🇮🇩
hermawan
2026-11-01 09:19:56
UTC ·
(1 week ago)
[Sun Nov 01 16:19:55.805400 2026] [security2:error] [pid 675386:tid 140141083485888] [client 2a03:2880:f800:3a:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/co ...
show more
[Sun Nov 01 16:19:55.805400 2026] [security2:error] [pid 675386:tid 140141083485888] [client 2a03:2880:f800:3a:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555560555-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-desember-dasarian-i-tahun-2023-tanggal-1-..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraa
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-10-31 14:22:57
UTC ·
(1 week ago)
[Sat Oct 31 21:22:57.509112 2026] [security2:error] [pid 162655:tid 140162742863552] [client 2a03:2880:f800:3a:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/co ...
show more
[Sat Oct 31 21:22:57.509112 2026] [security2:error] [pid 162655:tid 140162742863552] [client 2a03:2880:f800:3a:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /b/bulananbojonegoro.pdf HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/b/bulananbojonegoro.pdf"] [unique_id "auX5wYvgnNadhip9bbRSNAAAAMU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[162703] [3es4piPT10E] [auX5wYvgnNadhip9bbRSNAAAAMU] keep_alive=[0] [2026-10-31 21:22:57.509
...
show less
Email Spam
Hacking
🇺🇸
TPI-Abuse
2026-10-31 14:21:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 10:21:11.143204 2026] [security2:error] [pid 31766:tid 31766] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 10:21:11.143204 2026] [security2:error] [pid 31766:tid 31766] [client 2a03:2880:f800:3a:::57292] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nesetsv.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nesetsv.com"] [uri "/nesetsv.com"] [unique_id "auX5VwSHA-NLF3Tbbs-uEgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
abuseipdb.amaze321
2026-10-28 00:37:00
UTC ·
(2 weeks ago)
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-27 18:15:19
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 14:15:14.380081 2026] [security2:error] [pid 10754:tid 10779] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 14:15:14.380081 2026] [security2:error] [pid 10754:tid 10779] [client 2a03:2880:f800:3a:::52002] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||giorgiogranozio.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "giorgiogranozio.com"] [uri "/giorgiogranozio.com"] [unique_id "auDqMo39arfnl1LItyZJhQAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-27 17:36:10
UTC ·
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇫🇮
000rosiu
2026-10-27 08:13:08
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /tag-produktu/rescuedrive/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (c ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /tag-produktu/rescuedrive/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-24 12:05:40
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 08:05:35.142815 2026] [security2:error] [pid 18813:tid 18813] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 08:05:35.142815 2026] [security2:error] [pid 18813:tid 18813] [client 2a03:2880:f800:3a:::56410] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||chefmarcelcooks.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "chefmarcelcooks.com"] [uri "/chefmarcelcooks.com"] [unique_id "atyfD07rS7Wuzq0otTJv4wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
claude CALVET
2026-10-23 01:49:49
UTC ·
(2 weeks ago)
gee-88 : Bloc AI bots=>/index.php?view=article&id=17%3Adocumentations-diverses&catid=8&modjemcal_id=113&modjemcal_month=7&modjemcal_year=2022(meta-webindexer)
Hacking
🇮🇩
hermawan
2026-10-21 01:56:41
UTC ·
(3 weeks ago)
[Wed Oct 21 08:56:40.673450 2026] [security2:error] [pid 36415:tid 140201856739008] [client 2a03:2880:f800:3a:::0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/e ...
show more
[Wed Oct 21 08:56:40.673450 2026] [security2:error] [pid 36415:tid 140201856739008] [client 2a03:2880:f800:3a:::0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: type= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/meteorologi/list-of-all-tags/2251?format=feed&type=atom HTTP/1.1 Request URI RAW = /index.php/profil/meteorologi/list-of-all-tags/2251?format=feed&type=atom Request Basename = 2251"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/2251"] [unique_id "atgb2Coh-gRnCGAA2UJ23AAAAEM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[36522] [WdvmDtAz3WE] [atgb2Coh
...
show less
Email Spam
Hacking
🇧🇷
alcacerlab
2026-10-19 19:52:25
UTC ·
(3 weeks ago)
2a03:2880:f800:3a:: - - [19/Oct/2026:16:52:24 -0300] "GET / HTTP/2" 200 54079 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2026-10-19 19:14:34
UTC ·
(3 weeks ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /booru/artist/AutoINS | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /booru/artist/AutoINS | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇮
000rosiu
2026-10-19 12:39:46
UTC ·
(3 weeks ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /branding | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-e ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /branding | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇮🇩
hermawan
2026-10-19 05:21:35
UTC ·
(3 weeks ago)
[Mon Oct 19 12:21:35.173108 2026] [security2:error] [pid 955244:tid 139929652704960] [client 2a03:2880:f800:3a:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/co ...
show more
[Mon Oct 19 12:21:35.173108 2026] [security2:error] [pid 955244:tid 139929652704960] [client 2a03:2880:f800:3a:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/analisis-bulanan/4093-analisis-distribusi-hujan/analisis-distribusi-curah-hujan/analisis-distribusi-curah-hujan-jawa-timur-bulanan/analisis-bulanan-distribusi-curah-hujan-tahun-2021-di-provinsi-jawa-timu..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/4093-an
...
show less
Email Spam
Hacking
🇺🇸
TPI-Abuse
2026-10-18 19:45:28
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 15:45:22.791310 2026] [security2:error] [pid 22808:tid 22808] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:3a:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 15:45:22.791310 2026] [security2:error] [pid 22808:tid 22808] [client 2a03:2880:f800:3a:::55484] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gamepart.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "atUh0i5ZyNZ35v4zKciwngAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack