|
🇩🇪
pltcldvlpr
|
|
Bogus Useragent: 45.236.250.159 - - [11/Jun/2026:02:19:08 +0200] "GET /protocol?id=th_5_120&offset=1 ...
show more
Bogus Useragent: 45.236.250.159 - - [11/Jun/2026:02:19:08 +0200] "GET /protocol?id=th_5_120&offset=1450&seq=1458 HTTP/1.1" 444 0 "-" "Opera/9.65.(X11; Linux x86_64; yue-HK) Presto/2.9.174 Version/11.00" asn=268253 org="Nossanet Fibra Eireli" country=BR
...
show less
|
Bad Web Bot
|
|
|
🇮🇩
hermawan
|
|
[Sun Jun 07 00:16:59.120834 2026] [security2:error] [pid 158625:tid 140594128041664] [client 45.236. ...
show more
[Sun Jun 07 00:16:59.120834 2026] [security2:error] [pid 158625:tid 140594128041664] [client 45.236.250.159:42298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya"] [unique_id "aiRWCyRZZz3MI_8zGa6h4gAAzAw"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[158638] [RDTU8Ri257U] [aiRWCyRZZz3MI_8zGa6h4gAAzAw] keep_alive=[1]
...
show less
|
Email Spam
Hacking
|
|
|
🇮🇩
hermawan
|
|
[Thu Jun 04 22:15:54.139439 2026] [security2:error] [pid 308599:tid 139764799895232] [client 45.236. ...
show more
[Thu Jun 04 22:15:54.139439 2026] [security2:error] [pid 308599:tid 139764799895232] [client 45.236.250.159:43758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba"] [unique_id "aiGWquKZNx4SIoYcTAKXxgAARgA"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[308600] [i2EnBW9XFZU] [aiGWquKZNx4SIoYcTAKXxgAA
...
show less
|
Email Spam
Hacking
|
|
|
🇩🇪
EGP Abuse Dept
|
|
Scraping webshop URLs (www.creall.com), likely botnet drone
|
Bad Web Bot
Exploited Host
|
|
|
🇮🇩
hermawan
|
|
04/29/2026-11:31:02.357384 [Drop] [**] [1:2100001417:0] Suricata match TLS JA4 scan Uniq Zeek no 14 ...
show more
04/29/2026-11:31:02.357384 [Drop] [**] [1:2100001417:0] Suricata match TLS JA4 scan Uniq Zeek no 1417 with hash_t13d1516h3_8daaf6152771_d8a2da3f94cd [**] [Classification: (null)] [Priority: 3] {TCP} 45.236.250.159:33832 -> 103.166.156.58:443
...
show less
|
Email Spam
Hacking
|
|
|
🇺🇸
kosada.com
|
|
Web bot: DDoS
|
DDoS Attack
Bad Web Bot
|
|
|
Anonymous
|
|
2026-03-26 02:18:42 ERROR util.AccessViolations - 45.236.250.159 report to fail2ban - action: block
...
show more
2026-03-26 02:18:42 ERROR util.AccessViolations - 45.236.250.159 report to fail2ban - action: block
...
show less
|
Hacking
Brute-Force
Bad Web Bot
|
|
|
🇩🇪
EGP Abuse Dept
|
|
Scraping webshop URLs (www.badgehouder.nl), likely botnet drone
|
Bad Web Bot
Exploited Host
|
|
|
🇮🇹
VHosting
|
|
Detected mail brute force attack from 4 different servers
|
Brute-Force
|
|
|
🇳🇱
exxos
|
|
HTTP1.x attacks
|
DDoS Attack
|
|
|
🇳🇱
exxos
|
|
HTTP1.x attacks
|
DDoS Attack
|
|
|
🇪🇸
Global Cyber Police
|
|
Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.
|
DDoS Attack
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇪🇸
Global Cyber Police
|
|
Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.
|
DDoS Attack
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇳🇱
exxos
|
|
HTTP1.x attacks
|
DDoS Attack
|
|
|
🇳🇱
exxos
|
|
HTTP1.x attacks
|
DDoS Attack
|
|