๐บ๐ธ
mawan
2026-07-12 22:40:38
(1 day ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
chrisj
2026-04-08 07:36:02
(3 months ago)
[Wed Apr 08 07:35:59.388401 2026] [proxy_fcgi:error] [pid 2415:tid 2415] [client 172.69.166.46:10693 ...
show more
[Wed Apr 08 07:35:59.388401 2026] [proxy_fcgi:error] [pid 2415:tid 2415] [client 172.69.166.46:10693] AH01071: Got error 'Primary script unknown', referer: http://vandogh.com/num.php
[Wed Apr 08 07:35:59.692318 2026] [proxy_fcgi:error] [pid 2415:tid 2415] [client 172.69.166.46:10693] AH01071: Got error 'Primary script unknown', referer: http://vandogh.com/app.php
[Wed Apr 08 07:36:01.779687 2026] [proxy_fcgi:error] [pid 2415:tid 2415] [client 172.69.166.46:10693] AH01071: Got error 'Primary script unknown', referer: http://vandogh.com/system_core.php
...
show less
Brute-Force
๐บ๐ธ
mnsf
2026-03-30 22:07:27
(3 months ago)
Scanning/Probing (13)
Brute-Force
Web App Attack
๐ฎ๐ฉ
Burayot
2026-03-30 04:24:56
(3 months ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 172.69.166.46 (SG/Singapore/-): 1 in ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 172.69.166.46 (SG/Singapore/-): 1 in the last 3600 secs
show less
Web App Attack
๐ซ๐ท
Campus France
2025-12-24 20:51:58
(6 months ago)
[Wed Dec 24 21:51:49.746603 2025] [php:error] [pid 1768021] [client 172.69.166.46:11851] script '/va ...
show more
[Wed Dec 24 21:51:49.746603 2025] [php:error] [pid 1768021] [client 172.69.166.46:11851] script '/var/www/html/aa.php' not found or unable to stat, referer: https://www.google.com/
[Wed Dec 24 21:51:56.991691 2025] [php:error] [pid 1768024] [client 172.69.166.46:9983] script '/var/www/html/info.php' not found or unable to stat, referer: https://duckduckgo.com/
[Wed Dec 24 21:51:57.148641 2025] [php:error] [pid 1768024] [client 172.69.166.46:9983] script '/var/www/html/ioxi-o.php' not found or unable to stat, referer: https://www.bing.com/
[Wed Dec 24 21:51:57.306983 2025] [php:error] [pid 1768024] [client 172.69.166.46:9983] script '/var/www/html/nc4.php' not found or unable to stat, referer: https://www.google.fr/
[Wed Dec 24 21:51:57.945622 2025] [php:error] [pid 1768024] [client 172.69.166.46:9983] script '/var/www/html/wp-good.php' not found or unable to stat, referer: https://www.google.co.uk/
...
show less
Brute-Force
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-29 05:00:24
(7 months ago)
[Sat Nov 29 11:58:23.901095 2025] [security2:error] [pid 829101:tid 139718470657728] [client 172.69. ...
show more
[Sat Nov 29 11:58:23.901095 2025] [security2:error] [pid 829101:tid 139718470657728] [client 172.69.166.46:36259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-RAY" at REQUEST_HEADERS_NAMES:Cf-Ray. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "399"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-RAY found within REQUEST_HEADERS_NAMES:Cf-Ray: Cf-Ray request_line = GET /images/Klimatologi/Prakiraan/04_Prakiraan_6_Bulanan/Prakiraan_Musim/Prakiraan_Musim_Hujan/Provinsi_Jawa_Timur/2022-2023/Prakiraan_Awal_Musim_Hujan_Tahun_2022-2023_Zona_Musim_Di_Provinsi_Jawa_Timur.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/04_Prakiraan_6_Bulanan/Prakiraan_Musim/Prakiraan_Musim_Hujan/Provinsi_Jawa_Timur/2022-2023/Prakiraan_Awal_Musim_Hujan_Tahun_2022-2023_Zona_Musim_Di_Provinsi_Jawa_Timur.webp"] [unique_id "aSp9b1umj9g3
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-19 05:59:22
(7 months ago)
[Wed Nov 19 12:55:47.262486 2025] [security2:error] [pid 90794:tid 140526614386368] [client 172.69.1 ...
show more
[Wed Nov 19 12:55:47.262486 2025] [security2:error] [pid 90794:tid 140526614386368] [client 172.69.166.46:45554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-RAY" at REQUEST_HEADERS_NAMES:Cf-Ray. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "394"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-RAY found within REQUEST_HEADERS_NAMES:Cf-Ray: Cf-Ray request_line = GET /images/Klimatologi/Prakiraan/04_Prakiraan_6_Bulanan/Prakiraan_Musim/Prakiraan_Musim_Hujan/Provinsi_Jawa_Timur/2022-2023/Prakiraan_Awal_Musim_Hujan_Tahun_2022-2023_Zona_Musim_Di_Provinsi_Jawa_Timur.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/04_Prakiraan_6_Bulanan/Prakiraan_Musim/Prakiraan_Musim_Hujan/Provinsi_Jawa_Timur/2022-2023/Prakiraan_Awal_Musim_Hujan_Tahun_2022-2023_Zona_Musim_Di_Provinsi_Jawa_Timur.webp"] [unique_id "aR1b48IEv-dzm
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-11 13:17:02
(8 months ago)
[Tue Nov 11 19:51:54.124054 2025] [security2:error] [pid 91565:tid 139672503183040] [client 172.69.1 ...
show more
[Tue Nov 11 19:51:54.124054 2025] [security2:error] [pid 91565:tid 139672503183040] [client 172.69.166.46:44934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-RAY" at REQUEST_HEADERS_NAMES:Cf-Ray. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "394"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-RAY found within REQUEST_HEADERS_NAMES:Cf-Ray: Cf-Ray request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2024/Infografis_Waspada_Cuaca_Ekstrem_di_Masa_Pancaroba.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2024/Infografis_Waspada_Cuaca_Ekstrem_di_Masa_Pancaroba.webp"] [unique_id "aRMxahFhFiYsa3_eJL1deQADhwE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[91567] [jjzBHFHt3CA] [aRMxahFhFiYsa3_eJL1deQADhwE] keep_alive=[1] [2025-11-11 19:51:54
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-11 08:49:27
(8 months ago)
[Tue Nov 11 15:48:10.736386 2025] [security2:error] [pid 751360:tid 140646972040896] [client 172.69. ...
show more
[Tue Nov 11 15:48:10.736386 2025] [security2:error] [pid 751360:tid 140646972040896] [client 172.69.166.46:30097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-RAY" at REQUEST_HEADERS_NAMES:Cf-Ray. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "394"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-RAY found within REQUEST_HEADERS_NAMES:Cf-Ray: Cf-Ray request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2024/Infografis_Waspada_Cuaca_Ekstrem_di_Masa_Pancaroba.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2024/Infografis_Waspada_Cuaca_Ekstrem_di_Masa_Pancaroba.webp"] [unique_id "aRL4SswlbHJMTNTwgzQ3AwABQRg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[751385] [oEkhtY1E1Ag] [aRL4SswlbHJMTNTwgzQ3AwABQRg] keep_alive=[1] [2025-11-11 15:48:
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-10 09:08:41
(8 months ago)
[Mon Nov 10 15:46:11.831785 2025] [security2:error] [pid 2333065:tid 140042126132928] [client 172.69 ...
show more
[Mon Nov 10 15:46:11.831785 2025] [security2:error] [pid 2333065:tid 140042126132928] [client 172.69.166.46:38155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-RAY" at REQUEST_HEADERS_NAMES:Cf-Ray. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "394"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-RAY found within REQUEST_HEADERS_NAMES:Cf-Ray: Cf-Ray request_line = GET /images/Klimatologi/Artikel/buku/2021/Leaflet_BMKG_Variabilitas_Iklim_di_Indonesia_Variasi_Jangka_Panjang_pada_Rata-Rata_Cuaca.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Artikel/buku/2021/Leaflet_BMKG_Variabilitas_Iklim_di_Indonesia_Variasi_Jangka_Panjang_pada_Rata-Rata_Cuaca.jpg"] [unique_id "aRGmU4w46pENapePFFwUJAAAwhg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2333090] [nig0kDl4dBc] [aRGmU4w46pENapePFFwUJAAAwhg] keep_alive=[1
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-09 03:32:17
(8 months ago)
[Sun Nov 09 10:31:32.518328 2025] [security2:error] [pid 736189:tid 140441085839040] [client 172.69. ...
show more
[Sun Nov 09 10:31:32.518328 2025] [security2:error] [pid 736189:tid 140441085839040] [client 172.69.166.46:44020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-RAY" at REQUEST_HEADERS_NAMES:Cf-Ray. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "394"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-RAY found within REQUEST_HEADERS_NAMES:Cf-Ray: Cf-Ray request_line = GET /images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Tingkat_Ketersediaan_Air_Tanah_Bulanan/Analisis_Tingkat_Ketersediaan_Air_Tanah_Bulanan_Provinsi_Jawa_Timur/2025/09_September_2025/Analisis_Bulanan_Tingkat_Ketersediaan_Air_Tanah_Bulan_September_Tahun_2025_di_Provinsi_Jawa_Timur.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Tingkat_Ketersediaan_Air_Tanah_Bulanan/Analisis_Tingkat_Ketersediaan_Air_Tanah_Bulan
...
show less
Hacking
Web App Attack
๐บ๐ธ
mawan
2025-11-08 07:17:56
(8 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-06 12:12:37
(8 months ago)
[Thu Nov 06 19:11:00.952369 2025] [security2:error] [pid 711025:tid 140567229486784] [client 172.69. ...
show more
[Thu Nov 06 19:11:00.952369 2025] [security2:error] [pid 711025:tid 140567229486784] [client 172.69.166.46:33648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-RAY" at REQUEST_HEADERS_NAMES:Cf-Ray. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "393"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-RAY found within REQUEST_HEADERS_NAMES:Cf-Ray: Cf-Ray request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2024/Infografis_Waspada_Cuaca_Ekstrem_di_Masa_Pancaroba.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2024/Infografis_Waspada_Cuaca_Ekstrem_di_Masa_Pancaroba.webp"] [unique_id "aQyQVKDTDaXqFsNK6gngNgADQQA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[711026] [fL5T9Ssia3c] [aQyQVKDTDaXqFsNK6gngNgADQQA] keep_alive=[1] [2025-11-06 19:11:
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-06 03:03:40
(8 months ago)
[Thu Nov 06 10:00:13.770423 2025] [security2:error] [pid 45665:tid 140567636371136] [client 172.69.1 ...
show more
[Thu Nov 06 10:00:13.770423 2025] [security2:error] [pid 45665:tid 140567636371136] [client 172.69.166.46:36516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-RAY" at REQUEST_HEADERS_NAMES:Cf-Ray. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "393"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-RAY found within REQUEST_HEADERS_NAMES:Cf-Ray: Cf-Ray request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2024/Infografis_Waspada_Cuaca_Ekstrem_di_Masa_Pancaroba.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2024/Infografis_Waspada_Cuaca_Ekstrem_di_Masa_Pancaroba.webp"] [unique_id "aQwPPWZIE5pCe9Bu6NGpfwACTQE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[45667] [1uCPQyT3jX0] [aQwPPWZIE5pCe9Bu6NGpfwACTQE] keep_alive=[1] [2025-11-06 10:00:13
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-04 10:47:45
(8 months ago)
[Tue Nov 04 17:45:50.344704 2025] [security2:error] [pid 230780:tid 140511368160960] [client 172.69. ...
show more
[Tue Nov 04 17:45:50.344704 2025] [security2:error] [pid 230780:tid 140511368160960] [client 172.69.166.46:48817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-RAY" at REQUEST_HEADERS_NAMES:Cf-Ray. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "393"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-RAY found within REQUEST_HEADERS_NAMES:Cf-Ray: Cf-Ray request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2024/Infografis_Waspada_Cuaca_Ekstrem_di_Masa_Pancaroba.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2024/Infografis_Waspada_Cuaca_Ekstrem_di_Masa_Pancaroba.webp"] [unique_id "aQnZXuK5Vly84yb9kacN0wACDQU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[230786] [YXYHiQKaCWw] [aQnZXuK5Vly84yb9kacN0wACDQU] keep_alive=[1] [2025-11-04 17:45:
...
show less
Hacking
Web App Attack