Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[Mon Nov 09 13:03:15.133450 2026] [security2:error] [pid 429241:tid 140392565544640] [client 36.91.99.2:0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:/\\\\*!?|\\\\*/|[';]--|--[\\\\s\\\\r\\\\n\\\\v\\\\f]|--[^-]*?-|[^&-]#.*?[ ...
show more[Mon Nov 09 13:03:15.133450 2026] [security2:error] [pid 429241:tid 140392565544640] [client 36.91.99.2:0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:/\\\\*!?|\\\\*/|[';]--|--[\\\\s\\\\r\\\\n\\\\v\\\\f]|--[^-]*?-|[^&-]#.*?[\\\\s\\\\r\\\\n\\\\v\\\\f]|;?\\\\x00)" at REQUEST_COOKIES:cf_clearance. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "3586"] [id "942443"] [msg "SQL Comment Sequence Detected"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: --m0gYCKi53AQ6SWN6NgB522KtmvI4lkj8oHmYqsverMYrahHVcE- found within REQUEST_COOKIES:cf_clearance: Ct5LIBP2nhqlV3NyPn31U7_swMT7iv554Vbx535mnzofz4RacsOlSTOxMncF9WyST95TKfqCodHKWnJX0huHFk3mQ0TY427YpeNuPyovt0mqod3AyZlEQnM-q3NAo82larCUEyJjijpfFcMWtwFl2G_xQifrsPzl3u5EpLsXqgFGQwKXH4Jpx-Vx-FHkhvY_JYXkg8c_km2nsgFLzLSDQUSWL0xA7siOO9nfajCBbIyFIp7VA2TLvMBTiZizswiconKYZtNXjifWJMBiRnPSdCif1kIAba3Z6ASKS8A4CspA-GRNZb..."
...
show less
[Fri Nov 06 16:38:56.779222 2026] [security2:error] [pid 144358:tid 139782772475584] [client 36.91.99.2:0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:/\\\\*!?|\\\\*/|[';]--|--[\\\\s\\\\r\\\\n\\\\v\\\\f]|--[^-]*?-|[^&-]#.*?[ ...
show more[Fri Nov 06 16:38:56.779222 2026] [security2:error] [pid 144358:tid 139782772475584] [client 36.91.99.2:0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:/\\\\*!?|\\\\*/|[';]--|--[\\\\s\\\\r\\\\n\\\\v\\\\f]|--[^-]*?-|[^&-]#.*?[\\\\s\\\\r\\\\n\\\\v\\\\f]|;?\\\\x00)" at REQUEST_COOKIES:cf_clearance. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "3586"] [id "942443"] [msg "SQL Comment Sequence Detected"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: --i7kSCeABhz9afkA6XTpBBelF0LtHN9EkCw0VQRFi0YVR1X0y- found within REQUEST_COOKIES:cf_clearance: Cl6xlhvynV-8fSa6SsKAIFYjq4wj4ADUlO2Zc7dDl_J7bCJZCTl1t8EfCyPFRcVzBRvWoO9bb5VvlC3I-0s9aGP_bBxtStE3mkZYHRFz4Sv6NIuby8yyC76MTPa05TSoVRDO6fZY0k9uhsEAxPhd1Rdz3mxVMDRZI_7taLL4It63DlZAgGsM4j7VNLnyIw--i7kSCeABhz9afkA6XTpBBelF0LtHN9EkCw0VQRFi0YVR1X0y-hwlFzUWMxEoGqHTzEcOJ8yNRnI8fnPpmWt06p532C8VDjSsgGi7WQO7ZQEN288tulEK..."
...
show less
[Wed Nov 04 09:52:31.099822 2026] [security2:error] [pid 315341:tid 139767523403456] [client 36.91.99.2:0] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^ey[\\\\-0-9A-Z_a-z]+\\\\.ey[\\\\-0-9A-Z_a-z]+\\\\.[\\\\-0-9A-Z_a-z]+$" agains ...
show more[Wed Nov 04 09:52:31.099822 2026] [security2:error] [pid 315341:tid 139767523403456] [client 36.91.99.2:0] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^ey[\\\\-0-9A-Z_a-z]+\\\\.ey[\\\\-0-9A-Z_a-z]+\\\\.[\\\\-0-9A-Z_a-z]+$" against "REQUEST_COOKIES:cf_clearance" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "3467"] [id "942451"] [msg "SQL Comment Sequence Detected"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: --T5qicWb7gWPI_- found within REQUEST_COOKIES:cf_clearance: Cq6yc--T5qicWb7gWPI_-gts6lMkfZTss_HRRW9rZv0f_9edZRAU6PY0AW9CmXV3NpohvxWywNDlgVhGSx_LjtPzlPHcedLN0HaJMsSyJVmaJHVzDnJZ6k0ReqRW2fYb4XooipIqTPFY0CfHXOYmZf16QGSvRjUWLZF-x5o51K873Pwo199kWxT3Skf8czhuAzNqwzawkYdNjl4hJ_0a1XZerxWOXfhCc5Rdj6rMuMfrt4QSGMhup8lvNqUiQ9-6uqVAYInf0iGqUdmJiD6loDNzFvDsHcJd_L9rikkwdSj0I99EjCZas56a5qBhlqmzCdDE3a7Bqi_CZ4UXYwb8b9B..."] [severity "CRITICAL"] [ver
...
show less
[Tue Oct 13 08:36:21.050707 2026] [security2:error] [pid 598193:tid 140619695511232] [client 36.91.99.2:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.js /g ...
show more[Tue Oct 13 08:36:21.050707 2026] [security2:error] [pid 598193:tid 140619695511232] [client 36.91.99.2:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.js /ga-choise-v6.js /bmkg-192.png /800-600.webp /bmkg-192x192.png /ga-v5.js /favicon-16-16.png /matomo-partition-21-01-2026-5-5-0.js /script-v185.js /script-v188.js /script-v184.j ..." against "REQUEST_LINE" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "475"] [id "440008"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: If-Modified-Since found within REQUEST_LINE: GET /Whatsapp_Kantor_BMKG_Malang_Stasiun_Klimatologi_Jawa_Timur_40X40.webp HTTP/1.1 request_line = GET /Whatsapp_Kantor_BMKG_Malang_Stasiun_Klimatologi_Jawa_Timur_40X40.webp HTTP/1.1 Request URI RAW = /Whatsapp_Kantor_BMKG_Malang_Stasiun_K
...
show less
