Total reports
6 from
6 distinct
reporters
First reported
December 12th 2024
Most recent report
7 minutes ago
Last 60 days
Top reporter locations
🇮🇩
Indonesia
1
🇷🇺
Russian Federation
1
Most common categories
Hacking
2
Bad Web Bot
1
Email Spam
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-11-15 09:57:47
UTC ·
(7 minutes ago)
[Sun Nov 15 16:57:46.488193 2026] [security2:error] [pid 836612:tid 140517488711360] [client 103.59.207.205:0] ModSecurity: Access denied with code 403 (phase 3). Operator EQ matched 1 at TX:early_blocking. [file "/etc/modsecurity/coreruleset-4.29.0/ ...
show more
[Sun Nov 15 16:57:46.488193 2026] [security2:error] [pid 836612:tid 140517488711360] [client 103.59.207.205:0] ModSecurity: Access denied with code 403 (phase 3). Operator EQ matched 1 at TX:early_blocking. [file "/etc/modsecurity/coreruleset-4.29.0/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "231"] [id "959101"] [msg "Outbound Anomaly Score Exceeded in phase 3 (Total Score: 4)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/search/"] [unique_id "avmCGknlnmcyySFw953PSQAAAIM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[836642] [jQF4sc12Te4] [avmCGknlnmcyySFw953PSQAAAIM] keep_alive=[0] [2026-11-15 16:57:46.488200] [R:avmCGknlnmcyySFw953PSQAAAIM] UA:'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' COOKIE:'fb66df88cff4414b0afe6309464db212=dc8086759b8de51599e75b17e9851027; __Host-name=staklim-j
...
show less
Email Spam
Hacking
Anonymous
2026-11-08 22:15:04
UTC ·
(6 days ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Catalog Search Fake Parameter Blocked: /catalogsearch/result/?p=2&q=DVI+104+Tx%2FRx&screensize=115%2C335%2C336 | UA: Mozilla/5.0 (Android 8.1.0; Mobile; rv:39.0) Gecko/39.0 Firefox/39.0 | (Magento Site)
show less
Hacking
Bad Web Bot
🇺🇸
kosada.com
2026-07-15 17:09:22
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
Anonymous
2026-05-12 13:08:18
UTC ·
(6 months ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
🇩🇪
EGP Abuse Dept
2026-03-27 02:10:23
UTC ·
(7 months ago)
Scraping webshop URLs (www.badgehouder.nl), likely botnet drone
Bad Web Bot
Exploited Host
🇬🇧
thetomtaylor.co.uk
2024-12-12 10:03:42
UTC ·
(1 year ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa02]
Bad Web Bot
Web App Attack