139730958370496] [client 4.151.241.246:30112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan-di-provinsi-jawa-timur"] [unique_id "aKSRDbPn-1HGqfMKTpQTHgAAAQA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[24855] [ykdXFnnb160] [aKSRDbPn-1HGq
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-19 09:05:53
(1 year ago)
[Tue Aug 19 15:02:50.692665 2025] [security2:error] [pid 879918:tid 139620573427392] [client 4.151.2 ...
show more
[Tue Aug 19 15:02:50.692665 2025] [security2:error] [pid 879918:tid 139620573427392] [client 4.151.241.246:49701] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-durasi-musim-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-durasi-musim-hujan"] [unique_id "aKQvqgUc2yqJqatpv7BkzgAAgRM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[879938] [AtZSSLOQuF4] [aKQvqgUc2yqJq
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-18 02:44:52
(1 year ago)
[Mon Aug 18 09:43:33.221576 2025] [security2:error] [pid 303680:tid 139955134244544] [client 4.151.2 ...
show more
[Mon Aug 18 09:43:33.221576 2025] [security2:error] [pid 303680:tid 139955134244544] [client 4.151.241.246:56800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/analisis-bulanan-distribusi-curah-hujan-tahun-2020 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/analisis-bulanan-distribusi-curah-hujan-tahun-2020"] [unique_id "aKKTVVUW5Igf9f0X0QRJIAABRQU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[303693] [1p2WtJoPdhM] [aKKTVVUW5Igf9f0X0QRJIAABRQU] keep_ali
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-16 17:58:58
(1 year ago)
[Sun Aug 17 00:57:42.263761 2025] [security2:error] [pid 64110:tid 139956738500288] [client 4.151.24 ...
show more
[Sun Aug 17 00:57:42.263761 2025] [security2:error] [pid 64110:tid 139956738500288] [client 4.151.241.246:37446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /Prakicu_Harian_Kota_Malang-v1.html HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/Prakicu_Harian_Kota_Malang-v1.html"] [unique_id "aKDGlpTz0yfu1dhjhl37cQAAyhY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[64134] [VPsrPj+2UlM] [aKDGlpTz0yfu1dhjhl37cQAAyhY] keep_alive=[1] [2025-08-17 00:57:42.263779] [R:aKDGlpTz0yfu1dhjhl37cQAAyhY] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); co
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-16 09:18:50
(1 year ago)
[Sat Aug 16 16:18:15.809521 2025] [security2:error] [pid 608598:tid 140508583159488] [client 4.151.2 ...
show more
[Sat Aug 16 16:18:15.809521 2025] [security2:error] [pid 608598:tid 140508583159488] [client 4.151.241.246:18277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/555556329-kalender-tanam-katam-terpadu-musim-kemarau-kecamatan-salatiga-kabupaten-sambas-provinsi-kalimantan-barat-bulan-april-mei-juni-juli-agustus-september-tahun-2017 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/555556329-kalender-tanam-katam-terpadu-musim-kemarau-kecamatan-salatiga-kabupaten-sambas-
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-16 02:15:32
(1 year ago)
[Sat Aug 16 09:12:39.485715 2025] [security2:error] [pid 359398:tid 140287276930752] [client 4.151.2 ...
show more
[Sat Aug 16 09:12:39.485715 2025] [security2:error] [pid 359398:tid 140287276930752] [client 4.151.241.246:42542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/113-meteorologi/prakiraan-meteorologi/555561510-prakiraan-harian-cuaca-wisata-di-jawa-timur-untuk-hari-ini-pada-pagi-siang-malam-dan-dini-hari-meliputi-gunung-arjuno-gunung-penanggungan-dan-gunung-butak HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-categories/113-meteorologi/prakiraan-meteorologi/555561510-prakiraan-har
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-14 03:46:10
(1 year ago)
[Thu Aug 14 10:45:08.106714 2025] [security2:error] [pid 111240:tid 140168664086208] [client 4.151.2 ...
show more
[Thu Aug 14 10:45:08.106714 2025] [security2:error] [pid 111240:tid 140168664086208] [client 4.151.241.246:9848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /b/bulananlamongan.pdf HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/b/bulananlamongan.pdf"] [unique_id "aJ1bxPN5T-IE17bube9utQABQBg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[111265] [S5V5GYsV+q0] [aJ1bxPN5T-IE17bube9utQABQBg] keep_alive=[1] [2025-08-14 10:45:08.106720] [R:aJ1bxPN5T-IE17bube9utQABQBg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.
...
show less
Hacking
Web App Attack
๐จ๐ด
j458rjqwi348fhjq46
2025-08-13 16:40:22
(1 year ago)
Malicious IP detected by WAF with anomaly score 11.0. Attack types: Timestamp deviates by 4.5 hours, ...
show more
Malicious IP detected by WAF with anomaly score 11.0. Attack types: Timestamp deviates by 4.5 hours, ... and more, Timestamp deviates by 2.6 hours (+7 more). Activity: 14449 requests to 50 URLs. Period: 2025-08-13 10:44:34 - 2025-08-13 10:44:34 (America/Bogota). Origin: US. Source: Automated WAF log analysis.
show less
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-13 09:20:45
(1 year ago)
[Wed Aug 13 15:48:34.439308 2025] [security2:error] [pid 851406:tid 140650258278080] [client 4.151.2 ...
show more
[Wed Aug 13 15:48:34.439308 2025] [security2:error] [pid 851406:tid 140650258278080] [client 4.151.241.246:61716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561125-prakiraan-bulanan-curah-hujan-di-kota-kabupaten-madiun-untuk-6-bulan-ke-depan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561125-prakiraan-bulanan-curah-hujan-di-kota-kabupaten-madiun-untuk-6-bulan-ke-depan
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-05 16:00:55
(1 year ago)
[Tue Aug 05 23:00:26.240460 2025] [security2:error] [pid 41985:tid 140318595798720] [client 4.151.24 ...
show more
[Tue Aug 05 23:00:26.240460 2025] [security2:error] [pid 41985:tid 140318595798720] [client 4.151.241.246:60745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562115-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis-bulan-juni-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562115-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis-b
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-04 16:39:41
(1 year ago)
[Mon Aug 04 23:38:39.026647 2025] [security2:error] [pid 7615:tid 139997926295232] [client 4.151.241 ...
show more
[Mon Aug 04 23:38:39.026647 2025] [security2:error] [pid 7615:tid 139997926295232] [client 4.151.241.246:16886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/gempa-terkini"] [unique_id "aJDiD-SSMe096cJ9bYs5ggAAQgA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[7616] [qTRevYyWisA] [aJDiD-SSMe096cJ9bYs5ggAAQgA] keep_alive=[1] [2025-08-04 23:38:39.026660] [R:aJDiD-SSMe096cJ9bYs5ggAAQgA] UA:'Mozill
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-04 12:39:36
(1 year ago)
[Mon Aug 04 19:38:17.399569 2025] [security2:error] [pid 173442:tid 139733135984320] [client 4.151.2 ...
show more
[Mon Aug 04 19:38:17.399569 2025] [security2:error] [pid 173442:tid 139733135984320] [client 4.151.241.246:20218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-sifat-hujan-bulanan/3-bulan-ke-depan/555561743-prakiraan-bulanan-sifat-hujan-bulan-mei-tahun-2025-update-dari-analisis-bulan-januari-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-sifat-hujan-bulanan/3-bulan-ke-depan/555561743-prakiraan-bulanan-sifat-hujan-bulan-mei-
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-04 03:40:36
(1 year ago)
[Mon Aug 04 10:39:14.282830 2025] [security2:error] [pid 994895:tid 140629669791424] [client 4.151.2 ...
show more
[Mon Aug 04 10:39:14.282830 2025] [security2:error] [pid 994895:tid 140629669791424] [client 4.151.241.246:33253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan/perbandingan-awal-musim-hujan-dengan-normalnya HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/analisis-iklim/analisis-musim/perbandingan/perbandingan-awal-musim-hujan-dengan-normalnya"] [unique_id "aJArYj7TMwwLA-o8m2yP4QAAEgI"] [staklim-malang.info] [staklim-malang.info] top=[994898] [DAL42YGycSM] [aJArYj7TMwwLA-o8m2yP4QAAEgI] keep_alive=[1] [2
...
show less
Hacking
Web App Attack