Total reports
3 from
3 distinct
reporters
First reported
November 26th 2025
Most recent report
12 hours ago
Last 60 days
Top reporter locations
🇮🇩
Indonesia
1
Most common categories
Hacking
1
Email Spam
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-11-09 15:16:18
UTC ·
(12 hours ago)
[Mon Nov 09 22:16:18.061322 2026] [security2:error] [pid 727174:tid 140392532006592] [client 186.1.85.4:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/corer ...
show more
[Mon Nov 09 22:16:18.061322 2026] [security2:error] [pid 727174:tid 140392532006592] [client 186.1.85.4:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "608"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:referer: https://www.yandex.go.id/ request_line = GET /index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur"] [unique_id "avHjwhFitTLCGIRSznxiMwAAABA"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[727217] [etiPcRls69Q] [avHjwhFitTLCGIRSznxiMwAAABA] keep_alive=[0] [2026-11-09 22:16:18.061328] [R:avHjwhFitTLCGIRSznxiMwAAABA] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x6
...
show less
Email Spam
Hacking
🇨🇦
polycoda
2026-02-14 13:05:34
UTC ·
(8 months ago)
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
2025-11-26 06:51:30
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
