hermawan
2025-06-13 06:57:26
(1 day ago)
[Fri Jun 13 13:52:33.836996 2025] [security2:error] [pid 43867:tid 140168821266112] [client 52.159.2 ... show more [Fri Jun 13 13:52:33.836996 2025] [security2:error] [pid 43867:tid 140168821266112] [client 52.159.249.108:14508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEvKsTmOeKaBEEO2PVBmRwAABQA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[43868] [ZBmdfbbIstQ] [aEvKsTmOeKaBEEO2PVBmRwAABQA] keep_alive=[1] [2025-06-13 13:52:33.837001] [R:aEvKsTmOeKaBEEO2PVBmRwAABQA] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com
... show less
Hacking
Web App Attack
hermawan
2025-06-12 02:23:58
(2 days ago)
[Thu Jun 12 09:23:28.140726 2025] [security2:error] [pid 602238:tid 139795878553280] [client 52.159. ... show more [Thu Jun 12 09:23:28.140726 2025] [security2:error] [pid 602238:tid 139795878553280] [client 52.159.249.108:11568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEo6IJ6Lq70A8p_oRO75CAAAFhg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[602263] [hAFqnc6wHy8] [aEo6IJ6Lq70A8p_oRO75CAAAFhg] keep_alive=[1] [2025-06-12 09:23:28.140730] [R:aEo6IJ6Lq70A8p_oRO75CAAAFhg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.c
... show less
Hacking
Web App Attack
Anonymous
2025-06-11 16:52:48
(2 days ago)
Action: Block, Reason: DDOS attack detected
DDoS Attack
hermawan
2025-06-09 08:30:55
(5 days ago)
[Mon Jun 09 15:30:10.213297 2025] [security2:error] [pid 994052:tid 139881694086848] [client 52.159. ... show more [Mon Jun 09 15:30:10.213297 2025] [security2:error] [pid 994052:tid 139881694086848] [client 52.159.249.108:50213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEabkkx5EAm7ZgrfrCIAngAAkQI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[994055] [DtVQYwdbX+c] [aEabkkx5EAm7ZgrfrCIAngAAkQI] keep_alive=[1] [2025-06-09 15:30:10.213303] [R:aEabkkx5EAm7ZgrfrCIAngAAkQI] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.c
... show less
Hacking
Web App Attack
Anonymous
2025-06-09 07:53:45
(5 days ago)
Action: Block, Reason: DDOS attack detected
DDoS Attack
hermawan
2025-06-08 10:54:32
(6 days ago)
[Sun Jun 08 17:54:01.418420 2025] [security2:error] [pid 438125:tid 139881842972352] [client 52.159. ... show more [Sun Jun 08 17:54:01.418420 2025] [security2:error] [pid 438125:tid 139881842972352] [client 52.159.249.108:49376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEVryUya0Ej7XVnzPRFcoAABXAY"] [staklim-malang.info] [staklim-malang.info] top=[438132] [njrvR9VA1Rk] [aEVryUya0Ej7XVnzPRFcoAABXAY] keep_alive=[1] [2025-06-08 17:54:01.418465] [R:aEVryUya0Ej7XVnzPRFcoAABXAY] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'s
... show less
Hacking
Web App Attack
MAGIC
2025-06-07 12:03:04
(1 week ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
clapper
2025-06-06 19:36:05
(1 week ago)
(mod_security) mod_security (id:980001) triggered by 52.159.249.108 (US/United States/-): 3 in the l ... show more (mod_security) mod_security (id:980001) triggered by 52.159.249.108 (US/United States/-): 3 in the last 3600 secs; ID: LUC show less
Brute-Force
Bad Web Bot
hermawan
2025-06-06 14:53:32
(1 week ago)
[Fri Jun 06 21:53:31.702607 2025] [security2:error] [pid 226613:tid 140271546197696] [client 52.159. ... show more [Fri Jun 06 21:53:31.702607 2025] [security2:error] [pid 226613:tid 140271546197696] [client 52.159.249.108:60050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEMA68LEcXi-DJVTWcAeNAABBhE"] [staklim-malang.info] [staklim-malang.info] top=[226631] [CJPJZLB2Ddw] [aEMA68LEcXi-DJVTWcAeNAABBhE] keep_alive=[1] [2025-06-06 21:53:31.702613] [R:aEMA68LEcXi-DJVTWcAeNAABBhE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'s
... show less
Hacking
Web App Attack
clapper
2025-06-06 08:35:38
(1 week ago)
(mod_security) mod_security (id:980001) triggered by 52.159.249.108 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:980001) triggered by 52.159.249.108 (US/United States/-): 5 in the last 3600 secs; ID: Clar show less
Brute-Force
Bad Web Bot
hermawan
2025-06-05 12:15:49
(1 week ago)
[Thu Jun 05 19:14:30.149158 2025] [security2:error] [pid 49913:tid 139884083447488] [client 52.159.2 ... show more [Thu Jun 05 19:14:30.149158 2025] [security2:error] [pid 49913:tid 139884083447488] [client 52.159.249.108:45085] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEGKJmeiXkn6ilYueYHJuQAAAgE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[49915] [qp05DorL0Uc] [aEGKJmeiXkn6ilYueYHJuQAAAgE] keep_alive=[1] [2025-06-05 19:14:30.149164] [R:aEGKJmeiXkn6ilYueYHJuQAAAgE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com
... show less
Hacking
Web App Attack
hermawan
2025-06-05 02:17:46
(1 week ago)
[Thu Jun 05 09:14:59.029845 2025] [security2:error] [pid 19178:tid 140562444211904] [client 52.159.2 ... show more [Thu Jun 05 09:14:59.029845 2025] [security2:error] [pid 19178:tid 140562444211904] [client 52.159.249.108:27332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aED9o00l1r8FOrAsGzu2YwABix0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[19208] [RdcsrpE5nGY] [aED9o00l1r8FOrAsGzu2YwABix0] keep_alive=[1] [2025-06-05 09:14:59.029850] [R:aED9o00l1r8FOrAsGzu2YwABix0] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com
... show less
Hacking
Web App Attack
Anonymous
2025-06-04 17:59:31
(1 week ago)
Action: Block, Reason: DDOS attack detected
DDoS Attack
hermawan
2025-06-04 00:41:14
(1 week ago)
[Wed Jun 04 07:27:48.450008 2025] [security2:error] [pid 79574:tid 139724598523584] [client 52.159.2 ... show more [Wed Jun 04 07:27:48.450008 2025] [security2:error] [pid 79574:tid 139724598523584] [client 52.159.249.108:7939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [unique_id "aD-TBOJrjM2xCreDkebmnQABUQY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[79581] [hKcLEWz
... show less
Hacking
Web App Attack
hermawan
2025-06-03 14:01:34
(1 week ago)
[Tue Jun 03 21:00:05.871425 2025] [security2:error] [pid 3342:tid 140142544119488] [client 52.159.24 ... show more [Tue Jun 03 21:00:05.871425 2025] [security2:error] [pid 3342:tid 140142544119488] [client 52.159.249.108:47350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aD7_5TVTDrYrM_Li70ql8AAAQw0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[3396] [kmguTPP88tY] [aD7_5TVTDrYrM_Li70ql8AAAQw0] keep_alive=[1] [2025-06-03 21:00:05.871430] [R:aD7_5TVTDrYrM_Li70ql8AAAQw0] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/b
... show less
Hacking
Web App Attack