hermawan
2025-06-13 00:32:28
(15 hours ago)
[Fri Jun 13 07:32:27.441635 2025] [security2:error] [pid 182843:tid 140165965035200] [client 40.116. ... show more [Fri Jun 13 07:32:27.441635 2025] [security2:error] [pid 182843:tid 140165965035200] [client 40.116.73.221:16908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEtxm5jGKoag-PrwTfONawAAgxw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[182872] [oo8+LvFY+lM] [aEtxm5jGKoag-PrwTfONawAAgxw] keep_alive=[1] [2025-06-13 07:32:27.441641] [R:aEtxm5jGKoag-PrwTfONawAAgxw] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.co
... show less
Hacking
Web App Attack
hermawan
2025-06-12 13:09:39
(1 day ago)
[Thu Jun 12 20:09:38.495440 2025] [security2:error] [pid 25564:tid 139783195023040] [client 40.116.7 ... show more [Thu Jun 12 20:09:38.495440 2025] [security2:error] [pid 25564:tid 139783195023040] [client 40.116.73.221:42817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aErRkiiYOiH7Hj27t4J2xwAAEg0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[25578] [JBdOpEfyPCA] [aErRkiiYOiH7Hj27t4J2xwAAEg0] keep_alive=[1] [2025-06-12 20:09:38.495445] [R:aErRkiiYOiH7Hj27t4J2xwAAEg0] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/
... show less
Hacking
Web App Attack
MAGIC
2025-06-12 06:01:25
(1 day ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
MAGIC
2025-06-12 01:03:24
(1 day ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
Mehmet_The_Script_Kiddie
2025-06-11 15:15:04
(2 days ago)
CloudFlare WAF REPORT: Disobey robots.txt. Suspicious web crawler.
Bad Web Bot
Web App Attack
hermawan
2025-06-11 07:18:58
(2 days ago)
[Wed Jun 11 14:18:12.678388 2025] [security2:error] [pid 117088:tid 140474091251392] [client 40.116. ... show more [Wed Jun 11 14:18:12.678388 2025] [security2:error] [pid 117088:tid 140474091251392] [client 40.116.73.221:35455] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEkttKwqbWbOQboyfi1DzAAAhQ0"] [staklim-malang.info] [staklim-malang.info] top=[117102] [i62mnR6Sp/4] [aEkttKwqbWbOQboyfi1DzAAAhQ0] keep_alive=[1] [2025-06-11 14:18:12.678392] [R:aEkttKwqbWbOQboyfi1DzAAAhQ0] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'st
... show less
Hacking
Web App Attack
hermawan
2025-06-10 23:22:25
(2 days ago)
[Wed Jun 11 06:20:39.664506 2025] [security2:error] [pid 269645:tid 140215346710208] [client 40.116. ... show more [Wed Jun 11 06:20:39.664506 2025] [security2:error] [pid 269645:tid 140215346710208] [client 40.116.73.221:44963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561625-prakiraan-bulanan-curah-hujan-bulan-januari-tahun-2025-update-dari-analisis-bulan-november-tahun-2024-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561625-prakiraan-bulanan-curah-hujan-
... show less
Hacking
Web App Attack
hermawan
2025-06-09 07:55:54
(4 days ago)
[Mon Jun 09 14:53:41.486587 2025] [security2:error] [pid 974291:tid 139881710868160] [client 40.116. ... show more [Mon Jun 09 14:53:41.486587 2025] [security2:error] [pid 974291:tid 139881710868160] [client 40.116.73.221:12888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEaTBcBhs09tlVofbgV0bgAARgE"] [staklim-malang.info] [staklim-malang.info] top=[974293] [Ofja4Ebhwec] [aEaTBcBhs09tlVofbgV0bgAARgE] keep_alive=[1] [2025-06-09 14:53:41.486590] [R:aEaTBcBhs09tlVofbgV0bgAARgE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'st
... show less
Hacking
Web App Attack
hermawan
2025-06-08 07:37:00
(5 days ago)
[Sun Jun 08 14:36:14.388267 2025] [security2:error] [pid 367105:tid 139881897514688] [client 40.116. ... show more [Sun Jun 08 14:36:14.388267 2025] [security2:error] [pid 367105:tid 139881897514688] [client 40.116.73.221:19217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEU9bhKH2sc3_PhJSbGsIAAATAI"] [staklim-malang.info] [staklim-malang.info] top=[367108] [EP6ZhJIA0yU] [aEU9bhKH2sc3_PhJSbGsIAAATAI] keep_alive=[1] [2025-06-08 14:36:14.388272] [R:aEU9bhKH2sc3_PhJSbGsIAAATAI] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'st
... show less
Hacking
Web App Attack
hermawan
2025-06-06 20:38:47
(6 days ago)
[Sat Jun 07 03:37:00.550281 2025] [security2:error] [pid 349246:tid 140271642724032] [client 40.116. ... show more [Sat Jun 07 03:37:00.550281 2025] [security2:error] [pid 349246:tid 140271642724032] [client 40.116.73.221:26038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aENRbHl7rvHvuoEp01johgAAlgQ"] [staklim-malang.info] [staklim-malang.info] top=[349251] [qhYrMbXxsNc] [aENRbHl7rvHvuoEp01johgAAlgQ] keep_alive=[1] [2025-06-07 03:37:00.550285] [R:aENRbHl7rvHvuoEp01johgAAlgQ] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'st
... show less
Hacking
Web App Attack
hermawan
2025-06-05 11:07:51
(1 week ago)
[Thu Jun 05 18:06:34.431024 2025] [security2:error] [pid 25575:tid 139884155954880] [client 40.116.7 ... show more [Thu Jun 05 18:06:34.431024 2025] [security2:error] [pid 25575:tid 139884155954880] [client 40.116.73.221:27137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-bulanan/4115-prakiraan-curah-hujan-bulanan/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-bulanan-curah-hujan-di-propinsi-jawa-timur-tahun-2022/555559942-prakiraan-bulanan-curah-hujan-bulan-maret-tahun-2023-update-dari-analisis-bulan-desember-tahun-2022-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/4115-prakiraan-cu
... show less
Hacking
Web App Attack
hermawan
2025-06-05 02:28:18
(1 week ago)
[Thu Jun 05 09:24:15.575207 2025] [security2:error] [pid 28087:tid 140562494568128] [client 40.116.7 ... show more [Thu Jun 05 09:24:15.575207 2025] [security2:error] [pid 28087:tid 140562494568128] [client 40.116.73.221:61180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aED_z6dJsZTkcrEDZg3exQABDxc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[28113] [3pFZzxE3Opg] [aED_z6dJsZTkcrEDZg3exQABDxc] keep_alive=[1] [2025-06-05 09:24:15.575212] [R:aED_z6dJsZTkcrEDZg3exQABDxc] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/
... show less
Hacking
Web App Attack
MAGIC
2025-06-04 08:12:10
(1 week ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
hermawan
2025-06-04 01:01:12
(1 week ago)
[Wed Jun 04 07:36:24.674758 2025] [security2:error] [pid 81722:tid 139724934772416] [client 40.116.7 ... show more [Wed Jun 04 07:36:24.674758 2025] [security2:error] [pid 81722:tid 139724934772416] [client 40.116.73.221:63129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aD-VCOU5NyvC0EKF_mWp6wAAxAE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[81724] [2h3QL6xZtTg] [aD-VCOU5NyvC0EKF_mWp6wAAxAE] keep_alive=[1] [2025-06-04 07:36:24.674765] [R:aD-VCOU5NyvC0EKF_mWp6wAAxAE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/
... show less
Hacking
Web App Attack
hermawan
2025-05-30 06:21:49
(2 weeks ago)
[Fri May 30 10:11:31.038813 2025] [security2:error] [pid 343327:tid 139910039148224] [client 40.116. ... show more [Fri May 30 10:11:31.038813 2025] [security2:error] [pid 343327:tid 139910039148224] [client 40.116.73.221:43611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aDkh49NMRCn2ymnx-kvpggAAQw0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[343342] [LbhOxQme47A] [aDkh49NMRCn2ymnx-kvpggAAQw0] keep_alive=[1] [2025-05-30 10:11:31.038819] [R:aDkh49NMRCn2ymnx-kvpggAAQw0] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.co
... show less
Hacking
Web App Attack