[Sat Aug 30 02:56:33.491715 2025] [security2:error] [pid 1112533:tid 140521238415040] [client 43.166 ...
show more[Sat Aug 30 02:56:33.491715 2025] [security2:error] [pid 1112533:tid 140521238415040] [client 43.166.128.118:49003] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "372"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 43.166.128.118 request_line = GET /index.php/component/search/?Itemid=1751&format=opensearch HTTP/1.1 Request URI RAW = /index.php/component/search/?Itemid=1751&format=opensearch Request Basename = "] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/search/"] [unique_id "aLIF8aasP_wJ3XKhKFDl2wAAAso"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1112570] [N6koa8Y86ec] [aLIF8aasP_wJ3XKhKFDl2wAAAso] keep_alive=[0] [2025-08-30 02:56:33.491720]
...
show less
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 43.166.128.118 (US/United States/-) ...
show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 43.166.128.118 (US/United States/-): 1 in the last 3600 secs
show less