🇮🇩
hermawan
2026-10-20 03:47:00
(9 hours ago)
[Tue Oct 20 10:46:59.611413 2026] [security2:error] [pid 105087:tid 139775591827136] [client 119.73. ...
show more
[Tue Oct 20 10:46:59.611413 2026] [security2:error] [pid 105087:tid 139775591827136] [client 119.73.19.0:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Presto" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Presto found within REQUEST_HEADERS:user-agent: Opera/8.72.(X11; Linux i686; fa-IR) Presto/2.9.177 Version/12.00 request_line = GET /images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Curah_Hujan_Bulanan/Prakiraan_Curah_Hujan_Bulanan_Provinsi_Jawa_Timur/2019/07/02-Prakiraan_Curah_Hujan_Bulan_OKTOBER_Tahun_2019_di_Provinsi_Jawa_Timur-Update_dari_Analisis_Bulan_Juli_2019.jpg HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Curah_Hujan_Bulanan/Prakiraan_Curah_Hujan_Bulanan_Provinsi_Jawa_Timur/2019/07/02-Prakira
...
show less
Email Spam
Hacking
🇳🇱
i-turnradio.nl
2026-10-17 20:25:08
(2 days ago)
2026-10-17 22:25:00 +02:00 - Unsolicited TCP connection to a honeypot port; probing port 23.
Port Scan
2026-10-04 10:11:43
(2 weeks ago)
denied traffic to a non-approved destination port. destination port 49152.
Port Scan
🇺🇸
TPI-Abuse
2026-10-01 09:03:48
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 119.73.19.0 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 119.73.19.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 05:03:41.076400 2026] [security2:error] [pid 20964:tid 20964] [client 119.73.19.0:44482] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||joebankx.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "joebankx.com"] [uri "/"] [unique_id "ar4h7ZKgMufDFJPjjW1ivwAAAAo"], referer: https://backlinksonline.website/dir/powerful-link-building-107800
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
dpinse
2026-08-23 08:12:09
(1 month ago)
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 23/TELNET
• Credentials: ftp:ftp, roo ...
show more
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 23/TELNET
• Credentials: ftp:ftp, root:070admin, gdcuadmin:gdcuadmin, user:1234, root:1234horses, guest:123456, admin:a1sev5y7c39k, root:adminpass, root:1234, CUAdmin:CUAdmin, root:, 666666:666666, Administrator:admin, root:xmhdipc, admin:conexant, localadmin:localadmin
• Number of login attempts: 16
• 18 command(s) were executed during the session
show less
Brute-Force
Hacking
2026-08-07 02:15:23
(2 months ago)
denied traffic to a honeypot network. destination port 8080.
Port Scan
Hacking
2026-07-25 23:39:04
(2 months ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
🇦🇺
FEWA
2026-07-17 04:09:46
(3 months ago)
Fail2Ban Ban Triggered
Hacking
Brute-Force
2026-07-17 00:39:32
(3 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
2026-06-30 00:19:13
(3 months ago)
Unauthorized connection attempt on Port 2323
Port Scan
Hacking
Exploited Host
2026-06-29 13:32:52
(3 months ago)
Port scan on ports 23/TCP, 80/TCP to unused IP
Port Scan
🇩🇪
pltcldvlpr
2026-06-06 02:13:02
(4 months ago)
Bogus Useragent: 119.73.19.0 - - [06/Jun/2026:04:13:01 +0200] "GET /protocol?id=st_6_69&offset=1200& ...
show more
Bogus Useragent: 119.73.19.0 - - [06/Jun/2026:04:13:01 +0200] "GET /protocol?id=st_6_69&offset=1200&seq=1209 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 7.0; Windows CE; Trident/3.0)" asn=58470 org="Mobilink GSM, Pakistan Mobile Communication Ltd." country=PK
...
show less
Bad Web Bot
2026-06-03 23:35:12
(4 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
