๐ง๐ช
madeit
2026-10-14 08:54:32
(6 days ago)
Web App Attack
๐ซ๐ท
dynamix
2026-10-12 14:38:47
(1 week ago)
Multiple WAF Violations
Web App Attack
๐จ๐ญ
ALPHANET
2026-09-27 09:07:32
(3 weeks ago)
web exploits
Hacking
Exploited Host
Web App Attack
๐ง๐ช
madeit
2026-09-18 04:51:18
(1 month ago)
Web App Attack
๐ฎ๐ฉ
Diskominfo Lumajang
2026-09-14 16:55:28
(1 month ago)
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=6
Brute-Force
๐ฎ๐ฉ
Diskominfo Lumajang
2026-09-13 15:45:10
(1 month ago)
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=5
Brute-Force
๐ณ๐ฑ
homeshowdomain.nl
2026-08-18 21:59:12
(2 months ago)
Auto-ban: >3000 req/min op 2026-08-18
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-08-18 02:18:54
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.142.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.142.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 22:18:47.442221 2026] [security2:error] [pid 30637:tid 30637] [client 172.70.142.25:14236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.lejzerowicz.org"] [uri "/.git/HEAD"] [unique_id "aoPBB4p80ze2PbHb2E7brAAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-17 07:25:43
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.142.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.142.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 03:25:34.651144 2026] [security2:error] [pid 31174:tid 31174] [client 172.70.142.25:9689] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.register-yacht-guernsey.com"] [uri "/.git/config"] [unique_id "aoK3brvlM1jrMyQf6OiWhAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-17 04:33:41
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.142.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.142.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 00:33:37.968386 2026] [security2:error] [pid 13780:tid 13780] [client 172.70.142.25:13208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.indyham.com"] [uri "/.git/config"] [unique_id "aoKPITX5OoJ20pyx9jssGwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-18 21:43:32
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.142.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.142.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 17:43:24.901481 2026] [security2:error] [pid 10555:tid 10555] [client 172.70.142.25:13061] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.openid.rimbey.us"] [uri "/.env.local"] [unique_id "aguH_OxMkBX5thW8FxlShwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-04-02 04:05:40
(6 months ago)
Scanning/Probing (21)
Brute-Force
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-19 04:17:50
(11 months ago)
[Wed Nov 19 11:16:07.132556 2025] [security2:error] [pid 57550:tid 140654377076416] [client 172.70.1 ...
show more
[Wed Nov 19 11:16:07.132556 2025] [security2:error] [pid 57550:tid 140654377076416] [client 172.70.142.25:41208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-Connecting-IP" at REQUEST_HEADERS_NAMES:Cf-Connecting-Ip. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "394"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-Connecting-IP found within REQUEST_HEADERS_NAMES:Cf-Connecting-Ip: Cf-Connecting-Ip request_line = GET /images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Curah_Hujan_Bulanan/Prakiraan_Curah_Hujan_Bulanan_Provinsi_Jawa_Timur/2023/07/02_Prakiraan_Curah_Hujan_Bulan_OKTOBER_2023_di_Provinsi_Jawa_Timur-Update_dari_Analisis_Bulan_Juli_2023.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Curah_Hujan_Bulanan/Prakiraan_Curah_Hujan_Bulanan_Provinsi_Jawa_Timur/2023/
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-16 15:53:49
(11 months ago)
[Sun Nov 16 22:34:08.386775 2025] [security2:error] [pid 67760:tid 140544249390784] [client 172.70.1 ...
show more
[Sun Nov 16 22:34:08.386775 2025] [security2:error] [pid 67760:tid 140544249390784] [client 172.70.142.25:33825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-RAY" at REQUEST_HEADERS_NAMES:Cf-Ray. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "394"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-RAY found within REQUEST_HEADERS_NAMES:Cf-Ray: Cf-Ray request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/Ekstrim/2025/04_April_2025/Infografis_Bulanan_Curah_Hujan_Maksimum_Bulan_April_2025-600.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/Ekstrim/2025/04_April_2025/Infografis_Bulanan_Curah_Hujan_Maksimum_Bulan_April_2025-600.webp"] [unique_id "aRnu8BPxIemK5Gyq241RjgABxww"] [staklim-malang.info] [staklim-malang.info] top=[67773] [NgIq9reA4kM] [aRnu8BPxIemK5Gyq241RjgABx
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-14 13:38:26
(11 months ago)
[Fri Nov 14 20:33:44.889962 2025] [security2:error] [pid 37397:tid 140100249843392] [client 172.70.1 ...
show more
[Fri Nov 14 20:33:44.889962 2025] [security2:error] [pid 37397:tid 140100249843392] [client 172.70.142.25:48846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-RAY" at REQUEST_HEADERS_NAMES:Cf-Ray. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "394"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-RAY found within REQUEST_HEADERS_NAMES:Cf-Ray: Cf-Ray request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/Ekstrim/2025/04_April_2025/Infografis_Bulanan_Curah_Hujan_Maksimum_Bulan_April_2025-600.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/Ekstrim/2025/04_April_2025/Infografis_Bulanan_Curah_Hujan_Maksimum_Bulan_April_2025-600.webp"] [unique_id "aRcvuCRt8WsMaEldE20VAwAAUgE"] [staklim-malang.info] [staklim-malang.info] top=[37399] [VpjuCw5zD58] [aRcvuCRt8WsMaEldE20VAwAAU
...
show less
Hacking
Web App Attack