Total reports
6 from
6 distinct
reporters
First reported
October 26th 2026
Most recent report
1 day ago
Last 60 days
Top reporter locations
🇩🇪
Germany
2
🇨🇭
Switzerland
1
🇮🇩
Indonesia
1
Most common categories
Bad Web Bot
4
Web App Attack
3
Brute-Force
1
Email Spam
1
Hacking
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-11-06 07:24:51
UTC ·
(1 day ago)
[Fri Nov 06 14:24:50.426308 2026] [security2:error] [pid 87426:tid 139782512432832] [client 136.162.191.21:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4. ...
show more
[Fri Nov 06 14:24:50.426308 2026] [security2:error] [pid 87426:tid 139782512432832] [client 136.162.191.21:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461388 found within REQUEST_FILENAME: /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/tel:+62341461388 request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/tel:+62341461388 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/tel:+62341461388"] [unique_id "au2AwugJXBCuuWus3TjVawAAAIc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[87435] [oqj2gb7+nMY] [au2AwugJXBCuuWus3TjVawAAAIc] keep_alive=[0] [2026-11-06 14:24:50.426317] [R:au2AwugJXBCuuWus3TjVawAAAIc] UA:'Mozilla/5.0
...
show less
Email Spam
Hacking
🇩🇪
LRob
2026-11-05 05:56:02
UTC ·
(2 days ago)
Proxynvader botnet: code forge crawl | path: /Shieldlist/shieldlist-controller/commit/43e3f6f33b0f57f8d178a0f6714e50d67b65d9fb | src_port: 26557 | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0 ...
show more
Proxynvader botnet: code forge crawl | path: /Shieldlist/shieldlist-controller/commit/43e3f6f33b0f57f8d178a0f6714e50d67b65d9fb | src_port: 26557 | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36
show less
DDoS Attack
Bad Web Bot
🇩🇪
findlab
2026-11-04 00:30:08
UTC ·
(3 days ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 04:09:53
UTC ·
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 136.162.191.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 23:09:47.302635 2026] [security2:error] [pid 18507:tid 18507] [client 136.162.191.21:43011] ...
show more
(mod_security) mod_security (id:210730) triggered by 136.162.191.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 23:09:47.302635 2026] [security2:error] [pid 18507:tid 18507] [client 136.162.191.21:43011] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||justinrudd.com|F|2"] [data ".barkbarkdaycare.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "justinrudd.com"] [uri "/www.barkbarkdaycare.com"] [unique_id "augNC6Fzdkd-HiwaHDvzRQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
Mga Admin
2026-10-30 19:51:45
UTC ·
(1 week ago)
136.162.191.21 - - [31/Oct/2026:02:51:44 +0700] "GET /soft/index.htm HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
...
Web App Attack
🇨🇭
backslash
2026-10-26 18:03:00
UTC ·
(1 week ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
