🇩🇪
botreporter
2026-07-07 09:13:37
(2 hours ago)
botnet ignoring robots.txt
Bad Web Bot
🇺🇸
kosada.com
2026-07-03 17:50:18
(3 days ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇫🇷
Sklurk
2026-07-02 01:00:05
(5 days ago)
Web App Attack
Web App Attack
🇦🇺
screwlooseit.com.au
2026-06-18 02:44:30
(2 weeks ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
ID/Indonesia/-
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 06:34:20
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 118.99.94.206 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 118.99.94.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 02:34:16.869265 2026] [security2:error] [pid 18644:tid 18644] [client 118.99.94.206:7540] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 118.99.94.206 (+1 hits since last alert)|kimbrothersduluth.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kimbrothersduluth.com"] [uri "/xmlrpc.php"] [unique_id "ajI_6Itpp6xUPWPgIgHLGgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
akasolutions.de
2026-06-17 04:58:17
(2 weeks ago)
(wordpress) Failed wordpress login from 118.99.94.206 (ID/Indonesia/-)
Brute-Force
🇫🇷
vtchost.com
2026-06-16 21:53:41
(2 weeks ago)
Jun 16 23:53:41 vtchost kernel: [138953.099802] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:1 ...
show more
Jun 16 23:53:41 vtchost kernel: [138953.099802] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:2a:b3:08:00 SRC=118.99.94.206 DST=161.97.181.152 LEN=52 TOS=0x08 PREC=0x20 TTL=115 ID=11536 DF PROTO=TCP SPT=56998 DPT=139 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇮🇩
hermawan
2026-06-04 20:40:04
(1 month ago)
[Fri Jun 05 03:39:59.171047 2026] [security2:error] [pid 480668:tid 139764410799808] [client 118.99. ...
show more
[Fri Jun 05 03:39:59.171047 2026] [security2:error] [pid 480668:tid 139764410799808] [client 118.99.94.206:60658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories"] [unique_id "aiHin8j-YIiPjyKOz-RJkwAAVhI"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[480705] [UJg1jHMIapc] [aiHin8j-YIiPjyKOz-RJkwAAVhI] keep_alive=[1] [2026-06-05 03:39:59.171054] [R:aiHin8j-YIiPjyKOz-RJkwAAVhI] UA:'Mozilla/5.0 (Linux; Android 13; SM-S901B) AppleWebKit/537.36 (KHTML, like
...
show less
Email Spam
Hacking
🇩🇪
Vegascosmetics
2026-06-01 12:23:48
(1 month ago)
Kingcopy(AI-IDS) Report: This IP is Banned after 3 Attacks automatically because Pattern: High Prior ...
show more
Kingcopy(AI-IDS) Report: This IP is Banned after 3 Attacks automatically because Pattern: High Priority: ChooseCountrie - Vegascosmetics Security System
show less
DDoS Attack
Hacking
Exploited Host
🇩🇪
SMARTNET
2026-05-27 06:03:53
(1 month ago)
Aisuru(Mirai variant) DDoS | Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d
DDoS Attack
🇨🇭
backslash
2026-05-22 00:09:31
(1 month ago)
block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803
Bad Web Bot
🇵🇱
sefinek.net
2026-05-11 10:14:34
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from ID.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from ID.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: /booru/artist/Heeya | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇸🇬
securejdprop
2026-03-30 17:14:28
(3 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 sc ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 scan 🎩 Nuclei 👨💻). Ip 118.99.94.206 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-03-30 17:14:21.309568431 +0000 UTC
show less
Hacking
Web App Attack
🇮🇩
Burayot
2026-03-08 01:31:38
(3 months ago)
LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 118.99.94.206 (ID/Indonesia/-): 2 ...
show more
LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 118.99.94.206 (ID/Indonesia/-): 2 in the last 3600 secs
show less
Web App Attack
🇺🇸
kosada.com
2026-03-07 23:04:52
(3 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot