🇧🇪
cmbplf
2026-11-10 06:00:57
UTC ·
(6 hours ago)
136 querystring crawling (29m59s)
Brute-Force
Bad Web Bot
🇫🇷
WebServ
2026-11-10 05:49:06
UTC ·
(6 hours ago)
Fail2Ban jail [nginx-noscript]: banned after 3 failed attempt(s). Probing for disallowed script extensions
Hacking
Web App Attack
🇫🇷
abuseipdb.amaze321
2026-11-09 15:38:35
UTC ·
(20 hours ago)
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack
Bad Web Bot
🇿🇦
vanderhost
2026-11-09 15:37:37
UTC ·
(20 hours ago)
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/uploads/elementor/css/post-339.css via rule: /wp-content
Web App Attack
Bad Web Bot
🇧🇪
cmbplf
2026-11-09 11:01:51
UTC ·
(1 day ago)
205 querystring crawling (29m59s)
Brute-Force
Bad Web Bot
🇮🇩
hermawan
2026-11-09 09:32:54
UTC ·
(1 day ago)
[Mon Nov 09 16:32:53.976350 2026] [security2:error] [pid 544415:tid 140392263571136] [client 2a03:2880:f814:33:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/co ...
show more
[Mon Nov 09 16:32:53.976350 2026] [security2:error] [pid 544415:tid 140392263571136] [client 2a03:2880:f814:33:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "280"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-awal-musim-hujan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-hujan/prediksi-awal-musim-hujan"] [unique_id "avGTRaHHc16qP3
...
show less
Email Spam
Hacking
🇧🇪
cmbplf
2026-11-09 05:01:21
UTC ·
(1 day ago)
163 querystring crawling (29m59s)
Brute-Force
Bad Web Bot
🇵🇱
Budyn
2026-11-09 02:35:54
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: status.astropot.space | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) A ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: status.astropot.space | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 (compatible; meta-webindexer/1.1 (+https://develope... | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇮🇹
mgarofano80
2026-11-08 19:43:11
UTC ·
(1 day ago)
Brute-Force
Web App Attack
🇮🇩
hermawan
2026-11-08 09:41:29
UTC ·
(2 days ago)
[Sun Nov 08 16:41:28.664239 2026] [security2:error] [pid 51193:tid 140521414563520] [client 2a03:2880:f814:33:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/cor ...
show more
[Sun Nov 08 16:41:28.664239 2026] [security2:error] [pid 51193:tid 140521414563520] [client 2a03:2880:f814:33:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "280"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/analisis-bulanan/4299-analisis-distribusi-hujan/analisis-distribusi-curah-hujan/analisis-distribusi-curah-hujan-jawa-timur-bulanan/analisis-bulanan-distribusi-curah-hujan-di-provinsi-jawa-t..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/4299-ana
...
show less
Email Spam
Hacking
🇵🇱
Budyn
2026-11-08 04:49:58
UTC ·
(2 days ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: docker.teddypot.website | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: docker.teddypot.website | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.faceb... | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-08 04:03:25
UTC ·
(2 days ago)
Try to access /xmlrpc.php?rsd
Web App Attack
🇮🇩
hermawan
2026-11-08 01:06:09
UTC ·
(2 days ago)
[Sun Nov 08 08:06:08.603769 2026] [security2:error] [pid 639067:tid 139735049680576] [client 2a03:2880:f814:33:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/co ...
show more
[Sun Nov 08 08:06:08.603769 2026] [security2:error] [pid 639067:tid 139735049680576] [client 2a03:2880:f814:33:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /images/Klimatologi/Konferensi_Pers/2026/03_Maret_2026/Press_Release_Prediksi_Musim_Kemarau_2026.pdf HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Konferensi_Pers/2026/03_Maret_2026/Press_Release_Prediksi_Musim_Kemarau_2026.pdf"] [unique_id "au_LAD6-KKqy7sJO-odnlQAAAck"
...
show less
Email Spam
Hacking
🇵🇱
Budyn
2026-11-07 09:08:21
UTC ·
(3 days ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: jira.definitelynotahoneypot.online | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: jira.definitelynotahoneypot.online | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.co... | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-07 01:06:23
UTC ·
(3 days ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: git.dont-eat-the-pudding.online | Path: /xmlrpc.php?rsd | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win6 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: git.dont-eat-the-pudding.online | Path: /xmlrpc.php?rsd | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.co... | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack