๐บ๐ธ
mawan
2026-07-24 17:48:58
(1 day ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ฉ๐ช
Blexyel
2026-02-07 04:22:30
(5 months ago)
172.70.142.45 - - [07/Feb/2026:05:22:30 +0100] "GET /wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 ...
show more
172.70.142.45 - - [07/Feb/2026:05:22:30 +0100] "GET /wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
๐ฏ๐ต
S.O.B.A. Dev.
2026-02-01 07:54:03
(5 months ago)
Persistent port scanning or vulnerability scanning
Port Scan
๐ซ๐ท
Campus France
2025-12-07 05:40:09
(7 months ago)
[Sun Dec 07 06:40:07.580708 2025] [php:error] [pid 2600996] [client 172.70.142.45:10530] script '/va ...
show more
[Sun Dec 07 06:40:07.580708 2025] [php:error] [pid 2600996] [client 172.70.142.45:10530] script '/var/www/html/1.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sun Dec 07 06:40:07.738304 2025] [php:error] [pid 2600996] [client 172.70.142.45:10530] script '/var/www/html/aa.php' not found or unable to stat, referer: https://www.bing.com/
[Sun Dec 07 06:40:07.894393 2025] [php:error] [pid 2600996] [client 172.70.142.45:10530] script '/var/www/html/abcd.php' not found or unable to stat, referer: https://www.google.de/
[Sun Dec 07 06:40:08.052037 2025] [php:error] [pid 2600996] [client 172.70.142.45:10530] script '/var/www/html/about.php' not found or unable to stat, referer: https://www.bing.com/
[Sun Dec 07 06:40:08.374039 2025] [php:error] [pid 2600996] [client 172.70.142.45:10530] script '/var/www/html/admin.php' not found or unable to stat, referer: https://www.bing.com/
...
show less
Brute-Force
Web App Attack
๐ฎ๐ฉ
hermawan
2025-11-04 09:03:28
(8 months ago)
[Tue Nov 04 16:00:34.120638 2025] [security2:error] [pid 105563:tid 140511664928448] [client 172.70. ...
show more
[Tue Nov 04 16:00:34.120638 2025] [security2:error] [pid 105563:tid 140511664928448] [client 172.70.142.45:41071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-RAY" at REQUEST_HEADERS_NAMES:Cf-Ray. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "393"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-RAY found within REQUEST_HEADERS_NAMES:Cf-Ray: Cf-Ray request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/10_Master_Infografis_Infrastruktur_Rev_2-05-600.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/10_Master_Infografis_Infrastruktur_Rev_2-05-600.webp"] [unique_id "aQnAsqNZnxdUAKOMt7TPIAADxQI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[105566] [2TONEAFLKJo] [aQnAsqNZnxdUAKOMt7TPIAADxQI] keep_alive=[1] [2025-11-04 16:00:34.120643] [R:aQnAsqNZ
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-10-22 12:14:34
(9 months ago)
[Wed Oct 22 19:10:42.163480 2025] [security2:error] [pid 1867230:tid 140576648279744] [client 172.70 ...
show more
[Wed Oct 22 19:10:42.163480 2025] [security2:error] [pid 1867230:tid 140576648279744] [client 172.70.142.45:54264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-Connecting-IP" at REQUEST_HEADERS_NAMES:Cf-Connecting-Ip. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "375"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-Connecting-IP found within REQUEST_HEADERS_NAMES:Cf-Connecting-Ip: Cf-Connecting-Ip request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/10_Master_Infografis_Infrastruktur_Rev_2-05-600.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/10_Master_Infografis_Infrastruktur_Rev_2-05-600.webp"] [unique_id "aPjJwn938rPUP14Ctm0OyQAA1Qs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1867242] [YjuWNH4ZLqo] [aPjJwn938rPUP14Ctm0OyQAA1Qs] kee
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-10-14 04:37:58
(9 months ago)
[Tue Oct 14 11:36:50.924258 2025] [security2:error] [pid 1849198:tid 140350552270528] [client 172.70 ...
show more
[Tue Oct 14 11:36:50.924258 2025] [security2:error] [pid 1849198:tid 140350552270528] [client 172.70.142.45:38040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-Connecting-IP" at REQUEST_HEADERS_NAMES:Cf-Connecting-Ip. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "375"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-Connecting-IP found within REQUEST_HEADERS_NAMES:Cf-Connecting-Ip: Cf-Connecting-Ip request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/2025/01_Januari_2025/Infografis-Bulanan_Prakiraan_Hujan_Bulan_MARET-APRIL-MEI_Tahun_2025_Update_Dari_Analisis_Bulan_Januari_2025_di_Provinsi_Jawa_Timur.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/2025/01_Januari_2025/Infografis-Bulanan_Prakiraan_Hujan_Bulan_MARET-APRIL-MEI_Tahun_2025_Update_Dari_Analisis_Bu
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-09-14 13:16:23
(10 months ago)
[Sun Sep 14 20:13:48.821784 2025] [security2:error] [pid 2173482:tid 140266787727040] [client 172.70 ...
show more
[Sun Sep 14 20:13:48.821784 2025] [security2:error] [pid 2173482:tid 140266787727040] [client 172.70.142.45:65122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-Connecting-IP" at REQUEST_HEADERS_NAMES:Cf-Connecting-Ip. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "375"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-Connecting-IP found within REQUEST_HEADERS_NAMES:Cf-Connecting-Ip: Cf-Connecting-Ip request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/2025/01_Januari_2025/Infografis-Bulanan_Prakiraan_Hujan_Bulan_MARET-APRIL-MEI_Tahun_2025_Update_Dari_Analisis_Bulan_Januari_2025_di_Provinsi_Jawa_Timur.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/2025/01_Januari_2025/Infografis-Bulanan_Prakiraan_Hujan_Bulan_MARET-APRIL-MEI_Tahun_2025_Update_Dari_Analisis_Bu
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-31 13:52:45
(10 months ago)
[Sun Aug 31 20:51:58.736697 2025] [security2:error] [pid 71723:tid 139982841743040] [client 172.70.1 ...
show more
[Sun Aug 31 20:51:58.736697 2025] [security2:error] [pid 71723:tid 139982841743040] [client 172.70.142.45:39840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-Connecting-IP" at REQUEST_HEADERS_NAMES:Cf-Connecting-Ip. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "375"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-Connecting-IP found within REQUEST_HEADERS_NAMES:Cf-Connecting-Ip: Cf-Connecting-Ip request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/10_Master_Infografis_Infrastruktur_Rev_2-05-600.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/10_Master_Infografis_Infrastruktur_Rev_2-05-600.webp"] [unique_id "aLRTfsNzCKNxVWliCn_8ewADTRg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[71748] [N1MHj6kjJJA] [aLRTfsNzCKNxVWliCn_8ewADTRg] keep_al
...
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-24 08:09:38
(11 months ago)
[Sun Aug 24 15:07:46.211049 2025] [security2:error] [pid 347415:tid 140702766814912] [client 172.70. ...
show more
[Sun Aug 24 15:07:46.211049 2025] [security2:error] [pid 347415:tid 140702766814912] [client 172.70.142.45:53036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-Connecting-IP" at REQUEST_HEADERS_NAMES:Cf-Connecting-Ip. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "375"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-Connecting-IP found within REQUEST_HEADERS_NAMES:Cf-Connecting-Ip: Cf-Connecting-Ip request_line = GET /images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Distibusi_Curah_Hujan_Bulanan/Analisis_Distibusi_Curah_Hujan_Bulanan_Provinsi_Jawa_Timur/2024/05_Mei_2024/Analisis_Bulanan_Distribusi_Curah_Hujan_Bulan_Mei_Tahun_2024_di_Provinsi_Jawa_Timur.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Distibusi_Curah_Hujan_Bulanan/Analisis_Distibusi_Curah_Hujan_Bulanan_Provins
...
show less
Hacking
Web App Attack
๐บ๐ธ
mawan
2025-08-21 23:21:45
(11 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
mawan
2025-08-08 11:15:08
(11 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ฎ๐ฉ
hermawan
2025-08-07 05:54:40
(11 months ago)
[Thu Aug 07 12:51:31.601771 2025] [security2:error] [pid 118814:tid 140098900309696] [client 172.70. ...
show more
[Thu Aug 07 12:51:31.601771 2025] [security2:error] [pid 118814:tid 140098900309696] [client 172.70.142.45:63518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-Connecting-IP" at REQUEST_HEADERS_NAMES:Cf-Connecting-Ip. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "375"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-Connecting-IP found within REQUEST_HEADERS_NAMES:Cf-Connecting-Ip: Cf-Connecting-Ip request_line = GET /images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Tingkat_Ketersediaan_Air_Tanah_Bulanan/Analisis_Tingkat_Ketersediaan_Air_Tanah_Bulanan_Provinsi_Jawa_Timur/2025/06_Juni_2025/Analisis_Bulanan_Tingkat_Ketersediaan_Air_Tanah_Bulan_Juni_Tahun_2025_di_Provinsi_Jawa_Timur.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Tingkat_Ketersediaan_Air_Tanah_Bulanan/Anali
...
show less
Hacking
Web App Attack
Anonymous
2025-08-03 02:31:29
(11 months ago)
wp admin page access attempt
...
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2025-07-28 06:58:38
(11 months ago)
[Mon Jul 28 13:57:20.181376 2025] [security2:error] [pid 342003:tid 139995997169344] [client 172.70. ...
show more
[Mon Jul 28 13:57:20.181376 2025] [security2:error] [pid 342003:tid 139995997169344] [client 172.70.142.45:35854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CF-Connecting-IP" at REQUEST_HEADERS_NAMES:Cf-Connecting-Ip. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "379"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: CF-Connecting-IP found within REQUEST_HEADERS_NAMES:Cf-Connecting-Ip: Cf-Connecting-Ip request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/2025/01_Januari_2025/Infografis-Bulanan_Prakiraan_Hujan_Bulan_MARET-APRIL-MEI_Tahun_2025_Update_Dari_Analisis_Bulan_Januari_2025_di_Provinsi_Jawa_Timur.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/2025/01_Januari_2025/Infografis-Bulanan_Prakiraan_Hujan_Bulan_MARET-APRIL-MEI_Tahun_2025_Update_Dari_Analisis_Bul
...
show less
Hacking
Web App Attack