|
🇮🇩
hermawan
|
|
[Tue Sep 16 05:53:24.708074 2025] [security2:error] [pid 847325:tid 140636194752192] [client 43.159. ...
show more
[Tue Sep 16 05:53:24.708074 2025] [security2:error] [pid 847325:tid 140636194752192] [client 43.159.35.71:51478] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "372"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 43.159.35.71 request_line = GET /index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur HTTP/1.1 Request URI RAW = /index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur Request Basename = e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur"] [unique_id "aMiY5BgcEHOJGGblgIbvfAAAAoA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.b
...
show less
|
Hacking
Web App Attack
|
|
|
🇷🇴
INTEQ
|
|
Web attack from 43.159.35.71
|
Web App Attack
|
|
|
🇦🇺
MAGIC
|
|
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
|
DDoS Attack
Bad Web Bot
|
|
|
🇫🇷
Sklurk
|
|
Web App Attack
|
Web App Attack
|
|
|
🇦🇺
MAGIC
|
|
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
|
DDoS Attack
Bad Web Bot
|
|
|
🇹🇷
rtbh.com.tr
|
|
list.rtbh.com.tr report: tcp/0
|
Brute-Force
|
|
|
🇫🇷
Sklurk
|
|
Web App Attack
|
Web App Attack
|
|
|
🇹🇷
rtbh.com.tr
|
|
list.rtbh.com.tr report: tcp/0
|
Brute-Force
|
|
|
🇹🇷
rtbh.com.tr
|
|
list.rtbh.com.tr report: tcp/0
|
Brute-Force
|
|
|
Anonymous
|
|
Reported from Nginx log analysis 18. Log: 43.159.35.71 - - [08/Sep/2025:xx:xx:xx 0200] "GET /2024/0 ...
show more
Reported from Nginx log analysis 18. Log: 43.159.35.71 - - [08/Sep/2025:xx:xx:xx 0200] "GET /2024/02/21/eternal-voice-honouring-the-memory-of-ameen-sayani/ HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" "-" "SG Singapore Singapore" "AS132203" "Tencent Building, Kejizhongyi Avenue"
show less
|
Port Scan
Brute-Force
SSH
|
|
|
🇸🇬
mypatricks
|
|
43.159.35.71 | Port: 18510 | DNS: 43.159.35.71 2025-09-08T14:27:43+08:00 Asia/Singapore | Bad Behavi ...
show more
43.159.35.71 | Port: 18510 | DNS: 43.159.35.71 2025-09-08T14:27:43+08:00 Asia/Singapore | Bad Behavior Activity | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /account/create/?d808b1d4d275e00f7ad59fef0d95fbcf=1726403157 | Ref: - | Country: SG/Singapore/+08:00 IP City: Singapore 97bc61b16c60fd0a-SIN/Singapore, Singapore 1 hits/0 secs Robots 2
show less
|
Web Spam
Blog Spam
Brute-Force
Exploited Host
Web App Attack
|
|
|
🇩🇪
ghostwarriors
|
|
Webpage scraping
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
ksol-hostmaster
|
|
2025/09/08 05:29:15 [error] 13615#739597: *196133 access forbidden by rule, client: 43.159.35.71, se ...
show more
2025/09/08 05:29:15 [error] 13615#739597: *196133 access forbidden by rule, client: 43.159.35.71, server: git.ksol.io, request: "GET /explore/repos?q=blacklist&sort=reversealphabetically&language=Python HTTP/1.1", host: "git.ksol.io"
...
show less
|
Web Spam
|
|
|
Anonymous
|
|
Reported from Nginx log analysis 18. Log: 43.159.35.71 - - [07/Sep/2025:xx:xx:xx 0200] "GET /tag/fu ...
show more
Reported from Nginx log analysis 18. Log: 43.159.35.71 - - [07/Sep/2025:xx:xx:xx 0200] "GET /tag/fund-diversion/ HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" "-" "SG Singapore Singapore" "AS132203" "Tencent Building, Kejizhongyi Avenue"
show less
|
Port Scan
Brute-Force
SSH
|
|
|
🇷🇴
INTEQ
|
|
Web attack from 43.159.35.71
|
Web App Attack
|
|