๐ฎ๐ฉ
hermawan
2021-03-10 09:54:33
(5 years ago)
[Wed Mar 10 21:54:33.202628 2021] [:error] [pid 26647:tid 140550337894144] [client 103.121.213.206:5 ...
show more
[Wed Mar 10 21:54:33.202628 2021] [:error] [pid 26647:tid 140550337894144] [client 103.121.213.206:53826] [client 103.121.213.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/daerah-potensi-banjir-di-provinsi-jawa-timur/555558588-prakiraan-bulanan-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bula
...
show less
Hacking
Web App Attack
๐ฌ๐ง
TURKISH.CO.UK
2021-02-10 00:32:01
(5 years ago)
server logs..
VPN IP
๐ฎ๐ฉ
hermawan
2021-02-09 03:14:44
(5 years ago)
[Tue Feb 09 15:14:46.639313 2021] [:error] [pid 948:tid 140030371731200] [client 103.121.213.206:498 ...
show more
[Tue Feb 09 15:14:46.639313 2021] [:error] [pid 948:tid 140030371731200] [client 103.121.213.206:49848] [client 103.121.213.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4086-klimatologi/infografis/infografis-klimatologi/infografis-bulanan/infografis-bulanan-iklim-ekstrim/infografis-bulanan-ikl
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2021-02-01 15:41:02
(5 years ago)
[Tue Feb 02 03:41:04.446457 2021] [:error] [pid 22112:tid 139961642776320] [client 103.121.213.206:5 ...
show more
[Tue Feb 02 03:41:04.446457 2021] [:error] [pid 22112:tid 139961642776320] [client 103.121.213.206:55640] [client 103.121.213.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555558520-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2021-01-23 01:47:57
(5 years ago)
[Sat Jan 23 13:47:52.082116 2021] [:error] [pid 15709:tid 140526355474176] [client 103.121.213.206:5 ...
show more
[Sat Jan 23 13:47:52.082116 2021] [:error] [pid 15709:tid 140526355474176] [client 103.121.213.206:58786] [client 103.121.213.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/artikel/555556770-buku-saku-masyarakat-indonesia-sadar-iklim-dan-cuaca-buku-saku-masyarakat-indonesia-sadar-iklim-dan-cuaca"] [unique_id "YAvGmEJP
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2021-01-22 12:10:01
(5 years ago)
[Sat Jan 23 00:10:01.494574 2021] [:error] [pid 1196:tid 140643300534016] [client 103.121.213.206:40 ...
show more
[Sat Jan 23 00:10:01.494574 2021] [:error] [pid 1196:tid 140643300534016] [client 103.121.213.206:40106] [client 103.121.213.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4083-klimatologi/infografis/infografis-klimatologi/infografis-dasarian/infografis-dasarian-tahun-2021/555558512-infografis-d
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2021-01-21 07:59:55
(5 years ago)
[Thu Jan 21 19:59:55.185873 2021] [:error] [pid 4559:tid 139704916629248] [client 103.121.213.206:47 ...
show more
[Thu Jan 21 19:59:55.185873 2021] [:error] [pid 4559:tid 139704916629248] [client 103.121.213.206:47910] [client 103.121.213.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman/555558510-prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-jawa
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2021-01-20 10:54:23
(5 years ago)
[Wed Jan 20 22:54:21.864227 2021] [:error] [pid 23232:tid 140641407956736] [client 103.121.213.206:3 ...
show more
[Wed Jan 20 22:54:21.864227 2021] [:error] [pid 23232:tid 140641407956736] [client 103.121.213.206:38442] [client 103.121.213.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.21.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/indeks-presipitasi-terstandarisasi-spi-3-bulanan/555558491-analisis-bulanan-indeks-kekeringan-dan-kebasahan-meteorologis-
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2021-01-11 11:18:24
(5 years ago)
[Mon Jan 11 23:18:25.736934 2021] [:error] [pid 6438:tid 139757741938432] [client 103.121.213.206:35 ...
show more
[Mon Jan 11 23:18:25.736934 2021] [:error] [pid 6438:tid 139757741938432] [client 103.121.213.206:35978] [client 103.121.213.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4076-klimatologi/prakiraan-klimatologi/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/prakiraan-dasarian-daerah
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2021-01-08 10:24:55
(5 years ago)
[Fri Jan 08 22:24:55.718136 2021] [:error] [pid 22729:tid 140390777898752] [client 103.121.213.206:3 ...
show more
[Fri Jan 08 22:24:55.718136 2021] [:error] [pid 22729:tid 140390777898752] [client 103.121.213.206:34310] [client 103.121.213.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/3965-klimatologi/infografis/infografis-klimatologi/555558470-infografis-tahunan-kaleidoskop-iklim-di-provinsi-jawa-timur-ta
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2020-12-21 09:23:18
(5 years ago)
[Mon Dec 21 21:23:00.626785 2020] [:error] [pid 29213:tid 140465709815552] [client 103.121.213.206:5 ...
show more
[Mon Dec 21 21:23:00.626785 2020] [:error] [pid 29213:tid 140465709815552] [client 103.121.213.206:53906] [client 103.121.213.206] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-probabilistik-curah-hujan-dasarian-provinsi-jawa-timur/555558456-prakiraan-dasarian-probabilistik-curah-hujan-dasarian-ii
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2020-12-20 21:09:12
(5 years ago)
[Mon Dec 21 09:09:11.176715 2020] [:error] [pid 22998:tid 140179134211840] [client 103.121.213.206:5 ...
show more
[Mon Dec 21 09:09:11.176715 2020] [:error] [pid 22998:tid 140179134211840] [client 103.121.213.206:53908] [client 103.121.213.206] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/555558442-prakiraan-bulanan-curah-hujan-bulan-februari-tahun-2021-update-dari-analisis-bulan-november-
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2020-12-20 12:23:45
(5 years ago)
[Mon Dec 21 00:23:46.037014 2020] [:error] [pid 9637:tid 140243357394688] [client 103.121.213.206:50 ...
show more
[Mon Dec 21 00:23:46.037014 2020] [:error] [pid 9637:tid 140243357394688] [client 103.121.213.206:50490] [client 103.121.213.206] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan/555558432-analisis-bulanan-distribusi-curah-hujan-bulan-november-tahun-2020-d
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2020-12-20 11:18:00
(5 years ago)
[Sun Dec 20 23:17:59.952239 2020] [:error] [pid 4291:tid 139760500725504] [client 103.121.213.206:40 ...
show more
[Sun Dec 20 23:17:59.952239 2020] [:error] [pid 4291:tid 139760500725504] [client 103.121.213.206:40882] [client 103.121.213.206] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555558445-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-janua
...
show less
Hacking
Web App Attack