๐ฎ๐ฉ
penjaga BRIN
2024-04-25 21:29:45
(2 years ago)
nginx-dos-240
Bad Web Bot
๐ฎ๐ฉ
hermawan
2023-05-02 08:06:30
(3 years ago)
[Tue May 02 15:06:29.250333 2023] [security2:error] [pid 41776:tid 140021688424000] [client 103.121. ...
show more
[Tue May 02 15:06:29.250333 2023] [security2:error] [pid 41776:tid 140021688424000] [client 103.121.213.202:41372] [client 103.121.213.202] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "151"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555560112-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2023-04-30 14:01:36
(3 years ago)
[Sun Apr 30 21:01:35.430077 2023] [security2:error] [pid 26543:tid 140562451650112] [client 103.121. ...
show more
[Sun Apr 30 21:01:35.430077 2023] [security2:error] [pid 26543:tid 140562451650112] [client 103.121.213.202:33902] [client 103.121.213.202] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "151"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-dasarian/distribusi-curah-hujan-dasarian-provinsi-jawa-timur/555560105-analisis-dasarian-distribusi-curah-hujan-dasarian-iii-april-2023-t
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2023-04-22 16:05:55
(3 years ago)
[Sat Apr 22 23:05:55.121789 2023] [security2:error] [pid 24243:tid 140498849232448] [client 103.121. ...
show more
[Sat Apr 22 23:05:55.121789 2023] [security2:error] [pid 24243:tid 140498849232448] [client 103.121.213.202:60446] [client 103.121.213.202] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "151"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555560101-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2023-04-20 16:01:59
(3 years ago)
[Thu Apr 20 23:01:58.177076 2023] [security2:error] [pid 48015:tid 139984895981120] [client 103.121. ...
show more
[Thu Apr 20 23:01:58.177076 2023] [security2:error] [pid 48015:tid 139984895981120] [client 103.121.213.202:36882] [client 103.121.213.202] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "151"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-dasarian/distribusi-curah-hujan-dasarian-provinsi-jawa-timur/555560095-analisis-dasarian-distribusi-curah-hujan-dasarian-ii-april-2023-ta
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2023-04-05 15:15:47
(3 years ago)
[Wed Apr 05 22:15:45.907731 2023] [security2:error] [pid 70137:tid 140665928939072] [client 103.121. ...
show more
[Wed Apr 05 22:15:45.907731 2023] [security2:error] [pid 70137:tid 140665928939072] [client 103.121.213.202:52668] [client 103.121.213.202] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "151"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-musim/prakiraan-musim-kemarau/prakiraan-awal-musim-kemarau"] [unique_id "ZC2QoY19sTu9h4voyu9VtgAAAC0"] [staklim-jatim.bmkg.go.id] [stak
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2023-04-01 17:02:50
(3 years ago)
[Sun Apr 02 00:02:48.034112 2023] [security2:error] [pid 18350:tid 139943707711040] [client 103.121. ...
show more
[Sun Apr 02 00:02:48.034112 2023] [security2:error] [pid 18350:tid 139943707711040] [client 103.121.213.202:59516] [client 103.121.213.202] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "151"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555560041-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2023-03-31 16:01:02
(3 years ago)
[Fri Mar 31 23:01:01.571854 2023] [security2:error] [pid 119041:tid 139841024849472] [client 103.121 ...
show more
[Fri Mar 31 23:01:01.571854 2023] [security2:error] [pid 119041:tid 139841024849472] [client 103.121.213.202:45054] [client 103.121.213.202] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "151"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-dasarian/monitoring-hari-tanpa-hujan-berturut-turut/555560034-analisis-dasarian-monitoring-hari-tanpa-hujan-berturut-turut-update-31-mar
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-11-22 10:52:16
(3 years ago)
[Tue Nov 22 22:52:14.578268 2022] [-:error] [pid 37051:tid 140449024558656] [client 103.121.213.202: ...
show more
[Tue Nov 22 22:52:14.578268 2022] [-:error] [pid 37051:tid 140449024558656] [client 103.121.213.202:37750] [client 103.121.213.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "144"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: Python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0-rc1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/analisis-dinamika-atmosfer-laut-analisis-dan-prediksi-curah-hujan/555559813-analisis-dan-prediksi-dasarian-dinamika-atmosfer-laut-dan-prediksi-cu
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2021-10-11 12:14:59
(4 years ago)
[Mon Oct 11 23:14:56.480171 2021] [:error] [pid 2158:tid 139879988041472] [client 103.121.213.202:33 ...
show more
[Mon Oct 11 23:14:56.480171 2021] [:error] [pid 2158:tid 139879988041472] [client 103.121.213.202:33674] [client 103.121.213.202] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4077-klimatologi/analisis-klimatologi/monitoring-dan-prakiraan-curah-hujan-dasarian-di-provinsi-jawa-timur/monitoring-dan-prakir
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2021-10-10 17:46:33
(4 years ago)
[Mon Oct 11 04:46:29.689962 2021] [:error] [pid 2041:tid 140426153547520] [client 103.121.213.202:51 ...
show more
[Mon Oct 11 04:46:29.689962 2021] [:error] [pid 2041:tid 140426153547520] [client 103.121.213.202:51344] [client 103.121.213.202] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555559039-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-oktob
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2021-10-03 12:28:48
(4 years ago)
[Sun Oct 03 23:28:45.059841 2021] [:error] [pid 2029:tid 140283228452608] [client 103.121.213.202:51 ...
show more
[Sun Oct 03 23:28:45.059841 2021] [:error] [pid 2029:tid 140283228452608] [client 103.121.213.202:51956] [client 103.121.213.202] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/analisis-dinamika-atmosfer-laut-analisis-dan-prediksi-curah-hujan/555559036-analisis-dan-prediksi-dasarian-dinamika-atmosfer-laut-dan-prediksi-curah-hu
...
show less
Hacking
Web App Attack
Anonymous
2021-10-02 02:38:19
(4 years ago)
Excessive crawling/scraping
Hacking
Brute-Force
๐ฎ๐ฉ
hermawan
2021-09-24 06:46:59
(5 years ago)
[Fri Sep 24 17:46:56.617275 2021] [:error] [pid 2129:tid 140060804499200] [client 103.121.213.202:46 ...
show more
[Fri Sep 24 17:46:56.617275 2021] [:error] [pid 2129:tid 140060804499200] [client 103.121.213.202:46282] [client 103.121.213.202] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4077-klimatologi/analisis-klimatologi/monitoring-dan-prakiraan-curah-hujan-dasarian-di-provinsi-jawa-timur/monitoring-dan-prakir
...
show less
Hacking
Web App Attack
๐ฌ๐ง
TURKISH.CO.UK
2021-09-23 22:37:21
(5 years ago)
server logs..
Port Scan