hermawan
2025-06-13 12:44:40
(1 day ago)
[Fri Jun 13 19:43:54.339078 2025] [security2:error] [pid 27635:tid 140221509265088] [client 52.159.2 ... show more [Fri Jun 13 19:43:54.339078 2025] [security2:error] [pid 27635:tid 140221509265088] [client 52.159.227.36:45963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEwdCvpEHz2gz_dqPaJBhQAAzAI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[27638] [6AwcZquzFQo] [aEwdCvpEHz2gz_dqPaJBhQAAzAI] keep_alive=[1] [2025-06-13 19:43:54.339083] [R:aEwdCvpEHz2gz_dqPaJBhQAAzAI] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/show less
Hacking
Web App Attack
MAGIC
2025-06-12 15:09:45
(2 days ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
hermawan
2025-06-11 04:31:06
(3 days ago)
[Wed Jun 11 11:27:51.775341 2025] [security2:error] [pid 6413:tid 140473982146240] [client 52.159.22 ... show more [Wed Jun 11 11:27:51.775341 2025] [security2:error] [pid 6413:tid 140473982146240] [client 52.159.227.36:18356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEkFxxwjB-vGZPIHflnKkwABTh0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[6444] [HalwPBxdjwo] [aEkFxxwjB-vGZPIHflnKkwABTh0] keep_alive=[1] [2025-06-11 11:27:51.775348] [R:aEkFxxwjB-vGZPIHflnKkwABTh0] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/boshow less
Hacking
Web App Attack
hermawan
2025-06-11 02:13:25
(3 days ago)
[Wed Jun 11 09:12:55.181507 2025] [security2:error] [pid 347347:tid 139883170444992] [client 52.159. ... show more [Wed Jun 11 09:12:55.181507 2025] [security2:error] [pid 347347:tid 139883170444992] [client 52.159.227.36:41811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEjmJ8ooTPv16Ep-yJjRjwAAWBA"] [staklim-malang.info] [staklim-malang.info] top=[347364] [g2nYWZq9NXE] [aEjmJ8ooTPv16Ep-yJjRjwAAWBA] keep_alive=[1] [2025-06-11 09:12:55.181514] [R:aEjmJ8ooTPv16Ep-yJjRjwAAWBA] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'stshow less
Hacking
Web App Attack
hermawan
2025-06-10 16:32:01
(4 days ago)
[Tue Jun 10 23:29:50.486017 2025] [security2:error] [pid 112976:tid 140215294240448] [client 52.159. ... show more [Tue Jun 10 23:29:50.486017 2025] [security2:error] [pid 112976:tid 140215294240448] [client 52.159.227.36:21129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEhdfoNuL6lb5NTEUI4GqwAAEh0"] [staklim-malang.info] [staklim-malang.info] top=[113006] [yEyYNKIvrLs] [aEhdfoNuL6lb5NTEUI4GqwAAEh0] keep_alive=[1] [2025-06-10 23:29:50.486023] [R:aEhdfoNuL6lb5NTEUI4GqwAAEh0] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'stshow less
Hacking
Web App Attack
hermawan
2025-06-07 15:25:59
(1 week ago)
[Sat Jun 07 22:25:28.510549 2025] [security2:error] [pid 5182:tid 139881813571264] [client 52.159.22 ... show more [Sat Jun 07 22:25:28.510549 2025] [security2:error] [pid 5182:tid 139881813571264] [client 52.159.227.36:25442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/component/tags/tag/klimatologi HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/klimatologi"] [unique_id "aERZ6L3A4F66s9Zc-wtMIwAAmhQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[5203] [vS3h9GQyiSU] [aERZ6L3A4F66s9Zc-wtMIwAAmhQ] keep_alive=[1] [2025-06-07 22:25:28.510553] [R:aERZ6L3A4F66s9Zc-wtMIwAAmhQ] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like show less
Hacking
Web App Attack
hermawan
2025-06-07 06:38:55
(1 week ago)
[Sat Jun 07 13:38:01.652281 2025] [security2:error] [pid 581684:tid 140271393056448] [client 52.159. ... show more [Sat Jun 07 13:38:01.652281 2025] [security2:error] [pid 581684:tid 140271393056448] [client 52.159.227.36:32394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEPeSTu_MIxJRc_0rF6FjQAAyx0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[581714] [tVWUlu31ndc] [aEPeSTu_MIxJRc_0rF6FjQAAyx0] keep_alive=[1] [2025-06-07 13:38:01.652287] [R:aEPeSTu_MIxJRc_0rF6FjQAAyx0] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.coshow less
Hacking
Web App Attack
hermawan
2025-06-06 04:38:07
(1 week ago)
[Fri Jun 06 11:37:22.172002 2025] [security2:error] [pid 265481:tid 139693260785344] [client 52.159. ... show more [Fri Jun 06 11:37:22.172002 2025] [security2:error] [pid 265481:tid 139693260785344] [client 52.159.227.36:34896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEJwglHItuOD7wdXmm0tRQAACwM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[265487] [qBA7yUcZ2CQ] [aEJwglHItuOD7wdXmm0tRQAACwM] keep_alive=[1] [2025-06-06 11:37:22.172013] [R:aEJwglHItuOD7wdXmm0tRQAACwM] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.coshow less
Hacking
Web App Attack
hermawan
2025-06-05 13:12:11
(1 week ago)
[Thu Jun 05 20:10:58.777376 2025] [security2:error] [pid 65996:tid 139883587733184] [client 52.159.2 ... show more [Thu Jun 05 20:10:58.777376 2025] [security2:error] [pid 65996:tid 139883587733184] [client 52.159.227.36:40256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEGXYuahCO6RwALBX5YhpwAAAhg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[66021] [9vgz2Iphc4Y] [aEGXYuahCO6RwALBX5YhpwAAAhg] keep_alive=[1] [2025-06-05 20:10:58.777380] [R:aEGXYuahCO6RwALBX5YhpwAAAhg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/show less
Hacking
Web App Attack
hermawan
2025-06-05 08:33:35
(1 week ago)
[Thu Jun 05 15:33:05.681290 2025] [security2:error] [pid 186427:tid 140562486191808] [client 52.159. ... show more [Thu Jun 05 15:33:05.681290 2025] [security2:error] [pid 186427:tid 140562486191808] [client 52.159.227.36:22599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEFWQZF5fRAh_Ntxeqf6gQAACBE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[186445] [rSFi9tabNJw] [aEFWQZF5fRAh_Ntxeqf6gQAACBE] keep_alive=[1] [2025-06-05 15:33:05.681299] [R:aEFWQZF5fRAh_Ntxeqf6gQAACBE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.coshow less
Hacking
Web App Attack
hermawan
2025-06-04 06:33:19
(1 week ago)
[Wed Jun 04 13:32:50.098207 2025] [security2:error] [pid 227769:tid 139724562876096] [client 52.159. ... show more [Wed Jun 04 13:32:50.098207 2025] [security2:error] [pid 227769:tid 139724562876096] [client 52.159.227.36:11935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aD_okiYLSbN6cMmgjvHnJgAAGgM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[227773] [wVV8KiGVTnA] [aD_okiYLSbN6cMmgjvHnJgAAGgM] keep_alive=[1] [2025-06-04 13:32:50.098212] [R:aD_okiYLSbN6cMmgjvHnJgAAGgM] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.coshow less
Hacking
Web App Attack
MAGIC
2025-06-03 21:07:10
(1 week ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
hermawan
2025-06-03 13:58:12
(1 week ago)
[Tue Jun 03 20:56:09.265192 2025] [security2:error] [pid 3342:tid 140142594475712] [client 52.159.22 ... show more [Tue Jun 03 20:56:09.265192 2025] [security2:error] [pid 3342:tid 140142594475712] [client 52.159.227.36:7733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aD7--TVTDrYrM_Li70qkRQAAUgc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[3379] [3xEUPjPw8tY] [aD7--TVTDrYrM_Li70qkRQAAUgc] keep_alive=[1] [2025-06-03 20:56:09.265197] [R:aD7--TVTDrYrM_Li70qkRQAAUgc] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/botshow less
Hacking
Web App Attack
hermawan
2025-06-03 04:42:32
(1 week ago)
[Tue Jun 03 10:28:13.209006 2025] [security2:error] [pid 1842592:tid 140073174513344] [client 52.159 ... show more [Tue Jun 03 10:28:13.209006 2025] [security2:error] [pid 1842592:tid 140073174513344] [client 52.159.227.36:28184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [unique_id "aD5rzUjZAuUNAtNiFHuyvAAAjQs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1842604] [ustshow less
Hacking
Web App Attack
hermawan
2025-06-03 01:24:56
(1 week ago)
[Tue Jun 03 08:04:23.968750 2025] [security2:error] [pid 1755567:tid 140073178699456] [client 52.159 ... show more [Tue Jun 03 08:04:23.968750 2025] [security2:error] [pid 1755567:tid 140073178699456] [client 52.159.227.36:47311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aD5KF-EbOUKRQZmADNFImwAABA4"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1755582] [6k8Rdrg8o4Q] [aD5KF-EbOUKRQZmADNFImwAABA4] keep_alive=[1] [2025-06-03 08:04:23.968756] [R:aD5KF-EbOUKRQZmADNFImwAABA4] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.show less
Hacking
Web App Attack
United States of America