🇺🇸
kosada.com
2026-11-09 08:24:28
UTC ·
(4 days ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B9%5D=52&topics%5B11%5D=70&topics%5B12%5D=63&topics%5B13%5D=79 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKi ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B9%5D=52&topics%5B11%5D=70&topics%5B12%5D=63&topics%5B13%5D=79 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇮🇩
hermawan
2026-11-07 05:14:18
UTC ·
(1 week ago)
[Sat Nov 07 12:14:18.214005 2026] [security2:error] [pid 75565:tid 139734798030528] [client 82.26.28.183:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29 ...
show more
[Sat Nov 07 12:14:18.214005 2026] [security2:error] [pid 75565:tid 139734798030528] [client 82.26.28.183:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461388 found within REQUEST_FILENAME: /index.php/publik/kegiatan/tel:+62341461388 request_line = GET /index.php/publik/kegiatan/tel:+62341461388 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/publik/kegiatan/tel:+62341461388"] [unique_id "au6zqkI8EFQez9ncJXpvbQAAAk4"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[75581] [5Pj3zEA2csE] [au6zqkI8EFQez9ncJXpvbQAAAk4] keep_alive=[0] [2026-11-07 12:14:18.214033] [R:au6zqkI8EFQez9ncJXpvbQAAAk4] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-06 07:03:25
UTC ·
(1 week ago)
[Fri Nov 06 14:02:23.977537 2026] [security2:error] [pid 78394:tid 139782909818560] [client 82.26.28.183:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/fax:+62341464827" at REQUEST_FILENAME. [file "/etc/modsecurity/corerulese ...
show more
[Fri Nov 06 14:02:23.977537 2026] [security2:error] [pid 78394:tid 139782909818560] [client 82.26.28.183:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/fax:+62341464827" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /fax:+62341464827 found within REQUEST_FILENAME: /index.php/analisis-musim/fax:+62341464827 request_line = GET /index.php/analisis-musim/fax:+62341464827 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-musim/fax:+62341464827"] [unique_id "au17f7sh4QJI34dutMGrowAAAMA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[78396] [wyu0Mf60WcI] [au17f7sh4QJI34dutMGrowAAAMA] keep_alive=[0] [2026-11-06 14:02:23.977544] [R:au17f7sh4QJI34dutMGrowAAAMA] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Ch
...
show less
Email Spam
Hacking
2026-11-05 05:51:38
UTC ·
(1 week ago)
IP matched detection query Many sub paths, bad urls forwarding.
Brute-Force
🇩🇪
SCHAPPY
2026-11-03 02:10:13
UTC ·
(1 week ago)
Excessive crawling, scraping, request limit exceeded, HTTP code 429.
Web App Attack
🇩🇪
joharikop
2026-10-13 15:10:44
UTC ·
(1 month ago)
Nginx: path traversal probe (/../) detected. Automated ban via fail2ban nginx-path-traversal jail.
Web App Attack
🇨🇭
backslash
2026-10-12 17:36:01
UTC ·
(1 month ago)
block ruleset 0C5DD2DACEA35449E8B6505BDB26517CBF836AC7
Bad Web Bot
🇵🇱
Budyn
2026-10-10 04:33:36
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: portal.budyn.ovh | URI: /.git/HEAD | UA: Mozilla/ ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: portal.budyn.ovh | URI: /.git/HEAD | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-09 20:41:22
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.astropot.store | URI: /.env | UA: Mozilla/5 ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.astropot.store | URI: /.env | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-09 06:31:08
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn.definitelynotahoneypot.top | URI: /.git/HEAD ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn.definitelynotahoneypot.top | URI: /.git/HEAD | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-10-07 07:29:55
UTC ·
(1 month ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=66&topics%5B1%5D=65&topics%5B2%5D=33&topics%5B3%5D=62 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=66&topics%5B1%5D=65&topics%5B2%5D=33&topics%5B3%5D=62 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
2026-09-27 04:07:05
UTC ·
(1 month ago)
Abuse detected: rate-limit and/or cross-site thresholds exceeded.
Bad Web Bot
🇺🇸
kosada.com
2026-08-29 05:27:07
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇨🇭
backslash
2026-08-28 14:21:19
UTC ·
(2 months ago)
block ruleset 0C5DD2DACEA35449E8B6505BDB26517CBF836AC7
Bad Web Bot
🇬🇧
masterguru
2026-08-19 23:22:32
UTC ·
(2 months ago)
Distributed DDOS attack - Botnet. Operator EQ matched 0 at REQUEST_HEADERS. (88550-185)
Hacking
