๐ซ๐ท
JPPO
2025-09-20 21:27:59
(9 months ago)
Port 80/443 : web crawler without proper DNS NAME : anonymous to be blocked
Web App Attack
๐ฆ๐บ
MAGIC
2025-09-11 00:03:20
(10 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ฎ๐ฉ
hermawan
2025-09-03 03:25:31
(10 months ago)
[Wed Sep 03 10:24:15.809432 2025] [security2:error] [pid 1000719:tid 140261138097856] [client 52.225 ...
show more
[Wed Sep 03 10:24:15.809432 2025] [security2:error] [pid 1000719:tid 140261138097856] [client 52.225.75.213:55401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/analisis-distribusi-curah-hujan-jawa-timur-bulanan-tahun-2017 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/analisis-distribusi-curah-hujan-jawa-timur-bulanan-tahun-2017"] [unique_id "aLe034Y7pyLOQgml4XbejwACwgA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1000720] [58qoI51QhTo] [aLe034Y7pyLOQ
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-09-02 04:21:56
(10 months ago)
[Tue Sep 02 11:21:09.176625 2025] [security2:error] [pid 586519:tid 139890330158784] [client 52.225. ...
show more
[Tue Sep 02 11:21:09.176625 2025] [security2:error] [pid 586519:tid 139890330158784] [client 52.225.75.213:4095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/peta-zona-musim-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/informasi-iklim/peta-zona-musim-di-provinsi-jawa-timur"] [unique_id "aLZwtVI_qPRGlAE_IjTE6AABSAI"] [staklim-malang.info] [staklim-malang.info] top=[586522] [ySRF0QlZPgg] [aLZwtVI_qPRGlAE_IjTE6AABSAI] keep_alive=[1] [2025-09-02 11:21:09.176631] [R:aLZwtVI_qPRGlAE_IjTE6AABSAI] UA:'Mozilla/
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-09-01 07:33:35
(10 months ago)
[Mon Sep 01 14:31:29.729034 2025] [security2:error] [pid 1081913:tid 139982829242048] [client 52.225 ...
show more
[Mon Sep 01 14:31:29.729034 2025] [security2:error] [pid 1081913:tid 139982829242048] [client 52.225.75.213:58180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-musim/298-prakiraan-musim-hujan/prakiraan-curah-hujan-musim-hujan/prakiraan-curah-hujan-musim-hujan-di-malang HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/298-prakiraan-musim-hujan/prakiraan-curah-hujan-musim-hujan/prakiraan-curah-hujan-musim-hujan-di-malang"] [unique_id "aLVL0S3RBp_HFLHIWemVyQACQgI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-09-01 03:08:37
(10 months ago)
[Mon Sep 01 10:04:52.762717 2025] [security2:error] [pid 753994:tid 139982770448064] [client 52.225. ...
show more
[Mon Sep 01 10:04:52.762717 2025] [security2:error] [pid 753994:tid 139982770448064] [client 52.225.75.213:54905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-bulanan/4177-prakiraan-curah-hujan-bulanan/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-bulanan-curah-hujan-di-propinsi-jawa-timur-tahun-2023/555560590-prakiraan-bulanan-curah-hujan-bulan-desember-tahun-2023-update-dari-analisis-bulan-oktober-tahun-2023-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/4177-prakiraan
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-30 16:55:43
(10 months ago)
[Sat Aug 30 23:54:58.426616 2025] [security2:error] [pid 210648:tid 139689942329024] [client 52.225. ...
show more
[Sat Aug 30 23:54:58.426616 2025] [security2:error] [pid 210648:tid 139689942329024] [client 52.225.75.213:24682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/peta-zona-musim-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/informasi-iklim/peta-zona-musim-di-provinsi-jawa-timur"] [unique_id "aLMs4kOgg72uUdPVegODXwADSwI"] [staklim-malang.info] [staklim-malang.info] top=[210651] [uO+e/xcxmUU] [aLMs4kOgg72uUdPVegODXwADSwI] keep_alive=[1] [2025-08-30 23:54:58.426624] [R:aLMs4kOgg72uUdPVegODXwADSwI] UA:'Mozilla
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-29 19:57:34
(10 months ago)
[Sat Aug 30 02:57:02.963714 2025] [security2:error] [pid 1112427:tid 140522011223744] [client 52.225 ...
show more
[Sat Aug 30 02:57:02.963714 2025] [security2:error] [pid 1112427:tid 140522011223744] [client 52.225.75.213:62339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/tingkat-ketersediaan-air-bagi-tanaman/555562246-prediksi-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-jawa-timur-untuk-bulan-oktober-tahun-2025-update-dari-analisis-bulan-juli-tahun-2025 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/tingkat-ketersediaan-air-bagi-tanaman/555562246-prediksi-bulanan-tingkat-ketersed
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-28 19:34:45
(10 months ago)
[Fri Aug 29 02:33:27.313713 2025] [security2:error] [pid 1868615:tid 139746142525120] [client 52.225 ...
show more
[Fri Aug 29 02:33:27.313713 2025] [security2:error] [pid 1868615:tid 139746142525120] [client 52.225.75.213:12349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561952-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis-bulan-april-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561952-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisi
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-27 00:51:26
(10 months ago)
[Wed Aug 27 07:47:50.657099 2025] [security2:error] [pid 636598:tid 140651724220096] [client 52.225. ...
show more
[Wed Aug 27 07:47:50.657099 2025] [security2:error] [pid 636598:tid 140651724220096] [client 52.225.75.213:25560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/4086-klimatologi/infografis/infografis-klimatologi/infografis-bulanan/infografis-bulanan-iklim-ekstrim/infografis-bulanan-iklim-ekstrim-tahun-2021/555559146-infografis-bulanan-iklim-ekstrim-bulan-november-tahun-2021-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4086-klimatologi/inf
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-26 01:07:59
(10 months ago)
[Tue Aug 26 08:02:46.023169 2025] [security2:error] [pid 368800:tid 139676565358272] [client 52.225. ...
show more
[Tue Aug 26 08:02:46.023169 2025] [security2:error] [pid 368800:tid 139676565358272] [client 52.225.75.213:58082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aK0HtTwP5yPTGqHAPmDY5QADwQU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[368806] [NsjjOjrvmjI] [aK0HtTwP5yPTGqHAPmDY5QADwQU] keep_alive=[1] [2025-08-26 08:02:46.023175] [R:aK0HtTwP5yPTGqHAPmDY5QADwQU] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'staklim
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-24 13:43:43
(10 months ago)
[Sun Aug 24 20:30:34.297152 2025] [security2:error] [pid 29788:tid 140090215990976] [client 52.225.7 ...
show more
[Sun Aug 24 20:30:34.297152 2025] [security2:error] [pid 29788:tid 140090215990976] [client 52.225.75.213:59979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/layanan/jenis-dan-tarif-pnbp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/layanan/jenis-dan-tarif-pnbp"] [unique_id "aKsT-suRE9LxKI97MlDLFQADxQk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[29798] [7xeTcRxSV2Q] [aKsT-suRE9LxKI97MlDLFQADxQk] keep_alive=[1] [2025-08-24 20:30:34.297156] [R:aKsT-suRE9LxKI97MlDLFQADxQk] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Ge
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-20 13:17:23
(10 months ago)
[Wed Aug 20 20:14:36.202463 2025] [security2:error] [pid 281978:tid 140393736771264] [client 52.225. ...
show more
[Wed Aug 20 20:14:36.202463 2025] [security2:error] [pid 281978:tid 140393736771264] [client 52.225.75.213:21658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562014-prediksi-bulanan-curah-hujan-bulan-september-tahun-2025-update-dari-analisis-bulan-mei-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562014-prediksi-bulanan-curah-hujan-bulan-september-tahun-2025-update-dari-analis
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-19 22:24:20
(10 months ago)
[Wed Aug 20 05:23:32.970319 2025] [security2:error] [pid 219881:tid 139730634131136] [client 52.225. ...
show more
[Wed Aug 20 05:23:32.970319 2025] [security2:error] [pid 219881:tid 139730634131136] [client 52.225.75.213:26610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/4267-konferensi-pers/rilis-prediksi-musim-hujan-2024-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-categories/4267-konferensi-pers/rilis-prediksi-musim-hujan-2024-2025-di-provinsi-jawa-timur"] [unique_id "aKT5ZBo3J28n0EMnsW4y-wAABAI"] [staklim-malang.info] [staklim-malang.info] top=[219884] [
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-19 05:56:33
(10 months ago)
[Tue Aug 19 12:47:11.984574 2025] [security2:error] [pid 731536:tid 139620552435392] [client 52.225. ...
show more
[Tue Aug 19 12:47:11.984574 2025] [security2:error] [pid 731536:tid 139620552435392] [client 52.225.75.213:17473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561952-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis-bulan-april-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561952-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis
...
show less
Hacking
Web App Attack