Total reports
3 from
3 distinct
reporters
First reported
October 16th 2024
Most recent report
25 minutes ago
Last 60 days
Top reporter locations
🇮🇩
Indonesia
1
Most common categories
Hacking
1
Email Spam
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-11-15 04:07:31
UTC ·
(25 minutes ago)
[Sun Nov 15 11:07:30.838930 2026] [security2:error] [pid 687983:tid 140517455140544] [client 64.57.138.79:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/cor ...
show more
[Sun Nov 15 11:07:30.838930 2026] [security2:error] [pid 687983:tid 140517455140544] [client 64.57.138.79:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "608"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:referer: https://www.yandex.go.id/ request_line = GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa"] [unique_id "avkwArlMTp9AFsTfAx8StwAAAUg"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[688049] [IUTXzIh80eo] [avkwArlMTp9AFsTfAx8StwAAAUg] keep_alive=[0] [2026-11-15 11:07:30.838935] [R:avkwArlMTp9AFsTfAx8StwAAAUg] UA:'Mozilla/5.0 (X11; Linux x86
...
show less
Email Spam
Hacking
🇨🇭
backslash
2025-07-19 19:35:06
UTC ·
(1 year ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
TPI-Abuse
2024-10-16 14:19:09
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 64.57.138.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 16 10:19:04.851294 2024] [security2:error] [pid 16161:tid 16161] [client 64.57.138.79:7380] [cli ...
show more
(mod_security) mod_security (id:225170) triggered by 64.57.138.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 16 10:19:04.851294 2024] [security2:error] [pid 16161:tid 16161] [client 64.57.138.79:7380] [client 64.57.138.79] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arsenalfordemocracy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/users/11"] [unique_id "Zw_LWCaLWj_2BsTON9y-sQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
