๐ฆ๐บ
ozisp.com.au
2022-09-04 11:39:53
(3 years ago)
RU_YANDEX-MNT_<33>1662305991 [1:2032979:1] ET SCAN Yandex Webcrawler User-Agent (YandexBot) [Classif ...
show more
RU_YANDEX-MNT_<33>1662305991 [1:2032979:1] ET SCAN Yandex Webcrawler User-Agent (YandexBot) [Classification: Not Suspicious Traffic] [Priority: 3] {TCP} 141.8.142.91:47204
show less
Hacking
๐ฎ๐ฉ
hermawan
2022-08-31 19:51:34
(3 years ago)
[Thu Sep 01 06:51:32.799099 2022] [-:error] [pid 193855:tid 140734384559872] [client 141.8.142.91:36 ...
show more
[Thu Sep 01 06:51:32.799099 2022] [-:error] [pid 193855:tid 140734384559872] [client 141.8.142.91:36144] [client 141.8.142.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/prakiraan-bulanan/4044-prakiraan-curah-hujan-bulanan/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-bulanan-curah-hujan-di-propinsi-jawa-timur-tahun-2020/555558346-prakiraan-bulanan-curah-hujan-bulan-desember-tahun-2020-update-dari-analisis-bulan-september-2020-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/4044-prakiraan-curah-hujan-bulanan/prakiraa
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-08-31 08:30:48
(3 years ago)
[Wed Aug 31 19:30:45.393780 2022] [-:error] [pid 45605:tid 140730978793216] [client 141.8.142.91:334 ...
show more
[Wed Aug 31 19:30:45.393780 2022] [-:error] [pid 45605:tid 140730978793216] [client 141.8.142.91:33424] [client 141.8.142.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/component/tags/tag/klimatologi?start=3500 HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/klimatologi"] [unique_id "Yw9UdZ69agCCMOk7Ddne5gAAAJQ"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[45745] [cUF1qsiYBsc] [Yw9UdZ69agCCMOk7Ddne5gAAAJQ] keep_alive=[0] [2022-08-31 19:30:45.393785] [R:Yw9UdZ69agCCMOk7Ddne5gAAAJQ] UA:'Mozilla/5.0 (compatible; YandexBot/3.0; +http://
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-08-25 16:48:16
(3 years ago)
[Fri Aug 26 03:48:11.214582 2022] [-:error] [pid 44726:tid 140727992432384] [client 141.8.142.91:485 ...
show more
[Fri Aug 26 03:48:11.214582 2022] [-:error] [pid 44726:tid 140727992432384] [client 141.8.142.91:48518] [client 141.8.142.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/profil/meteorologi/list-all-categories/3989-galeri-kegiatan/galeri-kegiatan-tahun-2018/11-galeri-kegiatan-bulan-november-tahun-2018/785-galeri-kegiatan-bmkg-stasiun-klimatologi-malang-periode-19-23-november-2018 HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/3989-galeri-kegiatan/galeri-kegiatan-tahun-2018/11-galeri-kegiatan-bulan-november-tahun-2018/785-galeri-kegiatan
...
show less
Hacking
Web App Attack
๐ฉ๐ช
rh24
2022-08-24 15:53:02
(3 years ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 141.8.142.91 (RU/Rus ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 141.8.142.91 (RU/Russia/141-8-142-91.spider.yandex.com)
show less
Bad Web Bot
๐ฎ๐ฉ
hermawan
2022-08-22 05:17:39
(4 years ago)
[Mon Aug 22 16:17:36.636118 2022] [-:error] [pid 1226522:tid 140733973513984] [client 141.8.142.91:3 ...
show more
[Mon Aug 22 16:17:36.636118 2022] [-:error] [pid 1226522:tid 140733973513984] [client 141.8.142.91:37224] [client 141.8.142.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "YwNJsOtWOC-5yDKDmksuTwAAAII"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[1226644] [4GYZ6+CmA9s] [YwNJsOtWOC-5yDKDmksuTwAAAII] keep_alive=[0] [2022-08-22 16:17:36.636124] [R:YwNJsOtWOC-5yDKDmksuTwAAAII] UA:'Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)' Host:'karangploso.jatim.bmkg.go.id' ACCEPT:'*/*'
...
show less
Hacking
Web App Attack
๐ฆ๐บ
ozisp.com.au
2022-08-21 08:13:53
(4 years ago)
RU_YANDEX-MNT_<33>1661084027 [1:2032979:1] ET SCAN Yandex Webcrawler User-Agent (YandexBot) [Classif ...
show more
RU_YANDEX-MNT_<33>1661084027 [1:2032979:1] ET SCAN Yandex Webcrawler User-Agent (YandexBot) [Classification: Not Suspicious Traffic] [Priority: 3] {TCP} 141.8.142.91:37600
show less
Hacking
๐ฎ๐ฉ
hermawan
2022-08-19 02:47:12
(4 years ago)
[Fri Aug 19 13:47:08.929482 2022] [-:error] [pid 47208:tid 140732186752768] [client 141.8.142.91:504 ...
show more
[Fri Aug 19 13:47:08.929482 2022] [-:error] [pid 47208:tid 140732186752768] [client 141.8.142.91:50474] [client 141.8.142.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/skala-mmi-modified-mercalli-intensity/1309-klimatologi/agroklimatologi/kalender-tanam-katam-terpadu/kalender-tanam-katam-terpadu-provinsi-jawa-timur/kalender-tanam-katam-terpadu-kabupaten-ponorogo/kalender-tanam-katam-terpadu-kecamatan-kauman-kabupaten-ponorogo/kalender-tanam-katam-terpadu-kecamatan-kauman-kabupaten-ponorogo-tahun-2016-2017 HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/skala-mmi-modified-m
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-08-18 12:38:04
(4 years ago)
[Thu Aug 18 23:37:56.556427 2022] [-:error] [pid 201277:tid 140734896252672] [client 141.8.142.91:48 ...
show more
[Thu Aug 18 23:37:56.556427 2022] [-:error] [pid 201277:tid 140734896252672] [client 141.8.142.91:48110] [client 141.8.142.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/analisis-iklim/analisis-dasarian/distribusi-curah-hujan-dasarian-provinsi-jawa-timur/555559011-analisis-dasarian-distribusi-curah-hujan-dasarian-ii-tanggal-11-20-september-2021-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-dasarian/distribusi-curah-hujan-dasarian-provinsi-jawa-timur/555559011-analisis-dasarian-distribusi-curah-hujan-dasarian-ii-tanggal-11-20-
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-08-17 09:15:48
(4 years ago)
[Wed Aug 17 20:15:46.165413 2022] [-:error] [pid 60461:tid 140735300601600] [client 141.8.142.91:346 ...
show more
[Wed Aug 17 20:15:46.165413 2022] [-:error] [pid 60461:tid 140735300601600] [client 141.8.142.91:34630] [client 141.8.142.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/component/tags/tag/klimatologi?format=feed&type=atom HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/klimatologi"] [unique_id "YvzqAhFm7QgXWQ7VXnZqqQAAAHA"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[60565] [ua6nqYfFpMk] [YvzqAhFm7QgXWQ7VXnZqqQAAAHA] keep_alive=[0] [2022-08-17 20:15:46.165420] [R:YvzqAhFm7QgXWQ7VXnZqqQAAAHA] UA:'Mozilla/5.0 (compatible; YandexBot/3.
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-08-16 01:33:45
(4 years ago)
[Tue Aug 16 12:33:40.738172 2022] [-:error] [pid 166378:tid 140734183233280] [client 141.8.142.91:56 ...
show more
[Tue Aug 16 12:33:40.738172 2022] [-:error] [pid 166378:tid 140734183233280] [client 141.8.142.91:56580] [client 141.8.142.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-sifat-hujan-bulanan/1569-prakiraan-bulanan-sifat-hujan-bulan-desember-tahun-2021-update-dari-analisis-bulan-oktober-tahun-2021-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-sifat-hujan-bulanan/1569-prakiraan-bulanan-sifat-hujan-bulan-desember-tahun-2021-update-dari-analisis-bulan-oktober-tahun-20
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-08-15 09:44:55
(4 years ago)
[Mon Aug 15 20:44:31.155582 2022] [-:error] [pid 5997:tid 140728445409024] [client 141.8.142.91:3455 ...
show more
[Mon Aug 15 20:44:31.155582 2022] [-:error] [pid 5997:tid 140728445409024] [client 141.8.142.91:34552] [client 141.8.142.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexImages/3.0; +http://yandex.com/bots) request_line = GET /images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Tingkat_Ketersediaan_Air_Bagi_Tanaman/Provinsi_Jawa_Timur/2019/10_Analisis-Bulanan_Tingkat_Ketersediaan_Air_Bagi_Tanaman_di_Jawa_Timur_Bulan_Oktober_2019.jpg HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Tingkat_Ketersediaan_Air_Bagi_Tanaman/Provinsi_Jawa_Timur/2019/10_Analisis-Bulanan_Tingkat_Ketersediaan_Air_B
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-08-15 05:05:00
(4 years ago)
[Mon Aug 15 16:04:55.664200 2022] [-:error] [pid 108016:tid 140730928436992] [client 141.8.142.91:33 ...
show more
[Mon Aug 15 16:04:55.664200 2022] [-:error] [pid 108016:tid 140730928436992] [client 141.8.142.91:33664] [client 141.8.142.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-tahun-2019 HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-tahun-2019"] [unique_id "YvoMN7-4z0xFJCxw1-vJTgAAAEI"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[108184] [vPrk7Ktz+Mg] [YvoMN7-4z0xFJCxw1-vJ
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2022-08-13 07:41:00
(4 years ago)
[Sat Aug 13 18:40:56.265943 2022] [-:error] [pid 256196:tid 140731758921472] [client 141.8.142.91:61 ...
show more
[Sat Aug 13 18:40:56.265943 2022] [-:error] [pid 256196:tid 140731758921472] [client 141.8.142.91:61714] [client 141.8.142.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexImages/3.0; +http://yandex.com/bots) request_line = GET /images/Geofisika/covid-19/cover_tsunami_covid19.jpg HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/images/Geofisika/covid-19/cover_tsunami_covid19.jpg"] [unique_id "YveNyLLQQ7s8Yqszzf5nlgAAAKA"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[256348] [CY0l3/VDtco] [YveNyLLQQ7s8Yqszzf5nlgAAAKA] keep_alive=[0] [2022-08-13 18:40:56.265953] [R:YveNyLLQQ7s8Yqszzf5nlgAAAKA] UA:'Mozilla/5.0 (compatible; YandexI
...
show less
Hacking
Web App Attack
๐ฆ๐บ
clapper
2022-08-13 05:04:12
(4 years ago)
(mod_security) mod_security (id:980001) triggered by 141.8.142.91 (RU/Russia/141-8-142-91.spider.yan ...
show more
(mod_security) mod_security (id:980001) triggered by 141.8.142.91 (RU/Russia/141-8-142-91.spider.yandex.com): 5 in the last 14400 secs; ID: rub
show less
Brute-Force
Bad Web Bot