🇧🇷
ICS Labs
2026-08-20 16:03:37
(1 week ago)
ICS Labs identified 36.110.131.98 as a malicious indicator from threat intelligence.
DDoS Attack
Hacking
Exploited Host
🇧🇷
ICS Labs
2026-06-01 22:00:16
(2 months ago)
ICS Labs identified 36.110.131.98 as a malicious indicator from threat intelligence.
DDoS Attack
Hacking
Exploited Host
🇮🇩
hermawan
2025-02-17 09:05:40
(1 year ago)
[Mon Feb 17 16:05:39.538830 2025] [security2:error] [pid 658321:tid 140049586243264] [client 36.110. ...
show more
[Mon Feb 17 16:05:39.538830 2025] [security2:error] [pid 658321:tid 140049586243264] [client 36.110.131.98:38761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "165"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z7L74zRa4bFphKk6LoqteQAA1Cg"], referer https://staklim-malang.info/index.php/profil/meteorologi/list-all-categories/4166-klimatologi/infografis/infografis-klimatologi/infografis-dasarian/infografis-dasarian-tahun-2023/555560153-infografis-dasarian-informasi-iklim-jatim-update-31-mei-
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-01-24 03:05:55
(1 year ago)
[Fri Jan 24 02:11:48.481541 2025] [security2:error] [pid 167940:tid 128945093592768] [client 36.110. ...
show more
[Fri Jan 24 02:11:48.481541 2025] [security2:error] [pid 167940:tid 128945093592768] [client 36.110.131.98:18774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "59"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z5KUdMFc4gIT6JioEocZkQABWFE"], referer https://staklim-malang.info/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-sifat-hujan-bulanan/prakiraan-sifat-hujan-untuk-6-bulan-ke-depan/555561157-prakiraan-bulanan-sifat-hujan-di-kabupaten-bojonegoro-untuk-6-bulan-ke-depan-2 [staklim-m
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-01-22 03:48:05
(1 year ago)
[Tue Jan 21 21:03:13.239407 2025] [security2:error] [pid 722622:tid 132970817853120] [client 36.110. ...
show more
[Tue Jan 21 21:03:13.239407 2025] [security2:error] [pid 722622:tid 132970817853120] [client 36.110.131.98:1323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "image/heif" at REQUEST_HEADERS:Accept. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "67"] [id "441001"] [msg " bot downloader image HEIF Format Only Safari support "] [data "Matched Data: image/heif found within REQUEST_HEADERS:Accept: image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8 request_line = GET /images/banners/Banner_Web_2024_Shelina-v3.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/banners/Banner_Web_2024_Shelina-v3.webp"] [unique_id "Z4-pIR7qYnIuvnjg9K10AgADoiw"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[722667] [Yehv1t9IkAQ] [Z4-pIR7qYnIuvnjg9K10AgADoiw] keep_alive=[1] [2025-01-21 21:03:13.239414] [R:Z4-pIR7qYnIuvnjg9K10A
...
show less
Hacking
Web App Attack
Anonymous
2025-01-21 09:44:25
(1 year ago)
01/21/2025-10:44:25.374474 36.110.131.98 Protocol: 6 SURICATA TCP option invalid length
Hacking
🇮🇩
hermawan
2025-01-15 02:17:40
(1 year ago)
[Wed Jan 15 00:55:01.518809 2025] [security2:error] [pid 96957:tid 137709793433280] [client 36.110.1 ...
show more
[Wed Jan 15 00:55:01.518809 2025] [security2:error] [pid 96957:tid 137709793433280] [client 36.110.131.98:38849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "59"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z4ak9UCdZPAzEJb4tHYckAAAAwA"], referer https://staklim-malang.info/index.php/profil/meteorologi/list-all-categories/4216-klimatologi/analisis-klimatologi/monitoring-dan-prakiraan-curah-hujan-dasarian-di-provinsi-jawa-timur/monitoring-dan-prakiraan-curah-hujan-dasarian-di-provinsi-jawa-
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-01-12 01:04:00
(1 year ago)
[Sun Jan 12 00:54:57.427142 2025] [security2:error] [pid 57370:tid 124634747832000] [client 36.110.1 ...
show more
[Sun Jan 12 00:54:57.427142 2025] [security2:error] [pid 57370:tid 124634747832000] [client 36.110.131.98:13029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "57"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "Z4KwcYcMGx9OCFDRq7GDzwAAsQ8"], referer https://staklim-jatim.bmkg.go.id/index.php/prakiraan-bulanan/4096-prakiraan-sifat-hujan-bulanan/prakiraan-sifat-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-bulanan-sifat-hujan-di-propinsi-jawa-timur-tahun-2021/555558748-prakiraan-bulanan-sifat-hujan-b
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-01-09 16:13:37
(1 year ago)
[Thu Jan 09 16:44:14.310315 2025] [security2:error] [pid 251981:tid 129466322220736] [client 36.110. ...
show more
[Thu Jan 09 16:44:14.310315 2025] [security2:error] [pid 251981:tid 129466322220736] [client 36.110.131.98:36355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "64"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z3-abkoM6mr-b8tUZIlDGQACaEo"], referer https://staklim-malang.info/index.php/profil/arsip-artikel?catid=477&id=684%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-1-7-september-2015&start=180 [staklim-malang.info] [staklim-malang.info] top=[252056] [dLUn0upM
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-01-02 19:12:16
(1 year ago)
[Fri Jan 03 00:18:50.986976 2025] [security2:error] [pid 19786:tid 130443837986496] [client 36.110.1 ...
show more
[Fri Jan 03 00:18:50.986976 2025] [security2:error] [pid 19786:tid 130443837986496] [client 36.110.131.98:58545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.9.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "64"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "Z3bKet3u1Bl44uiVYiId4gADNTU"], referer https://staklim-jatim.bmkg.go.id/index.php/prakiraan-bulanan/3874-prakiraan-sifat-hujan-bulanan/prakiraan-sifat-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-sifat-hujan-bulanan-di-propinsi-jawa-timur-tahun-2018/555556718-prakiraan-sifat-hujan-bulan-nove
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2024-12-23 02:48:50
(1 year ago)
[Sun Dec 22 20:47:08.401879 2024] [security2:error] [pid 103165:tid 125204971878080] [client 36.110. ...
show more
[Sun Dec 22 20:47:08.401879 2024] [security2:error] [pid 103165:tid 125204971878080] [client 36.110.131.98:25572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.9.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "61"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /OneSignalSDKWorker.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "Z2gYXF_dU9e7Ha39S2njhAADIgo"], referer https://staklim-jatim.bmkg.go.id/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir?start=5 [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[103176] [5JeyHRQz6bY] [Z2gYXF_dU9e7Ha39S2njhAADIgo] keep_alive=[1] [
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2024-12-22 07:49:31
(1 year ago)
[Sat Dec 21 11:39:23.523192 2024] [security2:error] [pid 367841:tid 125553016952512] [client 36.110. ...
show more
[Sat Dec 21 11:39:23.523192 2024] [security2:error] [pid 367841:tid 125553016952512] [client 36.110.131.98:26737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.9.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "61"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z2ZGe1FfFjlwgGbS4bTrRgADNQQ"], referer https://staklim-malang.info/index.php/profil/arsip-artikel?catid=488&id=923%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-15-21-maret-2016&start=10 [staklim-malang.info] [staklim-malang.info] top=[367846] [E/f0WEikPzw]
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2024-12-16 05:37:08
(1 year ago)
[Mon Dec 16 11:24:38.604661 2024] [security2:error] [pid 14056:tid 132452791551680] [client 36.110.1 ...
show more
[Mon Dec 16 11:24:38.604661 2024] [security2:error] [pid 14056:tid 132452791551680] [client 36.110.131.98:49915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.9.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "61"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z1-rhowlJUZlXCEIaOHMWgADNhw"], referer https://staklim-malang.info/index.php/profil/arsip-artikel?catid=488&id=902%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-1-7-maret-2016&start=80 [staklim-malang.info] [staklim-malang.info] top=[14085] [cUYBj5O9nm0] [Z1
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2024-12-07 18:17:23
(1 year ago)
[Sat Dec 07 18:15:32.573473 2024] [security2:error] [pid 359589:tid 130537672906432] [client 36.110. ...
show more
[Sat Dec 07 18:15:32.573473 2024] [security2:error] [pid 359589:tid 130537672906432] [client 36.110.131.98:19492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "61"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z1QuVCY9RpIYcj6gMZfmbQACeQU"], referer https://staklim-malang.info/index.php/monitoring-hari-tanpa-hujan-berturut-turut/3920-monitoring-hari-tanpa-hujan-berturut-turut-interpolasi/monitoring-hari-tanpa-hujan-berturut-turut-interpolasi-di-provinsi-jawa-timur [staklim-malang.info] [stakl
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2024-12-02 01:02:38
(1 year ago)
[Mon Dec 02 02:56:32.999446 2024] [security2:error] [pid 474681:tid 128511515797184] [client 36.110. ...
show more
[Mon Dec 02 02:56:32.999446 2024] [security2:error] [pid 474681:tid 128511515797184] [client 36.110.131.98:6141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Head" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "61"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Head found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/117.0.5938.60 Safari/537.36 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z0y_cNbPjjLdsGpSNwEWbwABWgM"], referer https://staklim-malang.info/index.php/analisis-bulanan/4093-analisis-distribusi-hujan/analisis-distribusi-curah-hujan/analisis-distribusi-curah-hujan-jawa-timur-bulanan/analisis-bulanan-distribusi-curah-hujan-tahun-2021-di-provinsi-jawa-timur/55555
...
show less
Hacking
Web App Attack