🇺🇸
TPI-Abuse
2026-11-12 02:48:05
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210730) triggered by 64.16.133.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:48:00.631390 2026] [security2:error] [pid 15705:tid 15705] [client 64.16.133.162:26001] M ...
show more
(mod_security) mod_security (id:210730) triggered by 64.16.133.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:48:00.631390 2026] [security2:error] [pid 15705:tid 15705] [client 64.16.133.162:26001] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||andrejblatnik.com|F|2"] [data ".dalkeyarchive.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "andrejblatnik.com"] [uri "/Http:/www.dalkeyarchive.com"] [unique_id "avUo4BwKSugst3S4hd1hyAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2026-11-07 08:51:31
UTC ·
(5 days ago)
[Sat Nov 07 15:51:30.873445 2026] [security2:error] [pid 162326:tid 139734949033664] [client 64.16.133.162:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4. ...
show more
[Sat Nov 07 15:51:30.873445 2026] [security2:error] [pid 162326:tid 139734949033664] [client 64.16.133.162:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461595 found within REQUEST_FILENAME: /index.php/analisis-iklim/analisis-dasarian/distribusi-curah-hujan-dasarian-provinsi-jawa-timur/tel:+62341461595 request_line = GET /index.php/analisis-iklim/analisis-dasarian/distribusi-curah-hujan-dasarian-provinsi-jawa-timur/tel:+62341461595 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-dasarian/distribusi-curah-hujan-dasarian-provinsi-jawa-timur/tel:+62341461595"] [unique_id "au7mkoi_4ewhkd4mCByZYgAAANI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[162375] [R4nG1UPcGro
...
show less
Email Spam
Hacking
🇩🇪
Vegascosmetics
2026-11-02 09:02:08
UTC ·
(1 week ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: Cluster Berater de23863 (5 IPs/15 Min)
Hacking
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-25 10:48:15
UTC ·
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇵🇱
Budyn
2026-10-09 11:38:11
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: keycloak.teddypot.site | URI: /.git/HEAD | UA: Mo ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: keycloak.teddypot.site | URI: /.git/HEAD | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-04 21:42:08
UTC ·
(1 month ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇫🇷
spot
2026-10-04 09:32:06
UTC ·
(1 month ago)
64.16.133.162 - - [04/Oct/2026:10:32:05 +0100] "GET /./../../viewforum.php?f=18&sid=1f20ced9fd8773704ed163b4093a4748 HTTP/1.1" 400 863 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari ...
show more
64.16.133.162 - - [04/Oct/2026:10:32:05 +0100] "GET /./../../viewforum.php?f=18&sid=1f20ced9fd8773704ed163b4093a4748 HTTP/1.1" 400 863 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
...
show less
Web App Attack
VPN IP
🇩🇪
grassau.com
2026-09-22 09:58:39
UTC ·
(1 month ago)
(tribe-events-crawler) Failed tribe-events-crawler trigger from 64.16.133.162 (US/United States/-/-/-)
Hacking
🇩🇪
jbcrn
2026-08-29 09:26:24
UTC ·
(2 months ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /chaldron-Lucayan/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrom ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /chaldron-Lucayan/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack
🇬🇧
masterguru
2026-08-29 02:06:54
UTC ·
(2 months ago)
Distributed DDOS attack - Botnet. Operator EQ matched 0 at REQUEST_HEADERS. (88550-185)
Hacking
🇺🇸
TPI-Abuse
2026-08-27 00:56:43
UTC ·
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 64.16.133.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 20:56:35.244761 2026] [security2:error] [pid 10577:tid 10577] [client 64.16.133.162:43715] M ...
show more
(mod_security) mod_security (id:210730) triggered by 64.16.133.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 20:56:35.244761 2026] [security2:error] [pid 10577:tid 10577] [client 64.16.133.162:43715] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bahamascruisersguide.com|F|2"] [data ".capesantamaria.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bahamascruisersguide.com"] [uri "/www.capesantamaria.com"] [unique_id "ao-LQwuEQ9IUkS7JCzzkrgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-08-25 21:57:00
UTC ·
(2 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
