๐ซ๐ท
abuseipdb.amaze321
2026-10-15 06:36:40
(5 days ago)
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack
Bad Web Bot
๐ต๐ฑ
mscode.pl
2026-10-11 12:58:06
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 32934 (Facebook, Inc.)
P ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 32934 (Facebook, Inc.)
Protocol: HTTP/2 (GET method)
Zone: r2.selify.io
Endpoint: /
UA: facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)
show less
Bad Web Bot
Anonymous
2026-10-11 09:03:19
(1 week ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
๐ฎ๐ฉ
hermawan
2026-10-11 03:48:48
(1 week ago)
[Sun Oct 11 10:48:48.469278 2026] [security2:error] [pid 545241:tid 140630156101312] [client 2a03:28 ...
show more
[Sun Oct 11 10:48:48.469278 2026] [security2:error] [pid 545241:tid 140630156101312] [client 2a03:2880:f806:14:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-harian/suhu-minimum/555562161-suhu-minimum-harian-di-jawa-timur-tanggal-4-agustus-2025-pukul-07-00-wib-5-agustus-2025-pukul-07-00-wib HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-
...
show less
Email Spam
Hacking
๐ฟ๐ฆ
vanderhost
2026-10-10 23:39:31
(1 week ago)
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/uploads/2019 ...
show more
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/uploads/2019/08/bas-full-logo.png via rule: /wp-content
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
000rosiu
2026-10-10 13:21:55
(1 week ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoin ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /brand/iml-systems | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ต๐ฑ
mscode.pl
2026-10-10 11:57:22
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 32934 (Facebook, Inc.)
P ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 32934 (Facebook, Inc.)
Protocol: HTTP/2 (GET method)
Zone: r2.selify.io
Endpoint: /
UA: facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)
show less
Bad Web Bot
๐ฉ๐ช
conseilgouz
2026-10-09 09:22:22
(1 week ago)
coe-88 : Bloc AI bots=>/(meta-webindexer)
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-08 15:04:11
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 11:04:06.545493 2026] [security2:error] [pid 11525:tid 11525] [client 2a03:2880:f806:14:::36824] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||opticasprisma.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "opticasprisma.com"] [uri "/opticasprisma.com"] [unique_id "asew5gXkqGHXYVLuPdRU_wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-08 00:47:26
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-10-07 22:42:24
(1 week ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-07 17:04:47
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 13:04:44.050177 2026] [security2:error] [pid 19119:tid 19119] [client 2a03:2880:f806:14:::25280] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||atlwarehouse.net|F|2"] [data ".com.seowebstat.com.seowebstat.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "atlwarehouse.net"] [uri "/:/connedify.com.seowebstat.com.seowebstat.com"] [unique_id "asZ7rDf7znIrNRmJwj4zJQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-06 16:56:00
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฎ๐ฉ
hermawan
2026-10-05 01:40:03
(2 weeks ago)
[Mon Oct 05 08:40:01.892130 2026] [security2:error] [pid 23978:tid 139745585772224] [client 2a03:288 ...
show more
[Mon Oct 05 08:40:01.892130 2026] [security2:error] [pid 23978:tid 139745585772224] [client 2a03:2880:f806:14:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-kualitas-udara/555563387-infografis-bulanan-iklim-kualitas-udara-bulan-agustus-tahun-2026-di-bmkg-stasiun-klimatologi-jawa-timur HTT..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografi
...
show less
Email Spam
Hacking
Anonymous
2026-10-04 21:41:28
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking