2026-09-19 19:32:48
(2 hours ago)
Automated report (2026-09-19T15:32:48-04:00). Scraper detected.
Bad Web Bot
🇮🇩
hermawan
2026-09-19 18:21:51
(3 hours ago)
[Sun Sep 20 01:21:40.713861 2026] [security2:error] [pid 63306:tid 140496752072384] [client 16.216.8 ...
show more
[Sun Sep 20 01:21:40.713861 2026] [security2:error] [pid 63306:tid 140496752072384] [client 16.216.88.123:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36 request_line = GET /index.php/prakiraan-bulanan/3938-prakiraan-sifat-hujan-bulanan/prakiraan-sifat-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-sifat-hujan-bulanan-di-propinsi-jawa-timur-tahun-2019 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/3938-prakiraan-sifat-hujan-bulanan/prakiraan-sifat-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-sifat-hujan-bulanan-di-
...
show less
Email Spam
Hacking
🇺🇸
TPI-Abuse
2026-09-19 13:33:07
(8 hours ago)
(mod_security) mod_security (id:210730) triggered by 16.216.88.123 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 16.216.88.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 09:33:00.699646 2026] [security2:error] [pid 26209:tid 26209] [client 16.216.88.123:14336] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hayrun.com|F|2"] [data ".hayrun.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hayrun.com"] [uri "/blog/img_0654/www.hayrun.com"] [unique_id "aq6PDEjrX4WyRojvneqXWgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
FireGuard Server
2026-09-19 11:35:08
(10 hours ago)
Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=443
Port Scan
Hacking
2026-09-19 09:18:54
(12 hours ago)
FortiWeb WAF: 180 attacks detected. Threat Score: 19600. Types: Client Management(90), Block IP List ...
show more
FortiWeb WAF: 180 attacks detected. Threat Score: 19600. Types: Client Management(90), Block IP List(90). Origin: United States.
show less
Web App Attack
2026-09-19 00:00:17
(21 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇷🇺
genokrad
2026-09-18 17:00:34
(1 day ago)
Website scan TCP 80/443 "/robots.txt" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible ...
show more
Website scan TCP 80/443 "/robots.txt" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; R"
show less
Port Scan
Web App Attack
🇷🇺
Mga Admin
2026-09-18 16:42:40
(1 day ago)
16.216.88.123 - - [18/Sep/2026:23:42:39 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs2733307 ...
show more
16.216.88.123 - - [18/Sep/2026:23:42:39 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs2733307 HTTP/1.1" 400 34 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36"
...
show less
Web App Attack
2026-09-18 05:07:57
(1 day ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Auto ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Automated scanning
show less
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-09-18 04:06:36
(1 day ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
conseilgouz
2026-09-17 16:31:51
(2 days ago)
jow-Joomla User : try to access forms...
Hacking
2026-09-17 16:05:21
(2 days ago)
Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=3
Hacking
🇺🇸
etu brutus
2026-09-17 12:46:49
(2 days ago)
16.216.88.123 Blocked by [Attack Vector List]
...
Hacking
Brute-Force
Exploited Host
🇺🇸
TPI-Abuse
2026-09-17 11:08:14
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 16.216.88.123 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 16.216.88.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 07:08:08.479918 2026] [security2:error] [pid 26811:tid 26811] [client 16.216.88.123:22528] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||home.agingworkforcenews.com|F|2"] [data ".thenation.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "home.agingworkforcenews.com"] [uri "/2005/http.thenation.com"] [unique_id "aqvKGA_utnY5S5UPMvqNwQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
moretrix
2026-09-17 06:10:27
(2 days ago)
2026-09-17T08:10:26.025070+02:00 ieyasu.moretrix.com named[1321]: client @0x7f8b52658800 16.216.88.1 ...
show more
2026-09-17T08:10:26.025070+02:00 ieyasu.moretrix.com named[1321]: client @0x7f8b52658800 16.216.88.123#16384 (worldshake.org): view external: query (cache) 'worldshake.org/AAAA/IN' denied (allow-query-cache did not match)
2026-09-17T08:10:26.141403+02:00 ieyasu.moretrix.com named[1321]: client @0x7f8b54265800 16.216.88.123#16385 (worldshake.org): view external: query (cache) 'worldshake.org/AAAA/IN' denied (allow-query-cache did not match)
2026-09-17T08:10:26.395675+02:00 ieyasu.moretrix.com named[1321]: client @0x7f8b47095400 16.216.88.123#16386 (worldshake.org): view external: query (cache) 'worldshake.org/AAAA/IN' denied (allow-query-cache did not match)
...
show less
Brute-Force