🇫🇷
ACD01
2026-11-09 12:25:28
UTC ·
(4 days ago)
Bad bot detected by WordPress firewall: requested a hidden link disallowed in robots.txt.
Bad Web Bot
🇮🇩
hermawan
2026-11-08 15:25:25
UTC ·
(5 days ago)
[Sun Nov 08 22:25:24.375726 2026] [security2:error] [pid 237611:tid 140520961586880] [client 64.16.133.65:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.2 ...
show more
[Sun Nov 08 22:25:24.375726 2026] [security2:error] [pid 237611:tid 140520961586880] [client 64.16.133.65:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "98"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461595 found within REQUEST_FILENAME: /index.php/profil/meteorologi/list-of-all-tags/tel:+62341461595 request_line = GET /index.php/profil/meteorologi/list-of-all-tags/tel:+62341461595 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/tel:+62341461595"] [unique_id "avCUZNQUYNzK39f2XxgwYwAAAFI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[237656] [5ZJIdIVybus] [avCUZNQUYNzK39f2XxgwYwAAAFI] keep_alive=[0] [2026-11-08 22:25:24.375733] [R:avCUZNQUYNzK39f2XxgwYwAAAFI] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS
...
show less
Email Spam
Hacking
2026-11-08 14:27:17
UTC ·
(5 days ago)
IP matched detection query Many sub paths, bad urls forwarding.
Brute-Force
🇮🇩
hermawan
2026-11-07 04:04:32
UTC ·
(1 week ago)
[Sat Nov 07 11:04:31.906952 2026] [security2:error] [pid 50278:tid 140208527894208] [client 64.16.133.65:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29 ...
show more
[Sat Nov 07 11:04:31.906952 2026] [security2:error] [pid 50278:tid 140208527894208] [client 64.16.133.65:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461388 found within REQUEST_FILENAME: /index.php/profil/meteorologi/list-all-categories/3935-klimatologi/offline-artikel/tel:+62341461388 request_line = GET /index.php/profil/meteorologi/list-all-categories/3935-klimatologi/offline-artikel/tel:+62341461388 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/3935-klimatologi/offline-artikel/tel:+62341461388"] [unique_id "au6jTwFOJsZN1B5Faz4t9gAAAQQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[50284] [M/1x08/7V+4] [au6jTwFOJsZN1B5Faz4t9gAAAQQ] keep_alive
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-06 04:49:05
UTC ·
(1 week ago)
[Fri Nov 06 11:49:04.380751 2026] [security2:error] [pid 24542:tid 139782512432832] [client 64.16.133.65:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29 ...
show more
[Fri Nov 06 11:49:04.380751 2026] [security2:error] [pid 24542:tid 139782512432832] [client 64.16.133.65:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461595 found within REQUEST_FILENAME: /index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-kemarau/prediksi-awal-musim-kemarau/per-kota-kabupaten/tel:+62341461595 request_line = GET /index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-kemarau/prediksi-awal-musim-kemarau/per-kota-kabupaten/tel:+62341461595 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-musim-tiap-6-bulan-sekali/prediksi-musim-kemarau/prediksi-awal-musim-kemarau/per-kota-kabupaten/tel:+62341461595"] [unique_id "au1cQI
...
show less
Email Spam
Hacking
🇩🇪
FeG Deutschland
2026-10-29 17:51:48
UTC ·
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 148
Exploited Host
Web App Attack
2026-10-26 23:00:31
UTC ·
(2 weeks ago)
Network service scanning detected by FortiGate; source quarantined.
Port Scan
🇫🇷
masterguru
2026-10-24 15:23:37
UTC ·
(2 weeks ago)
Blocked scraper - old Chrome UA. Match of "rx (?i)(GoogleOther|amazonbot|bingbot|googlebot|yandexbot|duckduckbot|OPR/|Edg/|EdgA/|EdgiOS/|Vivaldi/|SamsungBrowser/|YaBrowser/)" against "REQUEST_HEADERS:User-Agent" required. (780532-133)
Hacking
🇩🇪
FeG Deutschland
2026-10-21 15:01:04
UTC ·
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇵🇱
Budyn
2026-10-10 00:02:12
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: registry.astropot.tech | URI: /.git/HEAD | UA: Mo ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: registry.astropot.tech | URI: /.git/HEAD | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇫🇷
spot
2026-10-02 18:31:32
UTC ·
(1 month ago)
64.16.133.65 - - [02/Oct/2026:19:31:31 +0100] "GET /./../../viewforum.php?f=37&sid=4a67d060801638ca569aabe7e45f76d2 HTTP/1.1" 400 863 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/ ...
show more
64.16.133.65 - - [02/Oct/2026:19:31:31 +0100] "GET /./../../viewforum.php?f=37&sid=4a67d060801638ca569aabe7e45f76d2 HTTP/1.1" 400 863 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
...
show less
Web App Attack
VPN IP
🇨🇭
backslash
2026-09-27 15:36:00
UTC ·
(1 month ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇩🇪
jbcrn
2026-08-30 15:35:31
UTC ·
(2 months ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /deflagration.enfoul/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Ch ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /deflagration.enfoul/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack
🇬🇧
masterguru
2026-08-30 09:32:22
UTC ·
(2 months ago)
Distributed DDOS attack - Botnet. Operator EQ matched 0 at REQUEST_HEADERS. (88550-185)
Hacking
🇨🇭
backslash
2026-08-26 01:57:01
UTC ·
(2 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
