hermawan
2025-06-16 14:39:22
(1 day ago)
[Mon Jun 16 21:38:51.440080 2025] [security2:error] [pid 32081:tid 140309947016896] [client 52.255.1 ... show more [Mon Jun 16 21:38:51.440080 2025] [security2:error] [pid 32081:tid 140309947016896] [client 52.255.111.56:30524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "205"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aFAse6_VavT8AVELMWOjxQABQwA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[32082] [neq6WmniK2s] [aFAse6_VavT8AVELMWOjxQABQwA] keep_alive=[1] [2025-06-16 21:38:51.440086] [R:aFAse6_VavT8AVELMWOjxQABQwA] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/
... show less
Hacking
Web App Attack
hermawan
2025-06-15 08:57:09
(2 days ago)
[Sun Jun 15 15:56:17.021853 2025] [security2:error] [pid 381988:tid 140215363532480] [client 52.255. ... show more [Sun Jun 15 15:56:17.021853 2025] [security2:error] [pid 381988:tid 140215363532480] [client 52.255.111.56:17707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aE6KscxNdAxN53-ZHFsLIQAAGwc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[381996] [bQfAc8Ap/rk] [aE6KscxNdAxN53-ZHFsLIQAAGwc] keep_alive=[1] [2025-06-15 15:56:17.021858] [R:aE6KscxNdAxN53-ZHFsLIQAAGwc] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.co
... show less
Hacking
Web App Attack
hermawan
2025-06-13 07:13:26
(4 days ago)
[Fri Jun 13 14:12:09.143781 2025] [security2:error] [pid 54203:tid 140168404117184] [client 52.255.1 ... show more [Fri Jun 13 14:12:09.143781 2025] [security2:error] [pid 54203:tid 140168404117184] [client 52.255.111.56:31243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEvPSVMSjc8HzU0eaxMdUwABDAg"] [staklim-malang.info] [staklim-malang.info] top=[54212] [LWqqwzY6oo0] [aEvPSVMSjc8HzU0eaxMdUwABDAg] keep_alive=[1] [2025-06-13 14:12:09.143788] [R:aEvPSVMSjc8HzU0eaxMdUwABDAg] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'stak
... show less
Hacking
Web App Attack
hermawan
2025-06-12 15:24:51
(5 days ago)
[Thu Jun 12 22:24:50.575405 2025] [security2:error] [pid 6285:tid 139972559472320] [client 52.255.11 ... show more [Thu Jun 12 22:24:50.575405 2025] [security2:error] [pid 6285:tid 139972559472320] [client 52.255.111.56:27091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aErxQtoOGKE1f83CCaB14gABAgs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[6297] [U7TShzkh7kE] [aErxQtoOGKE1f83CCaB14gABAgs] keep_alive=[1] [2025-06-12 22:24:50.575411] [R:aErxQtoOGKE1f83CCaB14gABAgs] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bo
... show less
Hacking
Web App Attack
MAGIC
2025-06-12 01:04:09
(5 days ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
hermawan
2025-06-11 03:59:24
(6 days ago)
[Wed Jun 11 10:58:10.568793 2025] [security2:error] [pid 13292:tid 139629312337600] [client 52.255.1 ... show more [Wed Jun 11 10:58:10.568793 2025] [security2:error] [pid 13292:tid 139629312337600] [client 52.255.111.56:51710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEj-0oMRYtXK3BApJ79fwgABUQQ"] [staklim-malang.info] [staklim-malang.info] top=[13297] [lRlF0pvcogc] [aEj-0oMRYtXK3BApJ79fwgABUQQ] keep_alive=[1] [2025-06-11 10:58:10.568796] [R:aEj-0oMRYtXK3BApJ79fwgABUQQ] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'stak
... show less
Hacking
Web App Attack
hermawan
2025-06-10 15:38:35
(1 week ago)
[Tue Jun 10 22:37:16.146061 2025] [security2:error] [pid 95875:tid 140215514543808] [client 52.255.1 ... show more [Tue Jun 10 22:37:16.146061 2025] [security2:error] [pid 95875:tid 140215514543808] [client 52.255.111.56:44179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "aEhRLAJBWNRfM9y44lsvSgAAWAQ"] [staklim-malang.info] [staklim-malang.info] top=[95880] [HWeUeGFd4Yc] [aEhRLAJBWNRfM9y44lsvSgAAWAQ] keep_alive=[1] [2025-06-10 22:37:16.146064] [R:aEhRLAJBWNRfM9y44lsvSgAAWAQ] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'stak
... show less
Hacking
Web App Attack
hermawan
2025-06-10 06:58:33
(1 week ago)
[Tue Jun 10 13:57:46.269475 2025] [security2:error] [pid 168383:tid 139653243631296] [client 52.255. ... show more [Tue Jun 10 13:57:46.269475 2025] [security2:error] [pid 168383:tid 139653243631296] [client 52.255.111.56:22401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEfXaoMiu7O_OPRVUt0OfAABgwA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[168384] [pdC1Nqpc2cE] [aEfXaoMiu7O_OPRVUt0OfAABgwA] keep_alive=[1] [2025-06-10 13:57:46.269481] [R:aEfXaoMiu7O_OPRVUt0OfAABgwA] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.co
... show less
Hacking
Web App Attack
hermawan
2025-06-09 11:43:40
(1 week ago)
[Mon Jun 09 18:42:08.852394 2025] [security2:error] [pid 1075886:tid 139881660532416] [client 52.255 ... show more [Mon Jun 09 18:42:08.852394 2025] [security2:error] [pid 1075886:tid 139881660532416] [client 52.255.111.56:22273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /Prakicu_Harian_Kab_Malang-v1.html HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/Prakicu_Harian_Kab_Malang-v1.html"] [unique_id "aEbIkBELdEo811vjuwTAMAABhQI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1075889] [V7bgETpMgzA] [aEbIkBELdEo811vjuwTAMAABhQI] keep_alive=[1] [2025-06-09 18:42:08.852398] [R:aEbIkBELdEo811vjuwTAMAABhQI] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko);
... show less
Hacking
Web App Attack
Anonymous
2025-06-09 11:26:57
(1 week ago)
Action: Block, Reason: DDOS attack detected
DDoS Attack
hermawan
2025-06-08 05:59:17
(1 week ago)
[Sun Jun 08 12:54:17.153198 2025] [security2:error] [pid 324723:tid 139881874429632] [client 52.255. ... show more [Sun Jun 08 12:54:17.153198 2025] [security2:error] [pid 324723:tid 139881874429632] [client 52.255.111.56:13578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-musim/4312-prakiraan-musim-kemarau/prakiraan-curah-hujan-musim-kemarau/prakiraan-curah-hujan-musim-kemarau-di-propinsi-jawa-timur/prediksi-6-bulanan-curah-hujan-musim-kemarau-tahun-2025-zona-musim-di-provinsi-jawa-timur/555561827-prediksi-6-bulanan-curah-hujan-musim-kemarau-tahun-2025-zona-musim-di-pro..."] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-musim/4312-prakiraan-mus
... show less
Hacking
Web App Attack
hermawan
2025-06-07 06:20:59
(1 week ago)
[Sat Jun 07 13:14:41.450124 2025] [security2:error] [pid 556906:tid 140271518947008] [client 52.255. ... show more [Sat Jun 07 13:14:41.450124 2025] [security2:error] [pid 556906:tid 140271518947008] [client 52.255.111.56:10894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/profil/meteorologi/list-all-categories/509-meteorologi/analisis-meteorologi/intensitas-curah-hujan-harian-di-wilayah-indonesia HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/509-meteorologi/analisis-meteorologi/intensitas-curah-hujan-harian-di-wilayah-indonesia"] [unique_id "aEPY0RijldyrAsDeHfFhWAAAVw4"] [staklim-jatim.bmkg.go.id] [staklim-jat
... show less
Hacking
Web App Attack
hermawan
2025-06-06 03:48:31
(1 week ago)
[Fri Jun 06 10:46:49.565660 2025] [security2:error] [pid 228540:tid 139693134894784] [client 52.255. ... show more [Fri Jun 06 10:46:49.565660 2025] [security2:error] [pid 228540:tid 139693134894784] [client 52.255.111.56:7328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aEJkqT6UWcxrY-aog21ojQAAihI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[228559] [l/t4FAcPv/g] [aEJkqT6UWcxrY-aog21ojQAAihI] keep_alive=[1] [2025-06-06 10:46:49.565665] [R:aEJkqT6UWcxrY-aog21ojQAAihI] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com
... show less
Hacking
Web App Attack
hermawan
2025-06-05 11:33:18
(1 week ago)
[Thu Jun 05 18:31:56.139452 2025] [security2:error] [pid 33310:tid 139883587733184] [client 52.255.1 ... show more [Thu Jun 05 18:31:56.139452 2025] [security2:error] [pid 33310:tid 139883587733184] [client 52.255.111.56:22535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561123-prakiraan-bulanan-curah-hujan-di-kabupaten-lamongan-untuk-6-bulan-ke-depan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561123-prakiraan-bulanan-curah-hujan-di-kabupaten-lamongan-untuk-6-bulan-ke-depan"] [unique_i
... show less
Hacking
Web App Attack
hermawan
2025-06-05 02:03:31
(1 week ago)
[Thu Jun 05 09:01:08.126180 2025] [security2:error] [pid 9003:tid 140562586887872] [client 52.255.11 ... show more [Thu Jun 05 09:01:08.126180 2025] [security2:error] [pid 9003:tid 140562586887872] [client 52.255.111.56:15304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "206"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /robots.txt HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aED6ZDrea2m2oe8q-EojpQABRAw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[9016] [J8CmfNHJIJk] [aED6ZDrea2m2oe8q-EojpQABRAw] keep_alive=[1] [2025-06-05 09:01:08.126185] [R:aED6ZDrea2m2oe8q-EojpQABRAw] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bo
... show less
Hacking
Web App Attack