🇮🇩
hermawan
2026-11-12 06:37:22
UTC ·
(1 day ago)
[Thu Nov 12 13:37:21.872412 2026] [security2:error] [pid 639320:tid 139653361407680] [client 101.56.130.222:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/m ...
show more
[Thu Nov 12 13:37:21.872412 2026] [security2:error] [pid 639320:tid 139653361407680] [client 101.56.130.222:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "214"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ?id= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?id=475&start=90 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?id=475&start=90 Request Basename = arsip-artikel"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "avVeoYnhNpTlxEGLYYYYDAAAABE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[639416] [qG05iw7+4MA] [avVeoYnhNpTlxEGLYYYYDAAAABE] keep_alive=[0] [2026-11-12 13:37:21.872420] [R
...
show less
Email Spam
Hacking
🇦🇺
FireGuard Server
2026-11-11 12:10:12
UTC ·
(1 day ago)
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=443
Port Scan
Hacking
🇫🇷
Tilellit.PRO
2026-11-10 02:43:41
UTC ·
(3 days ago)
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
🇳🇱
IPCollective Intelligence
2026-11-10 00:35:40
UTC ·
(3 days ago)
Residential Proxy - IPCollective Intelligence
Open Proxy
🇩🇪
nyuuzyou
2026-11-05 19:05:13
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-05T19:05:13Z.
Bad Web Bot
2026-11-03 05:15:04
UTC ·
(1 week ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Magento Session ID Parameter Blocked: /brands/aruba-networks.html?___SID=bb999e4e117a471750ae4c9c396ea941U | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:129.0) Gecko/20100101 Firefox/129.0 | (Magento Site)
show less
Hacking
Bad Web Bot
2026-11-01 02:03:04
UTC ·
(1 week ago)
Search protection: facets on category: 22 values in one group (limit 5) / reCAPTCHA challenge timed out
Bad Web Bot
🇷🇸
pavel Karpenko
2026-10-12 22:03:26
UTC ·
(1 month ago)
101.56.130.222 - - [13/Oct/2026:01:03:26 +0300] "GET /transfer/?code=AT&company=Joanneum+Research+Forschungsgesellschaft+mbH&company_country=AT&counterparty=JR-NETWORK&counterparty_country=AT&country=AT&lang=en&months=3&scope=ripe_to&share=ab3768eba7 ...
show more
101.56.130.222 - - [13/Oct/2026:01:03:26 +0300] "GET /transfer/?code=AT&company=Joanneum+Research+Forschungsgesellschaft+mbH&company_country=AT&counterparty=JR-NETWORK&counterparty_country=AT&country=AT&lang=en&months=3&scope=ripe_to&share=ab3768eba70415ce&view=pair HTTP/2.0" 302 0 "https://ultralir.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" client_port=1171 server_port=443 rt=0.007 urt=0.007 transfer_entry=- server_addr=195.133.18.6 epoch=1791842606.328
show less
DDoS Attack
🇺🇸
鬼影233
2026-10-03 05:57:43
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸
鬼影233
2026-10-01 14:07:06
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-30 16:45:09
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-29 02:54:55
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-24 16:55:11
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-19 07:40:16
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇮🇩
hermawan
2026-05-27 10:50:04
UTC ·
(5 months ago)
[Wed May 27 17:50:01.046764 2026] [security2:error] [pid 763257:tid 139875635422912] [client 101.56.130.222:1180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurit ...
show more
[Wed May 27 17:50:01.046764 2026] [security2:error] [pid 763257:tid 139875635422912] [client 101.56.130.222:1180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ahbMWRSFOp-dAaMk6z2OlgAAQQA"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[763258] [tKKSXwoqIHE] [ahbMWRSFOp-dAaMk6z2OlgAAQQA] keep_alive=[1] [2026-05-27 17:50:01.046771] [R:ahbMWRSFOp-dAaMk6z2OlgAAQQA] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/122.0.2365.99 Version/17.0 Mobile/15E148 Safari/604.1' Host:'st
...
show less
Email Spam
Hacking
