🇮🇩
hermawan
2026-11-06 09:23:58
UTC ·
(8 hours ago)
[Fri Nov 06 16:23:57.561375 2026] [security2:error] [pid 135271:tid 139782613079744] [client 2a03:2880:f800:14:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/co ...
show more
[Fri Nov 06 16:23:57.561375 2026] [security2:error] [pid 135271:tid 139782613079744] [client 2a03:2880:f800:14:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/profil/meteorologi/list-all-categories/4213-klimatologi/infografis/infografis-klimatologi/infografis-dasarian/infografis-dasarian-tahun-2024/555561565-infografis-dasarian-informasi-iklim-jatim-upda..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-
...
show less
Email Spam
Hacking
🇺🇸
TPI-Abuse
2026-11-06 05:37:51
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 00:37:44.919790 2026] [security2:error] [pid 20696:tid 20696] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 00:37:44.919790 2026] [security2:error] [pid 20696:tid 20696] [client 2a03:2880:f800:14:::57118] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||walkerweb.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "walkerweb.com"] [uri "/walkerweb.com"] [unique_id "au1nqIUCYgW8PffkJFVb2gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-06 05:11:12
UTC ·
(12 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: pma.dont-eat-the-pudding.online | Path: /xmlrpc.php?rsd | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win6 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: pma.dont-eat-the-pudding.online | Path: /xmlrpc.php?rsd | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.co... | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2026-11-06 02:35:07
UTC ·
(15 hours ago)
[Fri Nov 06 09:35:06.400157 2026] [security2:error] [pid 105191:tid 140166232630976] [client 2a03:2880:f800:14:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/co ...
show more
[Fri Nov 06 09:35:06.400157 2026] [security2:error] [pid 105191:tid 140166232630976] [client 2a03:2880:f800:14:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/tentang-gempa-bumi/570-meteorologi/prakiraan-meteorologi/prakiraan-cuaca-kepanjen HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/tentang-gempa-bumi/570-meteorologi/prakiraan-meteorologi/prakiraan-cuaca-kepanjen"] [unique_id "au082hlH4gUE5mGbf619QgAAAgI"] [staklim
...
show less
Email Spam
Hacking
🇮🇹
mgarofano80
2026-11-05 18:55:11
UTC ·
(23 hours ago)
Brute-Force
Web App Attack
🇫🇷
Entalpi.net
2026-11-05 10:59:53
UTC ·
(1 day ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
🇮🇩
hermawan
2026-11-04 02:39:34
UTC ·
(2 days ago)
[Wed Nov 04 09:39:33.939039 2026] [security2:error] [pid 309352:tid 139767010285248] [client 2a03:2880:f800:14:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/co ...
show more
[Wed Nov 04 09:39:33.939039 2026] [security2:error] [pid 309352:tid 139767010285248] [client 2a03:2880:f800:14:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /b/bulananpacitan.pdf HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/b/bulananpacitan.pdf"] [unique_id "auqa5dkB1P6L9rSMUVnf2QAAAEk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[309363] [rAgPSmrDcjY] [auqa5dkB1P6L9rSMUVnf2QAAAEk] keep_alive=[0] [2026-11-04 09:39:33.939049] [
...
show less
Email Spam
Hacking
🇮🇹
mgarofano80
2026-11-04 02:30:09
UTC ·
(2 days ago)
Brute-Force
Web App Attack
🇫🇷
Entalpi.net
2026-11-03 17:05:45
UTC ·
(3 days ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
🇮🇩
hermawan
2026-11-01 11:41:12
UTC ·
(5 days ago)
[Sun Nov 01 18:41:11.807222 2026] [security2:error] [pid 37772:tid 140592910681792] [client 2a03:2880:f800:14:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/cor ...
show more
[Sun Nov 01 18:41:11.807222 2026] [security2:error] [pid 37772:tid 140592910681792] [client 2a03:2880:f800:14:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-harian/monitoring-kualitas-udara HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-harian/monitoring-kualitas-udara"] [unique_id "auclVw63xvKTa4xFwIgUNAAAABg"] [staklim-jatim.bmkg.go.id
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-31 19:03:43
UTC ·
(5 days ago)
[Sun Nov 01 02:03:43.490727 2026] [security2:error] [pid 49683:tid 140141142202048] [client 2a03:2880:f800:14:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/cor ...
show more
[Sun Nov 01 02:03:43.490727 2026] [security2:error] [pid 49683:tid 140141142202048] [client 2a03:2880:f800:14:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/analisis-bulanan/4299-analisis-distribusi-hujan/analisis-distribusi-curah-hujan/analisis-distribusi-curah-hujan-jawa-timur-bulanan/analisis-bulanan-distribusi-curah-hujan-di-provinsi-jawa-timur-tahun-202..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/4299-ana
...
show less
Email Spam
Hacking
2026-10-27 17:35:39
UTC ·
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇫🇷
abuseipdb.amaze321
2026-10-25 03:37:57
UTC ·
(1 week ago)
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack
Bad Web Bot
🇮🇹
mgarofano80
2026-10-23 12:18:16
UTC ·
(2 weeks ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 03:42:52
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 23:42:45.018066 2026] [security2:error] [pid 25760:tid 25760] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 23:42:45.018066 2026] [security2:error] [pid 25760:tid 25760] [client 2a03:2880:f800:14:::24562] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||rockwaychiropractic.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rockwaychiropractic.com"] [uri "/rockwaychiropractic.com"] [unique_id "atrXtdN0li8ek_TzNO6ULAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
