๐ฎ๐ฉ
hermawan
2022-09-07 16:44:40
(4 years ago)
[Thu Sep 08 03:44:37.344403 2022] [-:error] [pid 373389:tid 140735609304832] [client 141.8.142.90:50 ...
show more
[Thu Sep 08 03:44:37.344403 2022] [-:error] [pid 373389:tid 140735609304832] [client 141.8.142.90:50372] [client 141.8.142.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/informasi-iklim/analisis-dinamika-atmosfer-laut-analisis-dan-prediksi-curah-hujan/623-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2017/555556379-analisis-dinamika-atmosfer-laut-analisis-dan-prediksi-curah-hujan-update-dasarian-iii-november-2017 HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/analisis-dinamika-atmosfer-laut-analisis-dan-prediksi-curah-hujan/623-analisis-kondisi-din
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-09-07 07:37:43
(4 years ago)
[Wed Sep 07 18:37:40.728858 2022] [-:error] [pid 158527:tid 140735433123584] [client 141.8.142.90:38 ...
show more
[Wed Sep 07 18:37:40.728858 2022] [-:error] [pid 158527:tid 140735433123584] [client 141.8.142.90:38496] [client 141.8.142.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/prakiraan-bulanan/3938-prakiraan-sifat-hujan-bulanan/prakiraan-sifat-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-sifat-hujan-bulanan-di-propinsi-jawa-timur-tahun-2019/555557665-prakiraan-bulanan-sifat-hujan-bulan-januari-tahun-2020-update-dari-analisis-bulan-oktober-2019-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/3938-prakiraan-sifat-hujan-bulanan/prakiraan-s
...
show less
Hacking
Web App Attack
๐ฟ๐ฆ
IrisFlower
2022-09-06 00:25:21
(4 years ago)
Unauthorized connection attempt detected from IP address 141.8.142.90 to port 80 [J]
Port Scan
Hacking
๐ฎ๐ฉ
hermawan
2022-09-05 12:44:51
(4 years ago)
[Mon Sep 05 23:44:47.782230 2022] [-:error] [pid 70674:tid 139772253169408] [client 141.8.142.90:377 ...
show more
[Mon Sep 05 23:44:47.782230 2022] [-:error] [pid 70674:tid 139772253169408] [client 141.8.142.90:37730] [client 141.8.142.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/analisis-hari-tanpa-hujan-berturut-turut-maksimum-di-propinsi-jawa-timur/4043-analisis-bulanan-hari-tanpa-hujan-berturut-turut-maksimum-di-propinsi-jawa-timur-tahun-2020/555558000-analisis-bulanan-hari-tanpa-hujan-berturut-turut-maksimum-di-provinsi-jawa-timur-bulan-januari-februari-maret-tahun-2020 HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/analisis-hari-tanpa-hujan-berturut-turut-maksimum-di-propinsi-
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-09-05 06:19:37
(4 years ago)
[Mon Sep 05 17:19:29.136935 2022] [-:error] [pid 249600:tid 140194208528128] [client 141.8.142.90:52 ...
show more
[Mon Sep 05 17:19:29.136935 2022] [-:error] [pid 249600:tid 140194208528128] [client 141.8.142.90:52508] [client 141.8.142.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/profil/meteorologi/list-all-categories/3962-klimatologi/infografis/infografis-klimatologi/infografis-dasarian/infografis-dasarian-tahun-2019/1039-infografis-dasarian-informasi-iklim-jatim-update-31-agustus-2019 HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/3962-klimatologi/infografis/infografis-klimatologi/infografis-dasarian/infografis-dasarian-tahun-2019/1039-infog
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-09-05 05:47:11
(4 years ago)
[Mon Sep 05 16:47:07.961982 2022] [-:error] [pid 232107:tid 140193034139392] [client 141.8.142.90:48 ...
show more
[Mon Sep 05 16:47:07.961982 2022] [-:error] [pid 232107:tid 140193034139392] [client 141.8.142.90:48780] [client 141.8.142.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/ HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/"] [unique_id "YxXFmz8ule4Q5XSI3mkDYgAAAI4"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[232241] [ORR69ir0v44] [YxXFmz8ule4Q5XSI3mkDYgAAAI4] keep_alive=[0] [2022-09-05 16:47:07.961987] [R:YxXFmz8ule4Q5XSI3mkDYgAAAI4] UA:'Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)' Host:'karangploso.jatim.bmkg.go.id' ACCEPT:'*/*' Ac
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-09-04 18:38:11
(4 years ago)
[Mon Sep 05 05:38:08.566718 2022] [-:error] [pid 32685:tid 140070023591680] [client 141.8.142.90:571 ...
show more
[Mon Sep 05 05:38:08.566718 2022] [-:error] [pid 32685:tid 140070023591680] [client 141.8.142.90:57160] [client 141.8.142.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/component/tags/tag/analisis-distribusi-sifat-hujan-jawa-timur-bulanan HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/analisis-distribusi-sifat-hujan-jawa-timur-bulanan"] [unique_id "YxUo0Em7ue6KVfGLlRfpRAAAAH4"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[32803] [vocBniHuNo4] [YxUo0Em7ue6KVfGLlRfpRAAAAH4] keep_alive=[0] [2022-09-05 05:38:08.566724] [R:YxUo0Em7ue6KVf
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-09-03 18:48:54
(4 years ago)
[Sun Sep 04 05:48:52.634593 2022] [-:error] [pid 13413:tid 140286047024896] [client 141.8.142.90:519 ...
show more
[Sun Sep 04 05:48:52.634593 2022] [-:error] [pid 13413:tid 140286047024896] [client 141.8.142.90:51944] [client 141.8.142.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/prakiraan-iklim/prakiraan-musim/prakiraan-musim-hujan/prakiraan-puncak-musim-hujan-musim-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-musim/prakiraan-musim-hujan/prakiraan-puncak-musim-hujan-musim-hujan"] [unique_id "YxPZ1F09UdjXgKLi-ap42AAAACU"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[13532] [55yAps1Xp9c] [YxPZ1F09UdjXgKLi-ap42AAAACU] keep_alive=
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-09-03 02:45:56
(4 years ago)
[Sat Sep 03 13:45:54.473221 2022] [-:error] [pid 6017:tid 140497792243456] [client 141.8.142.90:6200 ...
show more
[Sat Sep 03 13:45:54.473221 2022] [-:error] [pid 6017:tid 140497792243456] [client 141.8.142.90:62000] [client 141.8.142.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/prakiraan-iklim/prakiraan-dasarian/monitoring-dan-prakiraan-curah-hujan/555558688-monitoring-dan-prakiraan-curah-hujan-dasarian-hari-tanpa-hujan-berturut-turut-update-20-april-2021-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/monitoring-dan-prakiraan-curah-hujan/555558688-monitoring-dan-prakiraan-curah-hujan-dasarian-hari-tanpa-hujan-berturut-turut-
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-09-02 23:45:17
(4 years ago)
[Sat Sep 03 10:45:14.829461 2022] [-:error] [pid 18425:tid 140021436774144] [client 141.8.142.90:405 ...
show more
[Sat Sep 03 10:45:14.829461 2022] [-:error] [pid 18425:tid 140021436774144] [client 141.8.142.90:40582] [client 141.8.142.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexImages/3.0; +http://yandex.com/bots) request_line = GET /images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Daerah_Potensi_Banjir_Bulanan/Prakiraan_Daerah_Potensi_Banjir_Bulan_Provinsi_Jawa_Timur/2020/10-Oktober-2020/03_Prakiraan_Bulanan_Daerah_Potensi_Banjir_di_Provinsi_Jawa_Timur_JANUARI_Tahun_2021_update_10_Oktober_2020.jpg HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Daerah_Potensi_Banjir_Bulanan/Prakiraan
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-09-01 15:12:32
(4 years ago)
[Fri Sep 02 02:12:28.205801 2022] [-:error] [pid 52183:tid 140252995892992] [client 141.8.142.90:625 ...
show more
[Fri Sep 02 02:12:28.205801 2022] [-:error] [pid 52183:tid 140252995892992] [client 141.8.142.90:62576] [client 141.8.142.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "YxEEHM0zPOF7f422uZdL2QAAAD0"] [staklim-malang.info] [staklim-malang.info] top=[52326] [UHXwZKLbano] [YxEEHM0zPOF7f422uZdL2QAAAD0] keep_alive=[0] [2022-09-02 02:12:28.205808] [R:YxEEHM0zPOF7f422uZdL2QAAAD0] UA:'Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)' Host:'staklim-malang.info' ACCEPT:'*/*'
...
show less
Hacking
Web App Attack
๐ฟ๐ฆ
IrisFlower
2022-08-31 07:15:50
(4 years ago)
Unauthorized connection attempt detected from IP address 141.8.142.90 to port 80 [J]
Port Scan
Hacking
๐บ๐ธ
mclo
2022-08-30 13:37:08
(4 years ago)
141.8.142.90 _ - [30/Aug/2022:19:37:07 +0200] "GET /robots.txt HTTP/1.1" 404 162 "-" "Mozilla/5.0 (c ...
show more
141.8.142.90 _ - [30/Aug/2022:19:37:07 +0200] "GET /robots.txt HTTP/1.1" 404 162 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" "-" 80 - "text/html" cemuvl.duckdns.org "" "-"
...
show less
Web App Attack
๐ฉ๐ช
rh24
2022-08-30 01:00:57
(4 years ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 141.8.142.90 (RU/Rus ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 141.8.142.90 (RU/Russia/141-8-142-90.spider.yandex.com): (CF_ENABLE)
show less
Bad Web Bot
๐ฟ๐ฆ
IrisFlower
2022-08-29 06:12:36
(4 years ago)
Unauthorized connection attempt detected from IP address 141.8.142.90 to port 80 [J]
Port Scan
Hacking