hermawan
2025-05-09 01:05:15
(2 months ago)
[Fri May 09 07:57:02.185249 2025] [security2:error] [pid 480380:tid 140042888509120] [client 52.230. ... show more [Fri May 09 07:57:02.185249 2025] [security2:error] [pid 480380:tid 140042888509120] [client 52.230.164.186:14233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561746-prakiraan-bulanan-curah-hujan-bulan-mei-tahun-2025-update-dari-analisis-bulan-januari-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561746-prakiraan-bulanan-curah-hujan-bula
... show less
Hacking
Web App Attack
hermawan
2025-05-08 07:07:59
(2 months ago)
[Thu May 08 13:28:12.200129 2025] [security2:error] [pid 40922:tid 140057455470272] [client 52.230.1 ... show more [Thu May 08 13:28:12.200129 2025] [security2:error] [pid 40922:tid 140057455470272] [client 52.230.164.186:47778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561746-prakiraan-bulanan-curah-hujan-bulan-mei-tahun-2025-update-dari-analisis-bulan-januari-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561746-prakiraan-bulanan-curah-hujan-bulan
... show less
Hacking
Web App Attack
SCHAPPY
2025-05-07 15:58:21
(2 months ago)
Bad bot identified by user agent
Bad Web Bot
hermawan
2025-05-07 15:58:06
(2 months ago)
[Wed May 07 22:52:35.044310 2025] [security2:error] [pid 18289:tid 140018765579968] [client 52.230.1 ... show more [Wed May 07 22:52:35.044310 2025] [security2:error] [pid 18289:tid 140018765579968] [client 52.230.164.186:18979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561856-prediksi-bulanan-curah-hujan-bulan-mei-tahun-2025-update-dari-analisis-bulan-februari-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561856-prediksi-bulanan-curah-hujan-bulan-mei-tahun-2025-update-dari-analisis-bula
... show less
Hacking
Web App Attack
hermawan
2025-05-07 07:57:47
(2 months ago)
[Wed May 07 14:32:07.493011 2025] [security2:error] [pid 454002:tid 140673846691520] [client 52.230. ... show more [Wed May 07 14:32:07.493011 2025] [security2:error] [pid 454002:tid 140673846691520] [client 52.230.164.186:22807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561554-prakiraan-bulanan-curah-hujan-bulan-januari-tahun-2025-update-dari-analisis-bulan-oktober-tahun-2024-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561554-prakiraan-bulanan-curah-hujan-bulan
... show less
Hacking
Web App Attack
hermawan
2025-05-07 04:09:53
(2 months ago)
[Wed May 07 10:44:43.123177 2025] [security2:error] [pid 211884:tid 139767660394176] [client 52.230. ... show more [Wed May 07 10:44:43.123177 2025] [security2:error] [pid 211884:tid 139767660394176] [client 52.230.164.186:23966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-arti HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/90-klimatologi/analisis-klimatologi/artikel-perubahan-iklim/126-arti"] [unique_id "aBrXK5z0h1CbnVudxVM6hQABVgQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[211889] [bFCyjdvsubY] [aBrXK5z0h1CbnVudxVM6hQABVgQ] keep_alive=[1] [2025-05-07 10:44:43.123184]
... show less
Hacking
Web App Attack
hermawan
2025-05-06 10:45:45
(2 months ago)
[Tue May 06 17:33:55.100602 2025] [security2:error] [pid 33953:tid 140030060181184] [client 52.230.1 ... show more [Tue May 06 17:33:55.100602 2025] [security2:error] [pid 33953:tid 140030060181184] [client 52.230.164.186:51185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/component/tags/tag/205 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/205"] [unique_id "aBnlk10y8315qXAOggv18QAA5BY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[33976] [VnlEJ+2CUKw] [aBnlk10y8315qXAOggv18QAA5BY] keep_alive=[1] [2025-05-06 17:33:55.100608] [R:aBnlk10y8315qXAOggv18QAA5BY] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compa
... show less
Hacking
Web App Attack
hermawan
2025-05-06 04:26:27
(2 months ago)
[Tue May 06 11:18:09.981811 2025] [security2:error] [pid 1373365:tid 139678344771264] [client 52.230 ... show more [Tue May 06 11:18:09.981811 2025] [security2:error] [pid 1373365:tid 139678344771264] [client 52.230.164.186:14510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/"] [unique_id "aBmNgZ3wBn-H2jwm6qs_OAABJwg"] [staklim-malang.info] [staklim-malang.info] top=[1373374] [IUN55/c5gLQ] [aBmNgZ3wBn-H2jwm6qs_OAABJwg] keep_alive=[1] [2025-05-06 11:18:09.981816] [R:aBmNgZ3wBn-H2jwm6qs_OAABJwg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'staklim-malang.info
... show less
Hacking
Web App Attack
hermawan
2025-05-05 01:57:25
(2 months ago)
[Mon May 05 08:40:40.972283 2025] [security2:error] [pid 579367:tid 139979581204160] [client 52.230. ... show more [Mon May 05 08:40:40.972283 2025] [security2:error] [pid 579367:tid 139979581204160] [client 52.230.164.186:62613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/artikel/126-artikel-perubahan-iklim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/artikel/126-artikel-perubahan-iklim"] [unique_id "aBgXGKLjEufK0kNbQCyTQgAA2w4"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[579382] [h3JtlgGm2JQ] [aBgXGKLjEufK0kNbQCyTQgAA2w4] keep_alive=[1] [2025-05-05 08:40:40.972286] [R:aBgXGKLjEufK0kNbQCyTQgAA2w4] U
... show less
Hacking
Web App Attack
hermawan
2025-05-04 17:14:33
(2 months ago)
[Mon May 05 00:14:02.952893 2025] [security2:error] [pid 397035:tid 139980701664960] [client 52.230. ... show more [Mon May 05 00:14:02.952893 2025] [security2:error] [pid 397035:tid 139980701664960] [client 52.230.164.186:64316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/gempa-terkini"] [unique_id "aBegWqY4Aq2sDt8oYqwkkQAAnAU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[397041] [XniQgsorxIk] [aBegWqY4Aq2sDt8oYqwkkQAAnAU] keep_alive=[1] [2025-05-05 00:14:02.952899] [R:aBegWqY4Aq2sDt8oYqwkkQAAnAU] UA:'M
... show less
Hacking
Web App Attack
hermawan
2025-05-04 06:40:39
(2 months ago)
[Sun May 04 13:39:22.791367 2025] [security2:error] [pid 111220:tid 139677860349632] [client 52.230. ... show more [Sun May 04 13:39:22.791367 2025] [security2:error] [pid 111220:tid 139677860349632] [client 52.230.164.186:22282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/113-meteorologi/prakiraan-meteorologi/555561507-prakiraan-harian-cuaca-wisata-di-jawa-timur-untuk-hari-ini-pada-pagi-siang-malam-dan-dini-hari-meliputi-gunung-semeru-lumajang-gunung-bromo-dan-gunung-ijen-banyuwangi HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-categories/113-meteorologi/prakiraan-meteorologi/555561507-
... show less
Hacking
Web App Attack
hermawan
2025-05-03 19:29:56
(2 months ago)
[Sun May 04 01:45:57.741930 2025] [security2:error] [pid 807943:tid 140121470809792] [client 52.230. ... show more [Sun May 04 01:45:57.741930 2025] [security2:error] [pid 807943:tid 140121470809792] [client 52.230.164.186:59371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /b/bulanan.pdf HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/b/bulanan.pdf"] [unique_id "aBZkZR2cyjpYtQEynyZoWgAACRs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[807971] [sP9trQc8dds] [aBZkZR2cyjpYtQEynyZoWgAACRs] keep_alive=[1] [2025-05-04 01:45:57.741938] [R:aBZkZR2cyjpYtQEynyZoWgAACRs] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://op
... show less
Hacking
Web App Attack
hermawan
2025-05-03 15:55:05
(2 months ago)
[Sat May 03 21:10:01.797233 2025] [security2:error] [pid 669018:tid 140080110880448] [client 52.230. ... show more [Sat May 03 21:10:01.797233 2025] [security2:error] [pid 669018:tid 140080110880448] [client 52.230.164.186:27219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin/555561628-infografis-bulanan-prakiraan-hujan-bulan-januari-februari-maret-tahun-2025-update-dari-analisis-bulan-november-tahun-2024-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-buletin/555561628-infografis-bu
... show less
Hacking
Web App Attack
hermawan
2025-05-03 11:14:37
(2 months ago)
[Sat May 03 17:57:31.962258 2025] [security2:error] [pid 575280:tid 140685707556544] [client 52.230. ... show more [Sat May 03 17:57:31.962258 2025] [security2:error] [pid 575280:tid 140685707556544] [client 52.230.164.186:52500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561856-prediksi-bulanan-curah-hujan-bulan-mei-tahun-2025-update-dari-analisis-bulan-februari-tahun-2025-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561856-prediksi-bulanan-curah-hujan-bulan-mei-tahun-2025-update-dari-analisis-bul
... show less
Hacking
Web App Attack
hermawan
2025-05-03 08:45:04
(2 months ago)
[Sat May 03 15:36:44.715808 2025] [security2:error] [pid 515594:tid 140194457974464] [client 52.230. ... show more [Sat May 03 15:36:44.715808 2025] [security2:error] [pid 515594:tid 140194457974464] [client 52.230.164.186:8429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "204"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aBXVnFywJyFUpkyHoQvUEQAAXyE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[515628] [Y4+yKq8olRc] [aBXVnFywJyFUpkyHoQvUEQAAXyE] keep_alive=[1] [2025-05-03 15:36:44.715815] [R:aBXVnFywJyFUpkyHoQvUEQAAXyE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.co
... show less
Hacking
Web App Attack