๐ฎ๐ฉ
hermawan
2025-08-21 05:11:48
(10 months ago)
[Thu Aug 21 12:11:15.159573 2025] [security2:error] [pid 815940:tid 140123929769664] [client 52.156. ...
show more
[Thu Aug 21 12:11:15.159573 2025] [security2:error] [pid 815940:tid 140123929769664] [client 52.156.77.157:56717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aKaqcyptEPwLEE9eIXB-hwADzg8"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[815956] [flVYHpmdKEI] [aKaqcyptEPwLEE9eIXB-hwADzg8] keep_alive=[1] [2025-08-21 12:11:15.159587] [R:aKaqcyptEPwLEE9eIXB-hwADzg8] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'staklim
...
show less
Hacking
Web App Attack
๐ฆ๐บ
MAGIC
2025-08-12 03:07:29
(11 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ฎ๐ฉ
hermawan
2025-07-21 05:31:37
(11 months ago)
[Mon Jul 21 12:30:33.667409 2025] [security2:error] [pid 377377:tid 140081483376320] [client 52.156. ...
show more
[Mon Jul 21 12:30:33.667409 2025] [security2:error] [pid 377377:tid 140081483376320] [client 52.156.77.157:41511] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561952-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis-bulan-april-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561952-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-07-20 07:56:50
(11 months ago)
[Sun Jul 20 14:56:07.716473 2025] [security2:error] [pid 45927:tid 140552203888320] [client 52.156.7 ...
show more
[Sun Jul 20 14:56:07.716473 2025] [security2:error] [pid 45927:tid 140552203888320] [client 52.156.77.157:18693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/"] [unique_id "aHyhF87KEwsdboVEU7IMXwAAkgk"] [staklim-malang.info] [staklim-malang.info] top=[45937] [qksRsRc7oO4] [aHyhF87KEwsdboVEU7IMXwAAkgk] keep_alive=[1] [2025-07-20 14:56:07.716476] [R:aHyhF87KEwsdboVEU7IMXwAAkgk] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'staklim-malang.info' ACC
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-07-20 05:18:02
(11 months ago)
[Sun Jul 20 12:17:16.499674 2025] [security2:error] [pid 92136:tid 140131831822016] [client 52.156.7 ...
show more
[Sun Jul 20 12:17:16.499674 2025] [security2:error] [pid 92136:tid 140131831822016] [client 52.156.77.157:36186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-puncak-musim-hujan-musim-hujan"] [unique_id "aHx73NA0-uOXWJghJK9VlQAAzBQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[92157] [dI/1eFXEORw] [aHx73NA0-uOXWJghJK9VlQAAzBQ] keep_alive=[1] [2025-07-20 12:
...
show less
Hacking
Web App Attack
๐ญ๐ณ
unph
2025-07-20 04:25:38
(11 months ago)
Intento de acceso sospechoso en el login de WordPress
Brute-Force
๐ฎ๐ฉ
hermawan
2025-07-19 08:45:26
(11 months ago)
[Sat Jul 19 15:44:46.592576 2025] [security2:error] [pid 242103:tid 140202639296192] [client 52.156. ...
show more
[Sat Jul 19 15:44:46.592576 2025] [security2:error] [pid 242103:tid 140202639296192] [client 52.156.77.157:38764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555561804-press-release-kewaspadaan-peningkatan-cuaca-ekstrem-di-jawa-timur-pada-tanggal-24-maret-02-april-2025 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555561804-press-release-kewaspadaan-pen
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-07-18 21:46:29
(11 months ago)
[Sat Jul 19 04:45:59.014360 2025] [security2:error] [pid 173911:tid 140331751286464] [client 52.156. ...
show more
[Sat Jul 19 04:45:59.014360 2025] [security2:error] [pid 173911:tid 140331751286464] [client 52.156.77.157:44097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561892-prediksi-bulanan-curah-hujan-bulan-juli-tahun-2025-update-dari-analisis-bulan-maret-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561892-prediksi-bulanan-curah-hujan-bulan-juli-tahun-2025-update-dari-analisis-bulan
...
show less
Hacking
Web App Attack
๐บ๐ธ
canine.tools
2025-07-18 18:16:55
(11 months ago)
[fail2ban Auto Report] anubis block
Bad Web Bot
๐ฉ๐ช
CommanderRoot
2025-07-18 15:09:34
(11 months ago)
AI Bot crawler
DDoS Attack
Web Spam
๐ฎ๐ฉ
hermawan
2025-07-18 03:42:44
(11 months ago)
[Fri Jul 18 10:41:28.692941 2025] [security2:error] [pid 177121:tid 139785923397312] [client 52.156. ...
show more
[Fri Jul 18 10:41:28.692941 2025] [security2:error] [pid 177121:tid 139785923397312] [client 52.156.77.157:60397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aHnCaEwP_mDUu-kzdYiDEgAAwRA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[177138] [ZjKv5iv5oLk] [aHnCaEwP_mDUu-kzdYiDEgAAwRA] keep_alive=[1] [2025-07-18 10:41:28.692948] [R:aHnCaEwP_mDUu-kzdYiDEgAAwRA] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'staklim
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-07-17 17:03:18
(11 months ago)
[Fri Jul 18 00:02:19.990329 2025] [security2:error] [pid 417085:tid 139951761958592] [client 52.156. ...
show more
[Fri Jul 18 00:02:19.990329 2025] [security2:error] [pid 417085:tid 139951761958592] [client 52.156.77.157:2272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aHksm-BeawY9MW2EwwX7DwAAgBg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[417110] [vmbs+OKGQGg] [aHksm-BeawY9MW2EwwX7DwAAgBg] keep_alive=[1] [2025-07-18 00:02:19.990334] [R:aHksm-BeawY9MW2EwwX7DwAAgBg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'staklim-
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-07-16 16:33:10
(1 year ago)
[Wed Jul 16 23:32:19.996235 2025] [security2:error] [pid 85111:tid 140133612365504] [client 52.156.7 ...
show more
[Wed Jul 16 23:32:19.996235 2025] [security2:error] [pid 85111:tid 140133612365504] [client 52.156.77.157:30195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555561948-prediksi-bulanan-sifat-hujan-bulan-juli-tahun-2025-update-dari-analisis-bulan-april-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555561948-prediksi-bulanan-sifat-hujan-bulan-juli-tahun-2025-update-dari-analisis-bulan-april
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-07-16 14:04:33
(1 year ago)
[Wed Jul 16 20:56:23.634688 2025] [security2:error] [pid 23148:tid 140451303642816] [client 52.156.7 ...
show more
[Wed Jul 16 20:56:23.634688 2025] [security2:error] [pid 23148:tid 140451303642816] [client 52.156.77.157:39950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-bulanan/4262-prakiraan-bulanan-untuk-6-bulan-ke-depan-di-provinsi-jawa-timur/prakiraan-bulanan-sifat-hujan-untuk-6-bulan-ke-depan-di-provinsi-jawa-timur/555561185-prakiraan-bulanan-sifat-hujan-di-kabupaten-ngawi-untuk-6-bulan-ke-depan-2 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-bulanan/4262-prakiraan-bulanan-untuk-6-bulan-ke-depan-di-provinsi-jawa-timur/prakiraan
...
show less
Hacking
Web App Attack
๐บ๐ธ
Starburst SysOp Team
2025-07-16 06:50:01
(1 year ago)
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 157.77.156.52.rbl.malwa ...
show more
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 157.77.156.52.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-1)
show less
Hacking