hermawan
2025-06-19 12:58:48
(3 weeks ago)
[Thu Jun 19 19:57:00.519206 2025] [security2:error] [pid 57731:tid 140234942482112] [client 52.159.2 ... show more [Thu Jun 19 19:57:00.519206 2025] [security2:error] [pid 57731:tid 140234942482112] [client 52.159.227.36:39512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "222"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/180 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/180"] [unique_id "aFQJHFMAZG_QVdmGwsunwAAADRc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[57755] [m00ESGxQ1CE] [aFQJHFMAZG_QVdmGwsunwAAADRc] keep_alive=[1] [2025-06-19 19:57:00.519213] [R:aFQJHFMAZG_QVdmGwsunwAAADRc] UA:'Mozilla/5.0 AppleWebKit/show less
Hacking
Web App Attack
hermawan
2025-06-18 03:46:04
(3 weeks ago)
[Wed Jun 18 10:44:42.653093 2025] [security2:error] [pid 234265:tid 140703739909824] [client 52.159. ... show more [Wed Jun 18 10:44:42.653093 2025] [security2:error] [pid 234265:tid 140703739909824] [client 52.159.227.36:63201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "222"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan/555561747-buletin-bulanan-informasi-iklim-dan-lingkungan-volume-10-no-2-edisi-februari-tahun-2025-update-dari-analisis-bulan-januari-2025 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan/555561747-buletin-bulanan-informasi-iklim-dan-lingkungan-volume-10-noshow less
Hacking
Web App Attack
hermawan
2025-06-16 12:13:22
(3 weeks ago)
[Mon Jun 16 19:12:04.191714 2025] [security2:error] [pid 139086:tid 140535346910912] [client 52.159. ... show more [Mon Jun 16 19:12:04.191714 2025] [security2:error] [pid 139086:tid 140535346910912] [client 52.159.227.36:47660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "205"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aFAKFL_0RgCc92STWpcIrwAASho"] [staklim-malang.info] [staklim-malang.info] top=[139113] [gaTHTfc/+xU] [aFAKFL_0RgCc92STWpcIrwAASho] keep_alive=[1] [2025-06-16 19:12:04.191720] [R:aFAKFL_0RgCc92STWpcIrwAASho] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'stshow less
Hacking
Web App Attack
hermawan
2025-06-13 12:44:40
(4 weeks ago)
[Fri Jun 13 19:43:54.339078 2025] [security2:error] [pid 27635:tid 140221509265088] [client 52.159.2 ... show more [Fri Jun 13 19:43:54.339078 2025] [security2:error] [pid 27635:tid 140221509265088] [client 52.159.227.36:45963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEwdCvpEHz2gz_dqPaJBhQAAzAI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[27638] [6AwcZquzFQo] [aEwdCvpEHz2gz_dqPaJBhQAAzAI] keep_alive=[1] [2025-06-13 19:43:54.339083] [R:aEwdCvpEHz2gz_dqPaJBhQAAzAI] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/show less
Hacking
Web App Attack
MAGIC
2025-06-12 15:09:45
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
hermawan
2025-06-11 04:31:06
(1 month ago)
[Wed Jun 11 11:27:51.775341 2025] [security2:error] [pid 6413:tid 140473982146240] [client 52.159.22 ... show more [Wed Jun 11 11:27:51.775341 2025] [security2:error] [pid 6413:tid 140473982146240] [client 52.159.227.36:18356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEkFxxwjB-vGZPIHflnKkwABTh0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[6444] [HalwPBxdjwo] [aEkFxxwjB-vGZPIHflnKkwABTh0] keep_alive=[1] [2025-06-11 11:27:51.775348] [R:aEkFxxwjB-vGZPIHflnKkwABTh0] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/boshow less
Hacking
Web App Attack
hermawan
2025-06-11 02:13:25
(1 month ago)
[Wed Jun 11 09:12:55.181507 2025] [security2:error] [pid 347347:tid 139883170444992] [client 52.159. ... show more [Wed Jun 11 09:12:55.181507 2025] [security2:error] [pid 347347:tid 139883170444992] [client 52.159.227.36:41811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEjmJ8ooTPv16Ep-yJjRjwAAWBA"] [staklim-malang.info] [staklim-malang.info] top=[347364] [g2nYWZq9NXE] [aEjmJ8ooTPv16Ep-yJjRjwAAWBA] keep_alive=[1] [2025-06-11 09:12:55.181514] [R:aEjmJ8ooTPv16Ep-yJjRjwAAWBA] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'stshow less
Hacking
Web App Attack
hermawan
2025-06-10 16:32:01
(1 month ago)
[Tue Jun 10 23:29:50.486017 2025] [security2:error] [pid 112976:tid 140215294240448] [client 52.159. ... show more [Tue Jun 10 23:29:50.486017 2025] [security2:error] [pid 112976:tid 140215294240448] [client 52.159.227.36:21129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEhdfoNuL6lb5NTEUI4GqwAAEh0"] [staklim-malang.info] [staklim-malang.info] top=[113006] [yEyYNKIvrLs] [aEhdfoNuL6lb5NTEUI4GqwAAEh0] keep_alive=[1] [2025-06-10 23:29:50.486023] [R:aEhdfoNuL6lb5NTEUI4GqwAAEh0] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'stshow less
Hacking
Web App Attack
hermawan
2025-06-07 15:25:59
(1 month ago)
[Sat Jun 07 22:25:28.510549 2025] [security2:error] [pid 5182:tid 139881813571264] [client 52.159.22 ... show more [Sat Jun 07 22:25:28.510549 2025] [security2:error] [pid 5182:tid 139881813571264] [client 52.159.227.36:25442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/component/tags/tag/klimatologi HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/klimatologi"] [unique_id "aERZ6L3A4F66s9Zc-wtMIwAAmhQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[5203] [vS3h9GQyiSU] [aERZ6L3A4F66s9Zc-wtMIwAAmhQ] keep_alive=[1] [2025-06-07 22:25:28.510553] [R:aERZ6L3A4F66s9Zc-wtMIwAAmhQ] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like show less
Hacking
Web App Attack
hermawan
2025-06-07 06:38:55
(1 month ago)
[Sat Jun 07 13:38:01.652281 2025] [security2:error] [pid 581684:tid 140271393056448] [client 52.159. ... show more [Sat Jun 07 13:38:01.652281 2025] [security2:error] [pid 581684:tid 140271393056448] [client 52.159.227.36:32394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEPeSTu_MIxJRc_0rF6FjQAAyx0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[581714] [tVWUlu31ndc] [aEPeSTu_MIxJRc_0rF6FjQAAyx0] keep_alive=[1] [2025-06-07 13:38:01.652287] [R:aEPeSTu_MIxJRc_0rF6FjQAAyx0] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.coshow less
Hacking
Web App Attack
hermawan
2025-06-06 04:38:07
(1 month ago)
[Fri Jun 06 11:37:22.172002 2025] [security2:error] [pid 265481:tid 139693260785344] [client 52.159. ... show more [Fri Jun 06 11:37:22.172002 2025] [security2:error] [pid 265481:tid 139693260785344] [client 52.159.227.36:34896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEJwglHItuOD7wdXmm0tRQAACwM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[265487] [qBA7yUcZ2CQ] [aEJwglHItuOD7wdXmm0tRQAACwM] keep_alive=[1] [2025-06-06 11:37:22.172013] [R:aEJwglHItuOD7wdXmm0tRQAACwM] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.coshow less
Hacking
Web App Attack
hermawan
2025-06-05 13:12:11
(1 month ago)
[Thu Jun 05 20:10:58.777376 2025] [security2:error] [pid 65996:tid 139883587733184] [client 52.159.2 ... show more [Thu Jun 05 20:10:58.777376 2025] [security2:error] [pid 65996:tid 139883587733184] [client 52.159.227.36:40256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEGXYuahCO6RwALBX5YhpwAAAhg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[66021] [9vgz2Iphc4Y] [aEGXYuahCO6RwALBX5YhpwAAAhg] keep_alive=[1] [2025-06-05 20:10:58.777380] [R:aEGXYuahCO6RwALBX5YhpwAAAhg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/show less
Hacking
Web App Attack
hermawan
2025-06-05 08:33:35
(1 month ago)
[Thu Jun 05 15:33:05.681290 2025] [security2:error] [pid 186427:tid 140562486191808] [client 52.159. ... show more [Thu Jun 05 15:33:05.681290 2025] [security2:error] [pid 186427:tid 140562486191808] [client 52.159.227.36:22599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEFWQZF5fRAh_Ntxeqf6gQAACBE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[186445] [rSFi9tabNJw] [aEFWQZF5fRAh_Ntxeqf6gQAACBE] keep_alive=[1] [2025-06-05 15:33:05.681299] [R:aEFWQZF5fRAh_Ntxeqf6gQAACBE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.coshow less
Hacking
Web App Attack
hermawan
2025-06-04 06:33:19
(1 month ago)
[Wed Jun 04 13:32:50.098207 2025] [security2:error] [pid 227769:tid 139724562876096] [client 52.159. ... show more [Wed Jun 04 13:32:50.098207 2025] [security2:error] [pid 227769:tid 139724562876096] [client 52.159.227.36:11935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aD_okiYLSbN6cMmgjvHnJgAAGgM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[227773] [wVV8KiGVTnA] [aD_okiYLSbN6cMmgjvHnJgAAGgM] keep_alive=[1] [2025-06-04 13:32:50.098212] [R:aD_okiYLSbN6cMmgjvHnJgAAGgM] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.coshow less
Hacking
Web App Attack
MAGIC
2025-06-03 21:07:10
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
United States of America