Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=28&topics%5B3%5D=39&topics%5B4%5D=57&topics%5B5%5D=67 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ...
show moreRepeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=28&topics%5B3%5D=39&topics%5B4%5D=57&topics%5B5%5D=67 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36")
show less
[Tue Oct 13 08:51:24.467101 2026] [security2:error] [pid 609568:tid 140619435468480] [client 202.65.229.144:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/m ...
show more[Tue Oct 13 08:51:24.467101 2026] [security2:error] [pid 609568:tid 140619435468480] [client 202.65.229.144:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=492&id=1200%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-8-14-november-2016&start=50 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=492&id=1200%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-8-14-november-2016&start..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "as2OnJzyOPa
...
show less
Triggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 45700 (NAPINFO-AS-ID PT. NAP Info Lintas Nusa)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2025-03-24T09:51:59Z
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) ...
show moreTriggered Cloudflare WAF (l7ddos) from ID.
Action taken: BLOCK
ASN: 45700 (NAPINFO-AS-ID PT. NAP Info Lintas Nusa)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2025-03-24T09:51:59Z
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown