🇲🇾
Rizzy
2026-06-29 16:54:24
(4 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇿
Antinson
2026-06-25 00:22:01
(1 week ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇲🇾
Rizzy
2026-06-22 00:28:58
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇮🇩
hermawan
2026-06-01 08:10:51
(1 month ago)
[Mon Jun 01 15:06:57.417518 2026] [security2:error] [pid 1737617:tid 140109786576576] [client 47.128 ...
show more
[Mon Jun 01 15:06:57.417518 2026] [security2:error] [pid 1737617:tid 140109786576576] [client 47.128.120.178:22302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "ah09oR1rLO8Hb5w3UcbE5QAAkxI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1737636] [bpGnrSwmPOk] [ah09oR1rLO8Hb5w3UcbE5QAAkxI] keep_alive=[1] [2026-06-01 15:06:57.417522] [R:ah09oR1rLO8Hb5w3UcbE5QAAkxI] UA:'Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KH
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-01 06:48:59
(1 month ago)
[Mon Jun 01 13:47:38.364877 2026] [security2:error] [pid 1692871:tid 140649950004928] [client 47.128 ...
show more
[Mon Jun 01 13:47:38.364877 2026] [security2:error] [pid 1692871:tid 140649950004928] [client 47.128.120.178:48810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Feed" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Feed found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] ) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [unique_id "ah0rCvJf6vwCNxEkGhRQuQAAGBY"] [staklim-jatim.bmkg.go.id]
...
show less
Email Spam
Hacking
🇺🇸
nodepile
2026-05-25 22:45:05
(1 month ago)
Requests denied due to active blacklist hits (tenant=82 method=GET path=/banner0zo.gif ua='Mozilla/5 ...
show more
Requests denied due to active blacklist hits (tenant=82 method=GET path=/banner0zo.gif ua='Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )')
show less
Web App Attack
Exploited Host
🇦🇺
MAGIC
2026-05-16 00:00:51
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇲🇾
Rizzy
2026-05-08 16:57:55
(1 month ago)
Multiple WAF Violations
Brute-Force
Web App Attack
2026-04-25 09:57:14
(2 months ago)
Reported from Nginx log analysis 18. Log: 47.128.120.178 - - [25/Apr/2026:xx:xx:xx 0200] "GET /tag/ ...
show more
Reported from Nginx log analysis 18. Log: 47.128.120.178 - - [25/Apr/2026:xx:xx:xx 0200] "GET /tag/dalit/ HTTP/2.0" xxx xxx "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" "-" "SG Singapore Singapore" "AS16509" "Amazon.com, Inc."
show less
Port Scan
Brute-Force
SSH
🇬🇧
thetomtaylor.co.uk
2026-04-19 22:07:01
(2 months ago)
Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [wa01,wa02]
Hacking
Bad Web Bot
🇩🇪
conseilgouz
2026-04-17 14:49:15
(2 months ago)
vee-88 : Bloc AI bots=>/index.php(TikTokSpider)
Hacking
2026-04-16 21:57:59
(2 months ago)
Reported from Nginx log analysis 18. Log: 47.128.120.178 - - [16/Apr/2026:xx:xx:xx 0200] "GET /busi ...
show more
Reported from Nginx log analysis 18. Log: 47.128.120.178 - - [16/Apr/2026:xx:xx:xx 0200] "GET /business/ HTTP/2.0" xxx xxx "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" "-" "SG Singapore Singapore" "AS16509" "Amazon.com, Inc."
show less
Port Scan
Brute-Force
SSH
🇦🇺
MAGIC
2026-04-11 01:04:28
(2 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇪🇸
librebit
2026-04-09 10:28:29
(2 months ago)
Brute force
Brute-Force
2026-04-09 09:57:45
(2 months ago)
Reported from Nginx log analysis 18. Log: 47.128.120.178 - - [09/Apr/2026:xx:xx:xx 0200] "GET /2022 ...
show more
Reported from Nginx log analysis 18. Log: 47.128.120.178 - - [09/Apr/2026:xx:xx:xx 0200] "GET /2022/10/10/anna-sorokin-of-netflixs-inventing-anna-fame-released-from-jail/ HTTP/2.0" xxx xxx "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" "-" "SG Singapore Singapore" "AS16509" "Amazon.com, Inc." | 47.128.120.178 - - [09/Apr/2026:xx:xx:xx 0200] "GET /2022/10/10/scientists-confirm-the-formation-of-a-supercontinent-named-amasia-when-the-pacific-ocean-is-disappearing/ HTTP/2.0" xxx xxx "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; TikTokSpider; [email protected] )" "-" "SG Singapore Singapore" "AS16509" "Amazon.com, Inc."
show less
Port Scan
Brute-Force
SSH