🇮🇩
hermawan
2026-05-30 11:57:56
(3 weeks ago)
[Sat May 30 18:57:56.042067 2026] [security2:error] [pid 336127:tid 140573676627648] [client 118.99. ...
show more
[Sat May 30 18:57:56.042067 2026] [security2:error] [pid 336127:tid 140573676627648] [client 118.99.81.184:6463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /images/Klimatologi/Sertifikasi/BS_EN_ISO_9001_2015/PEFC-150.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Sertifikasi/BS_EN_ISO_9001_2015/PEFC-150.webp"] [unique_id "ahrQxDKVraiJ24pzJiom7QACAQo"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[336176] [3uT/q8d99Os] [ahrQxDKVraiJ24pzJiom7QACAQo] keep_alive=[1] [2026-05-30 18:57:56.042070] [R:ahrQxDKVraiJ24pzJiom7QACAQo] UA:'Mozilla/5.0 (Linux; Android 14; Pixel 6
...
show less
Email Spam
Hacking
🇩🇪
ghostwarriors
2026-04-07 08:23:53
(2 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
2026-03-06 01:31:40
(3 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Exploited Host
Bad Web Bot
🇮🇹
VHosting
2025-11-28 08:47:12
(6 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇧🇷
hostseries
2025-11-21 10:13:33
(7 months ago)
Trigger: LF_DISTATTACK
Brute-Force
🇨🇭
backslash
2025-11-13 05:36:10
(7 months ago)
block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803
Bad Web Bot
🇮🇩
hermawan
2025-10-18 15:38:53
(8 months ago)
[Sat Oct 18 22:38:52.994258 2025] [security2:error] [pid 378974:tid 140210640774848] [client 118.99. ...
show more
[Sat Oct 18 22:38:52.994258 2025] [security2:error] [pid 378974:tid 140210640774848] [client 118.99.81.184:2759] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: /index.php?id= found within SERVER_NAME: staklim-malang.info request_line = GET /index.php?id=4043 HTTP/2.0 Request URI RAW = /index.php?id=4043 Request Basename = index.php"] [hostname "staklim-malang.info"] [uri "/index.php"] [unique_id "aPO0jMAZEpyPuaME0JM60QACjwA"], referer https://www.google.com/ [staklim-malang.info] [staklim-malang.info] top=[378975] [uMO5pfDa/ms] [aPO0jMAZEpyPuaME0JM60QACjwA] keep_alive=[1] [2025-10-18 22:38:52.994264] [R:aPO0jMAZEpyPuaME0JM60QACjwA] UA:'Mozilla/5.0 (Windows NT
...
show less
Hacking
Web App Attack
🇫🇷
dynamix
2025-08-09 04:52:13
(10 months ago)
Multiple WAF Violations
Web App Attack
🇧🇷
diego
2025-04-14 12:00:29
(1 year ago)
[rede-164-29] 04/14/2025-09:00:28.691895, 118.99.81.184, Protocol: 6, ET SCAN Suspicious inbound to ...
show more
[rede-164-29] 04/14/2025-09:00:28.691895, 118.99.81.184, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433
show less
Hacking
🇧🇷
diego
2025-04-14 11:04:12
(1 year ago)
[rede-164-29] 04/14/2025-08:04:12.691142, 118.99.81.184, Protocol: 6, ET SCAN Suspicious inbound to ...
show more
[rede-164-29] 04/14/2025-08:04:12.691142, 118.99.81.184, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306
show less
Hacking
🇮🇩
Burayot
2024-11-12 07:23:12
(1 year ago)
LF_POP3D: (pop3d) Failed POP3 login from 118.99.81.184 (ID/Indonesia/-): 1 in the last 3600 secs
Brute-Force
2021-03-31 04:16:42
(5 years ago)
sshd: Failed password for invalid user .... from 118.99.81.184 port 9315 ssh2
Brute-Force
SSH