KelvaTLS: TCP connection-limit abuse against TCP port 1194 on our infrastructure. nft veil1194off_co ...
show moreKelvaTLS: TCP connection-limit abuse against TCP port 1194 on our infrastructure. nft veil1194off_conn+veil1194off_rate: held more concurrent connections to the OpenVPN listener than the per-source limit permits; opened new connections to the OpenVPN listener faster than the per-source limit permits from this source. UTC 2026-08-30T02:17:54Z. incident kelva-20260830-013346Z.
show less
[Thu Jul 02 00:41:49.665277 2026] [security2:error] [pid 633820:tid 139637178128064] [client 168.228 ...
show more[Thu Jul 02 00:41:49.665277 2026] [security2:error] [pid 633820:tid 139637178128064] [client 168.228.149.45:51368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:Referer: https://www.bing.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "akVRXUjLerUZkV74rjIwdAAABBg"], referer https://www.bing.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[633845] [7MOwNND7MQM] [akVRXUjLerUZkV74rjIwdAAABBg] keep_alive=[1] [2026-07-02 00:41:49.665283] [R:akVRXUjLerUZkV74rjIwdAAABBg] U
...
show less
Email Spam
Hacking
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show moreDistributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Bad Web Bot
Exploited Host
Showing 1 to
3
of 3 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩