🇮🇩
hermawan
2026-11-06 14:37:14
UTC ·
(4 hours ago)
[Fri Nov 06 21:37:14.439551 2026] [security2:error] [pid 260659:tid 139782755690176] [client 64.16.133.14:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.2 ...
show more
[Fri Nov 06 21:37:14.439551 2026] [security2:error] [pid 260659:tid 139782755690176] [client 64.16.133.14:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461595 found within REQUEST_FILENAME: /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/tel:+62341461595 request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/tel:+62341461595 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/tel:+62341461595"] [unique_id "au3mGr0vwpwSwK0gieHuTQAAAMU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[260676] [5uNYjDRO/8I] [au3mGr0vwpwSwK0gieHuTQAAAMU] keep_alive=[0] [2026-11-06 21:37:14.439556] [R:au3mGr0vwpwSwK0gieHuTQAAAMU] UA:'Mozilla/5.0
...
show less
Email Spam
Hacking
🇩🇪
milcraft.nl
2026-11-03 17:39:53
UTC ·
(3 days ago)
Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse.
DDoS Attack
Web App Attack
🇵🇱
Budyn
2026-10-09 15:52:04
UTC ·
(4 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: backup.goblinpot.online | URI: /.env | UA: Mozill ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: backup.goblinpot.online | URI: /.env | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-09 08:53:12
UTC ·
(4 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.astropot.website | URI: /wp-admin/ | UA: Mozilla/5.0 ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.astropot.website | URI: /wp-admin/ | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-05 02:33:03
UTC ·
(1 month ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇫🇷
spot
2026-10-02 17:45:35
UTC ·
(1 month ago)
64.16.133.14 - - [02/Oct/2026:18:45:35 +0100] "GET /./../../viewforum.php?f=204&sid=4a67d060801638ca569aabe7e45f76d2 HTTP/1.1" 400 863 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari ...
show more
64.16.133.14 - - [02/Oct/2026:18:45:35 +0100] "GET /./../../viewforum.php?f=204&sid=4a67d060801638ca569aabe7e45f76d2 HTTP/1.1" 400 863 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
...
show less
Web App Attack
VPN IP
🇺🇸
TPI-Abuse
2026-09-25 04:29:12
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 64.16.133.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 00:29:06.251523 2026] [security2:error] [pid 1384:tid 1384] [client 64.16.133.14:53257] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 64.16.133.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 00:29:06.251523 2026] [security2:error] [pid 1384:tid 1384] [client 64.16.133.14:53257] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||3pl.com|F|2"] [data ".klingecorp.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "3pl.com"] [uri "/www.klingecorp.com"] [unique_id "arX4knOrHk9-ZnmNZfJxMwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-09-04 18:03:03
UTC ·
(2 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇩🇪
Viveronese
2026-08-31 11:01:19
UTC ·
(2 months ago)
HTTP vulnerability scanning
Web App Attack
🇯🇵
VXG-NET
2026-08-19 15:38:42
UTC ·
(2 months ago)
port=80, indicator_type=info-leak
Hacking
🇬🇧
masterguru
2026-08-18 19:26:57
UTC ·
(2 months ago)
Distributed DDOS attack - Botnet. Operator EQ matched 0 at REQUEST_HEADERS. (88550-185)
Hacking
🇬🇧
masterguru
2026-08-17 00:17:28
UTC ·
(2 months ago)
Distributed DDOS attack - Botnet. Operator EQ matched 0 at REQUEST_HEADERS. (88550-185)
Hacking
🇺🇸
LARL-Stompro-2024
2026-08-12 13:06:24
UTC ·
(2 months ago)
Evergreen ILS - Mylist Bot Abuse - HTTP Port 443 - Fake UserAgent. Requests:2
Bad Web Bot
