๐ฎ๐ฉ
hermawan
2025-09-03 03:26:02
(10 months ago)
[Wed Sep 03 10:24:15.850365 2025] [security2:error] [pid 1000881:tid 140261129705152] [client 52.225 ...
show more
[Wed Sep 03 10:24:15.850365 2025] [security2:error] [pid 1000881:tid 140261129705152] [client 52.225.75.210:50389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur-tahun-2017 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur-tahun-2017"] [unique_id "aLe030yswF1RakM7jLHhPgADgAE"] [staklim-malang.info] [staklim-malang.info] top=[1000883] [FlSpIx3thTo] [aLe030yswF1RakM7jLHhPgAD
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-09-02 00:51:46
(10 months ago)
[Tue Sep 02 07:48:46.804489 2025] [security2:error] [pid 290861:tid 139890281866944] [client 52.225. ...
show more
[Tue Sep 02 07:48:46.804489 2025] [security2:error] [pid 290861:tid 139890281866944] [client 52.225.75.210:49028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/analisis-musim/510-meteorologi/analisis-meteorologi/intensitas-curah-hujan-harian-di-wilayah-indonesia/intensitas-curah-hujan-harian-di-wilayah-indonesia-tahun-2015/580-intensitas-curah-hujan-harian-indonesia-pada-11-juni-2015-pukul-07-00-wib-12-juni-2015-pukul-07-00-wib HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-musim/510-meteorologi/analisis-meteorologi/intensitas-cu
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-09-01 11:51:49
(10 months ago)
[Mon Sep 01 18:51:45.632722 2025] [security2:error] [pid 1386265:tid 140398277154496] [client 52.225 ...
show more
[Mon Sep 01 18:51:45.632722 2025] [security2:error] [pid 1386265:tid 140398277154496] [client 52.225.75.210:50225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/peta-zona-musim-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/informasi-iklim/peta-zona-musim-di-provinsi-jawa-timur"] [unique_id "aLWI0fGx7jHkqQA5FVwbbgABggA"] [staklim-malang.info] [staklim-malang.info] top=[1386266] [pIPt/vs2wRs] [aLWI0fGx7jHkqQA5FVwbbgABggA] keep_alive=[1] [2025-09-01 18:51:45.632728] [R:aLWI0fGx7jHkqQA5FVwbbgABggA] UA:'Mozil
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-09-01 03:21:11
(10 months ago)
[Mon Sep 01 10:20:20.671378 2025] [security2:error] [pid 773266:tid 139982732682944] [client 52.225. ...
show more
[Mon Sep 01 10:20:20.671378 2025] [security2:error] [pid 773266:tid 139982732682944] [client 52.225.75.210:34131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan/555560623-analisis-bulanan-distribusi-curah-hujan-bulan-november-tahun-2023-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan/555560623-analisis-bulanan-distribusi-curah-hujan-bulan-novembe
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-29 10:29:50
(10 months ago)
[Fri Aug 29 17:29:02.941972 2025] [security2:error] [pid 606727:tid 140522019555008] [client 52.225. ...
show more
[Fri Aug 29 17:29:02.941972 2025] [security2:error] [pid 606727:tid 140522019555008] [client 52.225.75.210:40266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561952-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis-bulan-april-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561952-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-28 03:05:18
(10 months ago)
[Thu Aug 28 10:04:51.201834 2025] [security2:error] [pid 785596:tid 139748038403776] [client 52.225. ...
show more
[Thu Aug 28 10:04:51.201834 2025] [security2:error] [pid 785596:tid 139748038403776] [client 52.225.75.210:21102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim/555561727-infografis-bulanan-iklim-suhu-udara-maksimum-bulan-januari-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim/555561727-infografis-bulanan-iklim-suhu-udara-maksimum-bulan-jan
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-27 03:00:54
(10 months ago)
[Wed Aug 27 09:59:31.156096 2025] [security2:error] [pid 778422:tid 140651787179712] [client 52.225. ...
show more
[Wed Aug 27 09:59:31.156096 2025] [security2:error] [pid 778422:tid 140651787179712] [client 52.225.75.210:63662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555561854-prediksi-bulanan-sifat-hujan-bulan-juni-tahun-2025-update-dari-analisis-bulan-februari-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/sifat-hujan/3-bulan-ke-depan/555561854-prediksi-bulanan-sifat-hujan-bulan-juni-tahun-2025-update-dari-analisis-bu
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-26 02:31:46
(10 months ago)
[Tue Aug 26 09:26:16.370157 2025] [security2:error] [pid 475050:tid 139676548572864] [client 52.225. ...
show more
[Tue Aug 26 09:26:16.370157 2025] [security2:error] [pid 475050:tid 139676548572864] [client 52.225.75.210:63360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-musim/4268-prakiraan-musim-hujan/prakiraan-awal-musim-hujan/prakiraan-awal-musim-hujan-propinsi-jawa-timur/prediksi-awal-musim-hujan-tahun-2024-2025-zona-musim-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-musim/4268-prakiraan-musim-hujan/prakiraan-awal-musim-hujan/prakiraan-awal-musim-hujan-propinsi-jawa-timur/prediksi-awal-musim-hujan-tahun-
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-24 18:54:51
(10 months ago)
[Mon Aug 25 01:54:50.986612 2025] [security2:error] [pid 148259:tid 139747318990528] [client 52.225. ...
show more
[Mon Aug 25 01:54:50.986612 2025] [security2:error] [pid 148259:tid 139747318990528] [client 52.225.75.210:59726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/peta-zona-musim-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/informasi-iklim/peta-zona-musim-di-provinsi-jawa-timur"] [unique_id "aKtf-pTKe1z-bEKK3FCMEwACABc"] [staklim-malang.info] [staklim-malang.info] top=[148283] [A3VI+eAvMpY] [aKtf-pTKe1z-bEKK3FCMEwACABc] keep_alive=[1] [2025-08-25 01:54:50.986618] [R:aKtf-pTKe1z-bEKK3FCMEwACABc] UA:'Mozilla
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-24 13:44:16
(10 months ago)
[Sun Aug 24 20:30:34.338769 2025] [security2:error] [pid 29682:tid 140090553464512] [client 52.225.7 ...
show more
[Sun Aug 24 20:30:34.338769 2025] [security2:error] [pid 29682:tid 140090553464512] [client 52.225.75.210:59989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/anomali HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/anomali"] [unique_id "aKsT-ikP2X-g-xk1sydgXQABwQA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[29683] [XYaTcRz9UGQ] [aKsT-ikP2X-g-xk1sydgXQABwQA] keep_alive=[1] [2025-08-24 20:30:34.338774] [R:aKsT-ikP2X-g-xk1sydgXQABwQA] UA:'Mozilla/5.0 Appl
...
show less
Hacking
Web App Attack
๐ซ๐ท
JPPO
2025-08-23 20:52:25
(10 months ago)
Port 80/443 : web crawler without proper DNS NAME : anonymous to be blocked
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-23 15:38:18
(10 months ago)
[Sat Aug 23 22:37:46.916512 2025] [security2:error] [pid 1092268:tid 140451890763456] [client 52.225 ...
show more
[Sat Aug 23 22:37:46.916512 2025] [security2:error] [pid 1092268:tid 140451890763456] [client 52.225.75.210:38102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562115-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis-bulan-juni-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562115-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-22 14:02:03
(10 months ago)
[Fri Aug 22 21:00:12.584768 2025] [security2:error] [pid 746951:tid 139823502223040] [client 52.225. ...
show more
[Fri Aug 22 21:00:12.584768 2025] [security2:error] [pid 746951:tid 139823502223040] [client 52.225.75.210:60259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /b/bulananbojonegoro.pdf HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/b/bulananbojonegoro.pdf"] [unique_id "aKh37DLoysfWL2GdAbetXgAAARg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[746976] [UBDenzQa0VE] [aKh37DLoysfWL2GdAbetXgAAARg] keep_alive=[1] [2025-08-22 21:00:12.584775] [R:aKh37DLoysfWL2GdAbetXgAAARg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-Us
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-22 00:11:47
(10 months ago)
[Fri Aug 22 07:11:00.652540 2025] [security2:error] [pid 519785:tid 139764253570752] [client 52.225. ...
show more
[Fri Aug 22 07:11:00.652540 2025] [security2:error] [pid 519785:tid 139764253570752] [client 52.225.75.210:15493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/gempa-terkini"] [unique_id "aKe1lMB5aQtMHFKT_Mj5HQAC0AM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[519789] [eRdwCqkRY4U] [aKe1lMB5aQtMHFKT_Mj5HQAC0AM] keep_alive=[1] [2025-08-22 07:11:00.652565] [R:aKe1lMB5aQtMHFKT_Mj5HQAC0AM] UA:'Mo
...
show less
Hacking
Web App Attack
๐ฆ๐บ
MAGIC
2025-08-21 00:11:28
(10 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot