🇮🇩
hermawan
2026-11-09 19:35:45
UTC ·
(4 days ago)
[Tue Nov 10 02:35:45.265887 2026] [security2:error] [pid 861949:tid 140392905189056] [client 64.16.133.103:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4. ...
show more
[Tue Nov 10 02:35:45.265887 2026] [security2:error] [pid 861949:tid 140392905189056] [client 64.16.133.103:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "98"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461595 found within REQUEST_FILENAME: /index.php/publik/tel:+62341461595 request_line = GET /index.php/publik/tel:+62341461595 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/publik/tel:+62341461595"] [unique_id "avIgkRk0a_XZHHEGZKY1XAAAAgM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[861979] [jolwEV3gYNA] [avIgkRk0a_XZHHEGZKY1XAAAAgM] keep_alive=[0] [2026-11-10 02:35:45.265894] [R:avIgkRk0a_XZHHEGZKY1XAAAAgM] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36' Host
...
show less
Email Spam
Hacking
🇩🇪
findlab
2026-11-07 17:35:05
UTC ·
(6 days ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2026-11-06 09:34:00
UTC ·
(1 week ago)
[Fri Nov 06 16:33:59.898070 2026] [security2:error] [pid 141048:tid 139781556123328] [client 64.16.133.103:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4. ...
show more
[Fri Nov 06 16:33:59.898070 2026] [security2:error] [pid 141048:tid 139781556123328] [client 64.16.133.103:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461388 found within REQUEST_FILENAME: /index.php/profil/meteorologi/list-all-categories/3991-galeri-kegiatan/galeri-kegiatan-tahun-2019/01-galeri-kegiatan-bulan-januari-tahun-2019/tel:+62341461388 request_line = GET /index.php/profil/meteorologi/list-all-categories/3991-galeri-kegiatan/galeri-kegiatan-tahun-2019/01-galeri-kegiatan-bulan-januari-tahun-2019/tel:+62341461388 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/3991-galeri-kegiatan/galeri-kegiatan-tahun-2019/01-galeri-kegiatan-bulan-januari-tahun-2019/te
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-06 03:29:46
UTC ·
(1 week ago)
[Fri Nov 06 10:29:46.286521 2026] [security2:error] [pid 132958:tid 140166123484864] [client 64.16.133.103:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4. ...
show more
[Fri Nov 06 10:29:46.286521 2026] [security2:error] [pid 132958:tid 140166123484864] [client 64.16.133.103:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461388 found within REQUEST_FILENAME: /index.php/buku/4088-buku-edisi-setiap-1-bulan-sekali/buletin-bulanan-informasi-iklim-dan-lingkungan/tel:+62341461388 request_line = GET /index.php/buku/4088-buku-edisi-setiap-1-bulan-sekali/buletin-bulanan-informasi-iklim-dan-lingkungan/tel:+62341461388 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/buku/4088-buku-edisi-setiap-1-bulan-sekali/buletin-bulanan-informasi-iklim-dan-lingkungan/tel:+62341461388"] [unique_id "au1Jqu2K7ufY-SsjMTnrmwAAAEY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[13300
...
show less
Email Spam
Hacking
🇩🇪
findlab
2026-11-04 01:30:25
UTC ·
(1 week ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇩🇪
thesimonmanuel
2026-10-27 18:39:15
UTC ·
(2 weeks ago)
2026/10/28 00:09:10 [error] 249477#249477: *22640 directory index of "/home/[redacted]/htdocs/[redacted].com/" is forbidden, client: 64.16.133.103, server: [redacted].com, request: "GET / HTTP/1.1", host: "[redacted].com"
2026/10/28 00:09:11 [error] ...
show more
2026/10/28 00:09:10 [error] 249477#249477: *22640 directory index of "/home/[redacted]/htdocs/[redacted].com/" is forbidden, client: 64.16.133.103, server: [redacted].com, request: "GET / HTTP/1.1", host: "[redacted].com"
2026/10/28 00:09:11 [error] 249477#249477: *22640 directory index of "/home/[redacted]/htdocs/[redacted].com/" is forbidden, client: 64.16.133.103, server: [redacted].com, request: "GET / HTTP/1.1", host: "[redacted].com"
2026/10/28 00:09:15 [error] 249477#249477: *22640 directory index of "/home/[redacted]/htdocs/[redacted].com/" is forbidden, client: 64.16.133.103, server: [redacted].com, request: "GET / HTTP/1.1", host: "[redacted].com"
show less
Port Scan
Web App Attack
🇩🇪
FeG Deutschland
2026-10-24 23:27:48
UTC ·
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇵🇱
Budyn
2026-10-09 19:29:47
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn.astropot.space | URI: /.git/HEAD | UA: Mozill ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn.astropot.space | URI: /.git/HEAD | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 20:04:37
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 64.16.133.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 16:04:31.570671 2026] [security2:error] [pid 16139:tid 16139] [client 64.16.133.103:37123] M ...
show more
(mod_security) mod_security (id:210730) triggered by 64.16.133.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 16:04:31.570671 2026] [security2:error] [pid 16139:tid 16139] [client 64.16.133.103:37123] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||3pl.com|F|2"] [data ".holmanusa.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "3pl.com"] [uri "/www.holmanusa.com"] [unique_id "arbTz6HtVk6O86h10hDWEgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-09-03 15:03:04
UTC ·
(2 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇬🇧
masterguru
2026-08-30 12:00:16
UTC ·
(2 months ago)
Distributed DDOS attack - Botnet. Operator EQ matched 0 at REQUEST_HEADERS. (88540-185)
Hacking
🇩🇪
Viveronese
2026-08-15 16:21:59
UTC ·
(2 months ago)
HTTP vulnerability scanning
Web App Attack
🇨🇭
backslash
2026-07-30 16:18:01
UTC ·
(3 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
