🇮🇩
hermawan
2026-06-21 16:55:09
(18 hours ago)
[Sun Jun 21 23:55:07.954905 2026] [security2:error] [pid 1764586:tid 140110057162432] [client 213.10 ...
show more
[Sun Jun 21 23:55:07.954905 2026] [security2:error] [pid 1764586:tid 140110057162432] [client 213.109.66.62:53594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba"] [unique_id "ajgXa0RUQKn0AWIhRR_EJAABBwI"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1764589] [y8dVY8a9ME8] [ajgXa0RUQKn0AWIhRR_EJAABBwI
...
show less
Email Spam
Hacking
🇫🇷
EDSL
2026-06-07 00:40:59
(2 weeks ago)
[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)
Port Scan
🇩🇪
Yachiyo Runami
2026-06-04 10:26:29
(2 weeks ago)
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Flags: all SYN | TTL: 51 | Len: 60B | Win: 6 ...
show more
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Flags: all SYN | TTL: 51 | Len: 60B | Win: 65535(1) | rDNS: 213-109-66-62.aknet.kg | F2B/ufw-honeypot@2026-06-04T10:26:28Z
show less
Port Scan
Hacking
🇯🇵
huihui
2026-06-03 11:15:47
(2 weeks ago)
2026-06-03T15:53:08.659225+08:00 [Host] sshd[140286]: banner exchange: Connection from 213.109.66.62 ...
show more
2026-06-03T15:53:08.659225+08:00 [Host] sshd[140286]: banner exchange: Connection from 213.109.66.62 port 60136: invalid format
2026-06-03T15:53:58.889812+08:00 [Host] sshd[140431]: error: kex_exchange_identification: client sent invalid protocol identifier "\323\032\274CB\032\a7\334\bH\363\340\322\200\213\016Ci\024\001\224\335\367\022\243\3201\346>\211q\036\333\211\322\243H\031\261b\314\361\310{\247\2403\254\aP\277\265\316"\342\353}"
2026-06-03T15:53:58.890934+08:00 [Host] sshd[140431]: banner exchange: Connection from 213.109.66.62 port 33437: invalid format
...
show less
Brute-Force
SSH
🇯🇵
jay hung
2026-05-23 02:33:51
(4 weeks ago)
2026-05-23T02:33:50.425949+00:00 quarktech kernel: [368975.113023] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ...
show more
2026-05-23T02:33:50.425949+00:00 quarktech kernel: [368975.113023] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=213.109.66.62 DST=172.237.20.248 LEN=53 TOS=0x00 PREC=0x40 TTL=36 ID=3995 DF PROTO=UDP SPT=59959 DPT=20075 LEN=33
...
show less
Port Scan
🇨🇳
ThreatBook.io
2026-03-26 23:58:06
(2 months ago)
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/213.109.66.62
20 ...
show more
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/213.109.66.62
2026-03-26 02:05:41 /JSON%7C76561198765024896
2026-03-26 01:29:59 /JSON%7C76561198765606444
2026-03-26 01:51:39 /JSON%7C76561198765158720
2026-03-26 02:04:07 /JSON%7C76561198765516793
2026-03-26 02:01:23 /JSON%7C76561198767057135
2026-03-26 05:32:18 /JSON%7C76561198765654220
2026-03-26 02:28:04 /JSON%7C76561198767020364
2026-03-26 01:52:18 /JSON%7C76561198765654220
2026-03-26 01:25:21 /JSON%7C76561198765133133
2026-03-26 02:24:29 /JSON%7C76561198765158720
show less
Web App Attack
🇫🇷
vtchost.com
2026-03-21 07:55:35
(3 months ago)
minux.cc:443 213.109.66.62 - - [21/Mar/2026:08:55:28 +0100] "GET /403.html HTTP/1.1" 302 3059 "-" "M ...
show more
minux.cc:443 213.109.66.62 - - [21/Mar/2026:08:55:28 +0100] "GET /403.html HTTP/1.1" 302 3059 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.72 Safari/537.36"
...
show less
Bad Web Bot
🇨🇭
backslash
2026-01-29 21:35:09
(4 months ago)
block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803
Bad Web Bot
2026-01-10 12:40:20
(5 months ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
🇫🇷
vtchost.com
2026-01-09 07:02:58
(5 months ago)
port scan
...
Port Scan
🇺🇸
MPL
2026-01-09 01:58:19
(5 months ago)
tcp/23 (2 or more attempts)
Port Scan
🇺🇸
MPL
2026-01-09 01:58:19
(5 months ago)
tcp/23 (4 or more attempts)
Port Scan
🇫🇷
security.rdmc.fr
2026-01-09 01:45:20
(5 months ago)
Port Scan Attack proto:TCP src:40416 dst:23
Port Scan
2026-01-09 00:25:50
(5 months ago)
Unauthorized connection attempt on Port 2323
Port Scan
Hacking
Exploited Host