Total reports
13 from
8 distinct
reporters
First reported
January 20th 2024
Most recent report
5 hours ago
Last 60 days
Top reporter locations
🇫🇷
France
1
🇮🇩
Indonesia
1
🇺🇸
United States of America
1
Most common categories
Hacking
1
Email Spam
1
Bad Web Bot
1
Web App Attack
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-11-13 12:06:57
UTC ·
(5 hours ago)
[Fri Nov 13 19:06:56.247405 2026] [security2:error] [pid 647658:tid 139646407263936] [client 138.204.44.148:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/c ...
show more
[Fri Nov 13 19:06:56.247405 2026] [security2:error] [pid 647658:tid 139646407263936] [client 138.204.44.148:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "608"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:referer: https://www.yandex.go.id/ request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "avb9YIg7ZDreIwRHPP7ZnQAAAEY"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[647691] [PNK1Q2eZNxE] [avb9YIg7ZDreIwRHPP7ZnQAAAEY] keep_alive=[0] [2026-11-13 19:06:56.247413] [R:avb9YIg7ZDreIwRHPP7ZnQAAAEY] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'*/*' Refer
...
show less
Email Spam
Hacking
🇺🇸
鬼影233
2026-09-25 07:08:32
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇫🇷
Sklurk
2026-09-24 13:12:57
UTC ·
(1 month ago)
Web App Attack
Web App Attack
🇺🇸
kosada.com
2026-08-27 05:21:05
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇧🇷
felipeforte
2025-08-28 01:32:19
UTC ·
(1 year ago)
Part of a massive DDoS/scraping botnet
DDoS Attack
Bad Web Bot
🇳🇱
exxos
2025-08-28 00:05:29
UTC ·
(1 year ago)
Attacks with Bad user agents
Hacking
🇳🇱
exxos
2025-07-28 04:15:49
UTC ·
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇪🇸
Global Cyber Police
2025-07-28 03:38:34
UTC ·
(1 year ago)
Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.
DDoS Attack
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
exxos
2025-07-28 02:15:21
UTC ·
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-07-28 02:03:29
UTC ·
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-07-27 23:47:12
UTC ·
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-07-24 17:34:57
UTC ·
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇺🇸
djc82k
2024-01-20 00:05:48
UTC ·
(2 years ago)
20-Jan-2024 00:53:49.529 client @0x7f4ade760140 138.204.44.148#11022 (cisco.com): query (cache) 'cisco.com/TXT/IN' denied
20-Jan-2024 00:53:50.253 client @0x7f4ade760140 138.204.44.148#36370 (cisco.com): query (cache) 'cisco.com/TXT/IN' denied
20-Jan ...
show more
20-Jan-2024 00:53:49.529 client @0x7f4ade760140 138.204.44.148#11022 (cisco.com): query (cache) 'cisco.com/TXT/IN' denied
20-Jan-2024 00:53:50.253 client @0x7f4ade760140 138.204.44.148#36370 (cisco.com): query (cache) 'cisco.com/TXT/IN' denied
20-Jan-2024 00:53:51.593 client @0x7f4ade760140 138.204.44.148#17785 (cisco.com): query (cache) 'cisco.com/TXT/IN' denied
20-Jan-2024 00:53:52.153 client @0x7f4ad40b9eb0 138.204.44.148#27307 (cisco.com): query (cache) 'cisco.com/TXT/IN' denied
20-Jan-2024 00:53:52.673 client @0x7f4ad40b9eb0 138.204.44.148#46118 (cisco.com): query (cache) 'cisco.com/TXT/IN' denied
20-Jan-2024 00:53:56.277 client @0x7f4ad40b9eb0 138.204.44.148#12869 (cisco.com): query (cache) 'cisco.com/TXT/IN' denied
20-Jan-2024 00:53:57.565 client @0x7f4ad40b9eb0 138.204.44.148#43154 (atlassian.com): query (cache) 'atlassian.com/TXT/IN' denied
20-Jan-2024 00:53:58.729 client @0x7f4ad01a7110 138.204.44.148#31357 (cisco.com): query (cache) 'cisco.com/TXT/IN' denied
20-Jan-2024 00:5
...
show less
DDoS Attack
