๐ท๐ด
cheatmaster.store
2025-06-02 12:01:38
(1 year ago)
Open proxy and SSH brute force activity detected from VPS logs
Open Proxy
Brute-Force
๐ฎ๐ฉ
hermawan
2025-05-24 17:15:21
(1 year ago)
[Sat May 24 22:19:57.010977 2025] [security2:error] [pid 134017:tid 140105892132544] [client 103.247 ...
show more
[Sat May 24 22:19:57.010977 2025] [security2:error] [pid 134017:tid 140105892132544] [client 103.247.23.49:39114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "myactivity.google.com" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "439"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: myactivity.google.com found within REQUEST_HEADERS:Referer: https://myactivity.google.com/ request_line = GET /images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Sifat_Hujan_Bulanan/Prakiraan_Sifat_Hujan_Bulanan_Provinsi_Jawa_Timur/2025/02_FEBRUARI_2025/03_Prakiraan_Sifat_Hujan_Bulan_JUNI_2025_di_Provinsi_Jawa_Timur-Update_dari_Analisis_Bulan_Februari_2025.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Sifat_Hujan_Bulanan/Prakiraan_Sifat_Hujan_Bulanan_Provinsi_Jawa_Timur/2025/02_FEBRUARI_2025/03_Prakira
...
show less
Hacking
Web App Attack
๐ฉ๐ช
murat cakar
2025-05-24 01:20:41
(1 year ago)
Triggered Cloudflare WAF (ratelimit) from ID.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endp ...
show more
Triggered Cloudflare WAF (ratelimit) from ID.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15
This report was generated by:
DDoS Guard
show less
Bad Web Bot
๐บ๐ธ
uira.live
2025-05-22 01:40:14
(1 year ago)
Malicious activity detected from 58485 WIFIAN-AS-ID WIFIAN towards host tracker.uira.live (GET HTTP/ ...
show more
Malicious activity detected from 58485 WIFIAN-AS-ID WIFIAN towards host tracker.uira.live (GET HTTP/2) @ 2025-05-22T01:40:14Z (8 occurrences)
show less
DDoS Attack
๐ฌ๐ง
SuperEvilLuke
2025-05-21 17:38:05
(1 year ago)
Malicious activity detected from 58485 WIFIAN-AS-ID WIFIAN towards host panel.embotic.xyz (GET HTTP/ ...
show more
Malicious activity detected from 58485 WIFIAN-AS-ID WIFIAN towards host panel.embotic.xyz (GET HTTP/2) @ 2025-05-21T17:38:05Z (29 occurrences)
show less
DDoS Attack
๐บ๐ธ
COMPLEX
2025-05-20 03:31:26
(1 year ago)
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 58485 (WIFIAN-AS-ID WIFIAN)
Prot ...
show more
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 58485 (WIFIAN-AS-ID WIFIAN)
Protocol: HTTP/2 (GET method)
Timestamp: 2025-05-20T03:29:26Z
show less
Bad Web Bot
๐ฉ๐ช
Packets-Decreaser.NET
2025-05-15 21:54:46
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
๐บ๐ธ
COMPLEX
2025-05-15 02:40:06
(1 year ago)
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 58485 (WIFIAN-AS-ID WIFIAN)
Prot ...
show more
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 58485 (WIFIAN-AS-ID WIFIAN)
Protocol: HTTP/2 (GET method)
Timestamp: 2025-05-15T02:39:34Z
show less
Bad Web Bot
๐บ๐ธ
COMPLEX
2025-05-14 14:50:27
(1 year ago)
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 58485 (WIFIAN-AS-ID WIFIAN)
Prot ...
show more
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 58485 (WIFIAN-AS-ID WIFIAN)
Protocol: HTTP/2 (GET method)
Timestamp: 2025-05-14T14:49:33Z
show less
Bad Web Bot
๐บ๐ธ
COMPLEX
2025-05-11 04:20:11
(1 year ago)
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 58485 (WIFIAN-AS-ID WIFIAN)
Prot ...
show more
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 58485 (WIFIAN-AS-ID WIFIAN)
Protocol: HTTP/2 (GET method)
Timestamp: 2025-05-11T04:11:17Z
show less
Bad Web Bot
๐ฌ๐ง
Silly Development
2025-05-11 02:33:51
(1 year ago)
Malicious activity detected from 58485 WIFIAN-AS-ID WIFIAN towards host sillydev.co.uk (GET HTTP/2) ...
show more
Malicious activity detected from 58485 WIFIAN-AS-ID WIFIAN towards host sillydev.co.uk (GET HTTP/2) @ 2025-05-11T02:33:51Z (12 occurrences)
show less
DDoS Attack
Exploited Host
๐ฉ๐ช
Packets-Decreaser.NET
2025-05-09 06:41:12
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
๐บ๐ธ
COMPLEX
2025-05-08 09:10:30
(1 year ago)
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 58485 (WIFIAN-AS-ID WIFIAN)
Prot ...
show more
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 58485 (WIFIAN-AS-ID WIFIAN)
Protocol: HTTP/2 (GET method)
Timestamp: 2025-05-08T09:09:35Z
show less
Bad Web Bot
๐บ๐ธ
COMPLEX
2025-05-07 02:41:12
(1 year ago)
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 58485 (WIFIAN-AS-ID WIFIAN)
Prot ...
show more
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 58485 (WIFIAN-AS-ID WIFIAN)
Protocol: HTTP/2 (GET method)
Timestamp: 2025-05-07T02:39:29Z
show less
Bad Web Bot
๐บ๐ธ
COMPLEX
2025-05-06 19:10:16
(1 year ago)
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 58485 (WIFIAN-AS-ID WIFIAN)
Prot ...
show more
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 58485 (WIFIAN-AS-ID WIFIAN)
Protocol: HTTP/2 (GET method)
Timestamp: 2025-05-06T19:09:35Z
show less
Bad Web Bot