🇮🇩
hermawan
2026-07-01 13:27:46
(10 hours ago)
[Wed Jul 01 20:27:41.260162 2026] [security2:error] [pid 387217:tid 139637333833408] [client 68.67.1 ...
show more
[Wed Jul 01 20:27:41.260162 2026] [security2:error] [pid 387217:tid 139637333833408] [client 68.67.112.176:20379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; YouBot/1.0; +https://docs.you.com/youbot; env:prod) Chrome/142.0.0.0 Safari/537.36 request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "akUVzal4FRI8VFHF4Mxg3gAAAkE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[387245] [sSnnp4wWUAw] [akUVzal4FRI8VFHF4Mxg3gAAAkE] keep_alive=[0] [2026-07-01 20:27:41.260168] [R:akUVzal4FRI8VFHF4Mxg3gAAAkE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible;
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-30 05:32:22
(1 day ago)
[Tue Jun 30 12:32:18.662903 2026] [security2:error] [pid 488613:tid 140589744928448] [client 68.67.1 ...
show more
[Tue Jun 30 12:32:18.662903 2026] [security2:error] [pid 488613:tid 140589744928448] [client 68.67.112.176:6228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; YouBot/1.0; +https://docs.you.com/youbot; env:prod) Chrome/142.0.0.0 Safari/537.36 request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "akNU4muej1S6O3VN2dKqtQAAAIE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[488641] [PJT75XGircI] [akNU4muej1S6O3VN2dKqtQAAAIE] keep_alive=[0] [2026-06-30 12:32:18.662911] [R:akNU4muej1S6O3VN2dKqtQAAAIE] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible;
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-29 11:41:13
(2 days ago)
[Mon Jun 29 18:41:07.956597 2026] [security2:error] [pid 1353841:tid 139911101408960] [client 68.67. ...
show more
[Mon Jun 29 18:41:07.956597 2026] [security2:error] [pid 1353841:tid 139911101408960] [client 68.67.112.176:51218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; YouBot/1.0; +https://docs.you.com/youbot; env:prod) Chrome/142.0.0.0 Safari/537.36 request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "akJZ055h3tNd_0L_2Az_jQAAAMo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1353878] [A5gm7yLwovU] [akJZ055h3tNd_0L_2Az_jQAAAMo] keep_alive=[0] [2026-06-29 18:41:07.956601] [R:akJZ055h3tNd_0L_2Az_jQAAAMo] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatibl
...
show less
Email Spam
Hacking
🇺🇸
kosada.com
2026-06-27 13:34:08
(4 days ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇮🇩
hermawan
2026-06-26 20:16:16
(5 days ago)
[Sat Jun 27 03:16:16.059803 2026] [security2:error] [pid 496694:tid 139694104880832] [client 68.67.1 ...
show more
[Sat Jun 27 03:16:16.059803 2026] [security2:error] [pid 496694:tid 139694104880832] [client 68.67.112.176:10770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; YouBot/1.0; +https://docs.you.com/youbot; env:prod) Chrome/142.0.0.0 Safari/537.36 request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "aj7eECVKp9b4wM2Jg99HQAAAAJU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[496742] [2U/kxy2UUnw] [aj7eECVKp9b4wM2Jg99HQAAAAJU] keep_alive=[0] [2026-06-27 03:16:16.059809] [R:aj7eECVKp9b4wM2Jg99HQAAAAJU] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible;
...
show less
Email Spam
Hacking
🇩🇪
BlueWire Hosting
2026-06-26 18:44:04
(5 days ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇩🇪
BlueWire Hosting
2026-06-23 22:28:50
(1 week ago)
Bad bot ignoring robot.txt
Bad Web Bot
2026-04-29 12:21:41
(2 months ago)
XSS Attempt
Hacking
🇮🇩
hermawan
2026-04-28 05:09:08
(2 months ago)
04/28/2026-11:57:53.103435 [Drop] [**] [1:2100001461:0] Suricata match TLS JA4 scan Uniq Zeek no 14 ...
show more
04/28/2026-11:57:53.103435 [Drop] [**] [1:2100001461:0] Suricata match TLS JA4 scan Uniq Zeek no 1461 with hash_t13d1713h1_ab0a1bf427ad_ecd0401ec68b [**] [Classification: (null)] [Priority: 3] {TCP} 68.67.112.176:26565 -> 103.166.156.58:443
...
show less
Email Spam
Hacking
🇳🇱
BlueWire Hosting
2026-04-27 23:25:34
(2 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇮🇩
hermawan
2026-04-22 04:27:44
(2 months ago)
04/22/2026-11:27:40.823892 [Drop] [**] [1:2100000861:0] Suricata match TLS JA4 scan Uniq Zeek no 86 ...
show more
04/22/2026-11:27:40.823892 [Drop] [**] [1:2100000861:0] Suricata match TLS JA4 scan Uniq Zeek no 861 with hash_t13d1713h1_ab0a1bf427ad_ecd0401ec68b [**] [Classification: (null)] [Priority: 3] {TCP} 68.67.112.176:24208 -> 103.166.156.58:443
...
show less
Email Spam
Hacking
🇺🇸
ipblock.com
2026-04-20 19:35:00
(2 months ago)
IPBlock protected site ID [3192-af][s=02].
Exploit request, vulnerability probe.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-04-15 15:46:00
(2 months ago)
IPBlock protected site ID [3192-af][s=02].
Exploit request, vulnerability probe.
Hacking
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-04-13 11:26:18
(2 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
mnsf
2026-04-11 23:05:08
(2 months ago)
Request Overload (105)
Brute-Force
Web App Attack