UDP flood (DDoS) vs AS215599: 6 pkts / 0.01 MB to UDP 80/8443 across 4 dst IP(s), 2026-08-19 21:46 t ...
show moreUDP flood (DDoS) vs AS215599: 6 pkts / 0.01 MB to UDP 80/8443 across 4 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
UDP flood (DDoS) vs AS215599: 6 pkts / 0.01 MB to UDP 80/8443 across 4 dst IP(s), 2026-08-19 21:46 t ...
show moreUDP flood (DDoS) vs AS215599: 6 pkts / 0.01 MB to UDP 80/8443 across 4 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
[Sat May 16 12:57:32.249421 2026] [security2:error] [pid 372232:tid 139657922332352] [client 45.189. ...
show more[Sat May 16 12:57:32.249421 2026] [security2:error] [pid 372232:tid 139657922332352] [client 45.189.174.165:39942] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "857"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/profil/meteorologi/list-all-categories/113-meteorologi/prakiraan-meteorologi/555561507-prakiraan-harian-cuaca-wisata-di-jawa-timur-untuk-hari-ini-pada-pagi-siang-malam-dan-dini-hari-meliputi-gunung-semeru-lumajang-gunung-bromo-dan-gunung-ijen-banyuwangi HTTP/2.0 Request URI RAW = /index.php/profil/meteorologi/list-all-categories/113-me..."] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"]
...
show less