🇮🇩
hermawan
2026-10-22 08:13:12
(1 day ago)
[Thu Oct 22 15:13:11.632097 2026] [security2:error] [pid 16301:tid 139901534090944] [client 170.79.9 ...
show more
[Thu Oct 22 15:13:11.632097 2026] [security2:error] [pid 16301:tid 139901534090944] [client 170.79.90.60:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:referer: https://www.yandex.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories"] [unique_id "atnFl0cbV550EQ4Q-KSTbwAAAII"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[16357] [VOFEbynBtHU] [atnFl0cbV550EQ4Q-KSTbwAAAII] keep_alive=[0] [2026-10-22 15:13:11.632105] [R:atnFl0cbV550EQ4Q-KSTbwAAAII] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15
...
show less
Email Spam
Hacking
🇧🇾
sashan
2026-10-18 09:38:13
(5 days ago)
2026-10-18T12:38:13.319173+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=170.79.90.6 ...
show more
2026-10-18T12:38:13.319173+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=170.79.90.60 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=47617 DF PROTO=TCP SPT=55396 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇧🇾
sashan
2026-10-17 05:10:43
(6 days ago)
2026-10-17T08:10:43.565697+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=170.79.90.6 ...
show more
2026-10-17T08:10:43.565697+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=170.79.90.60 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=8034 DF PROTO=TCP SPT=55254 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇧🇾
sashan
2026-10-16 17:25:08
(6 days ago)
2026-10-16T20:25:07.195740+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=170.79.90.6 ...
show more
2026-10-16T20:25:07.195740+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=170.79.90.60 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=46363 DF PROTO=TCP SPT=42046 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇧🇾
sashan
2026-10-16 03:05:25
(1 week ago)
2026-10-16T06:05:25.204982+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=170.79.90.6 ...
show more
2026-10-16T06:05:25.204982+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=170.79.90.60 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=42241 DF PROTO=TCP SPT=49824 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇧🇾
sashan
2026-10-14 12:20:51
(1 week ago)
2026-10-14T15:20:51.340796+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=170.79.90.6 ...
show more
2026-10-14T15:20:51.340796+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=170.79.90.60 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=50484 DF PROTO=TCP SPT=52480 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇺🇸
TPI-Abuse
2026-09-18 23:33:37
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 170.79.90.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 170.79.90.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 19:33:21.667284 2026] [security2:error] [pid 24845:tid 24845] [client 170.79.90.60:36103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||brazilianbikinis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "brazilianbikinis.com"] [uri "/"] [unique_id "aq3KQZJGMhUG2vTE9nQzTgAAAD0"], referer: https://puckerbuttbikini.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-11 06:02:57
(1 month ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇩🇪
nyuuzyou
2026-09-08 19:26:42
(1 month ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on applic ...
show more
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-08T19:26:42Z.
show less
Bad Web Bot
🇺🇸
kosada.com
2026-08-24 23:48:55
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇫🇷
Zkillu
2026-08-20 16:04:40
(2 months ago)
DDoS flood attack against 46.232.235.0 (2026-08-20 15:59:40 -> 2026-08-20 16:14:40 UTC) targeting AS ...
show more
DDoS flood attack against 46.232.235.0 (2026-08-20 15:59:40 -> 2026-08-20 16:14:40 UTC) targeting AS215599. This IP (AS267857) sent ~1646 packets (2.34 MB) during the attack window. Likely a compromised device (botnet).
show less
DDoS Attack
Exploited Host
🇩🇪
LRob
2026-08-19 01:23:04
(2 months ago)
L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ...
show more
L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /116-vtt | query: q=Famille-Laufey-Taller+Kids-Zesty-Oiz
show less
DDoS Attack
Web App Attack
2026-07-31 05:58:59
(2 months ago)
denied traffic to a honeypot network. destination port 32175.
Port Scan
Hacking
🇺🇸
kosada.com
2026-07-30 12:39:42
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇨🇭
backslash
2026-07-17 01:03:03
(3 months ago)
block ruleset A5EE6C8F745F0934168261886A3817E5C386412A
Bad Web Bot