Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[Sun Nov 15 17:05:48.549207 2026] [security2:error] [pid 839026:tid 140515878098624] [client 152.163.158.220:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/ ...
show more[Sun Nov 15 17:05:48.549207 2026] [security2:error] [pid 839026:tid 140515878098624] [client 152.163.158.220:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "214"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=477&id=866%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-januari-1-pebruari-2016&start=80 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=477&id=866%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-januari-1-pebru..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "avmD_NTufO
...
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 152.163.158.220: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user ho ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 152.163.158.220: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown