🇮🇩
hermawan
2026-06-07 03:40:25
(2 weeks ago)
[Sun Jun 07 10:40:20.419318 2026] [security2:error] [pid 597555:tid 140593967638208] [client 213.134 ...
show more
[Sun Jun 07 10:40:20.419318 2026] [security2:error] [pid 597555:tid 140593967638208] [client 213.134.175.66:63670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories"] [unique_id "aiToJNOWI6xnH98LhUn1eQACBQI"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[597558] [2m0up2GSNLc] [aiToJNOWI6xnH98LhUn1eQACBQI] keep_alive=[1] [2026-06-07 10:40:20.419322] [R:aiToJNOWI6xnH98LhUn1eQACBQI] UA:'Mozilla/5.0 (Linux; Android 10; SM-S901B) AppleWebKit/537.36 (KHTML, like Gec
...
show less
Email Spam
Hacking
🇩🇪
EGP Abuse Dept
2026-06-05 01:38:05
(2 weeks ago)
Scraping webshop URLs (www.sanal.nl), likely botnet drone
Bad Web Bot
Exploited Host
🇮🇩
hermawan
2026-05-11 14:16:41
(1 month ago)
[Mon May 11 20:18:27.919319 2026] [security2:error] [pid 93681:tid 140116057077440] [client 213.134. ...
show more
[Mon May 11 20:18:27.919319 2026] [security2:error] [pid 93681:tid 140116057077440] [client 213.134.175.66:63742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "623"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim"] [unique_id "agHXI-zhZ-jLg1SfxGq3XwABDw0"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[93695] [6Hz/lMoFw2A] [agHXI-zhZ-jLg1SfxGq3XwABDw0] keep_alive=[1] [2026-05-11 20:18:27.919322] [R:agHXI-zhZ-jL
...
show less
Email Spam
Hacking
🇬🇧
sdos.es
2021-10-27 12:04:37
(4 years ago)
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:<?xml version ...
show more
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:<?xml version: <?xml version"
show less
Web App Attack
🇻🇳
websase.com
2021-10-24 18:20:35
(4 years ago)
WordPress XMLRPC Brute Force Attacks
Brute-Force
Web App Attack
🇬🇧
sdos.es
2021-10-17 11:39:42
(4 years ago)
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:<?xml version ...
show more
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:<?xml version: <?xml version"
show less
Web App Attack
🇻🇳
websase.com
2021-10-13 11:42:50
(4 years ago)
WordPress XMLRPC Brute Force Attacks
Brute-Force
Web App Attack
🇩🇪
clamehost.it
2021-10-12 09:00:20
(4 years ago)
Automatic report - Brute Force attack using this IP address
Brute-Force
🇻🇳
websase.com
2021-10-10 18:02:20
(4 years ago)
WordPress XMLRPC Brute Force Attacks
Brute-Force
Web App Attack
🇺🇸
mnsf
2021-10-05 16:01:39
(4 years ago)
Xmlrpc Caught (6)
Brute-Force
Web App Attack
🇻🇳
websase.com
2021-10-02 13:42:37
(4 years ago)
WordPress XMLRPC Brute Force Attacks
Brute-Force
Web App Attack
🇲🇾
syokadmin
2021-09-01 07:53:16
(4 years ago)
(mod_security) mod_security (id:949110) triggered by 213.134.175.66 (PL/Poland/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:949110) triggered by 213.134.175.66 (PL/Poland/-): 1 in the last 3600 secs
show less
Brute-Force