🇮🇹
mgarofano80
2026-11-09 18:38:54
UTC ·
(4 hours ago)
Brute-Force
Web App Attack
🇿🇦
vanderhost
2026-11-09 15:37:40
UTC ·
(7 hours ago)
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/uploads/elementor/google-fonts/fonts/ubuntu-4icv6kvjbnbylgocxcvjsgyn.woff2 via rule: /wp-content
Web App Attack
Bad Web Bot
🇮🇩
hermawan
2026-11-09 10:29:30
UTC ·
(13 hours ago)
[Mon Nov 09 17:29:29.738216 2026] [security2:error] [pid 573968:tid 140392850765504] [client 2a03:2880:f814:4c:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/co ...
show more
[Mon Nov 09 17:29:29.738216 2026] [security2:error] [pid 573968:tid 140392850765504] [client 2a03:2880:f814:4c:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "280"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/profil/meteorologi/list-all-categories/3965-klimatologi/infografis/infografis-klimatologi/555563373-mengenal-faktor-pengendali-iklim-di-indonesia HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/3965-klimatologi/infografis/infografis-klimatol
...
show less
Email Spam
Hacking
🇫🇷
WebServ
2026-11-09 07:55:11
UTC ·
(15 hours ago)
Fail2Ban jail [nginx-noscript]: banned after 3 failed attempt(s). Probing for disallowed script extensions
Hacking
Web App Attack
🇩🇪
ksol-hostmaster
2026-11-09 07:04:27
UTC ·
(16 hours ago)
2026/11/09 08:04:25 [error] 67125#564529: *3229570 limiting requests, excess: 0.976 by zone "crawler", client: 2a03:2880:f814:4c::, server: ksol.io, request: "GET /js/copy-code.b1e0e8560acc803af97c4a63bed0cd81.js HTTP/2.0", host: "ksol.io", referrer: ...
show more
2026/11/09 08:04:25 [error] 67125#564529: *3229570 limiting requests, excess: 0.976 by zone "crawler", client: 2a03:2880:f814:4c::, server: ksol.io, request: "GET /js/copy-code.b1e0e8560acc803af97c4a63bed0cd81.js HTTP/2.0", host: "ksol.io", referrer: "https://ksol.io/de/unsere-leistungen/web/"
...
show less
Bad Web Bot
🇧🇷
alcacerlab
2026-11-09 06:42:21
UTC ·
(16 hours ago)
2a03:2880:f814:4c:: - - [09/Nov/2026:03:42:20 -0300] "GET / HTTP/2" 200 54066 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-09 03:03:02
UTC ·
(20 hours ago)
114 querystring crawling (29m59s)
Brute-Force
Bad Web Bot
🇮🇩
hermawan
2026-11-08 22:29:11
UTC ·
(1 day ago)
[Mon Nov 09 05:29:11.070809 2026] [security2:error] [pid 182090:tid 140015363372736] [client 2a03:2880:f814:4c:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/co ...
show more
[Mon Nov 09 05:29:11.070809 2026] [security2:error] [pid 182090:tid 140015363372736] [client 2a03:2880:f814:4c:::0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Indexer" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "280"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Indexer found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555561745-prakiraan-bulanan-curah-hujan-bulan-april-tahun-2025-update-dari-analisis-bulan-januari-tahun-2025-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulan
...
show less
Email Spam
Hacking
🇺🇸
TPI-Abuse
2026-11-08 05:44:53
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f814:4c:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:44:45.678950 2026] [security2:error] [pid 1042:tid 1042] [client 2a03:2880:f8 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f814:4c:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:44:45.678950 2026] [security2:error] [pid 1042:tid 1042] [client 2a03:2880:f814:4c:::61488] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||amazinghydraulics.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "amazinghydraulics.com"] [uri "/amazinghydraulics.com"] [unique_id "avAMTXCOiBscH4qSAukf9QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-08 04:50:02
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: docker.teddypot.website | Path: /xmlrpc.php?rsd | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: docker.teddypot.website | Path: /xmlrpc.php?rsd | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.co... | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2026-11-07 10:06:09
UTC ·
(2 days ago)
[Sat Nov 07 17:06:09.158570 2026] [security2:error] [pid 194373:tid 139734210836160] [client 2a03:2880:f814:4c:::0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/ ...
show more
[Sat Nov 07 17:06:09.158570 2026] [security2:error] [pid 194373:tid 139734210836160] [client 2a03:2880:f814:4c:::0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: type= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/meteorologi/list-of-all-tags/ketepatan-awal-musim-kemarau-kriteria-curah-hujan-50-mm-dan-hari-hujan-3-zona-musim-di-propinsi-jawa-timur?format=feed&type=atom HTTP/1.1 Request URI RAW = /index.php/profil/meteorologi/list-of-all-tags/ketepatan-awal-musim-kemarau-kriteria-curah-hujan-50-mm-dan-hari-hujan-3-zona..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/ketep
...
show less
Email Spam
Hacking
🇮🇹
mgarofano80
2026-11-07 04:52:58
UTC ·
(2 days ago)
Brute-Force
Web App Attack
🇫🇷
Entalpi.net
2026-11-06 18:58:35
UTC ·
(3 days ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
🇵🇱
Budyn
2026-11-06 04:24:10
UTC ·
(3 days ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: ldap.goblinpot.website | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: ldap.goblinpot.website | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 (compatible; meta-webindexer/1.1 (+https://develope... | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-06 00:56:29
UTC ·
(3 days ago)
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: cpanel.definitelynotahoneypot.online | Path: /backup.sql | User-Agent: Mozilla/5.0 (Windows ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: cpanel.definitelynotahoneypot.online | Path: /backup.sql | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.co... | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack