2026-11-09 15:50:20
UTC ·
(13 hours ago)
SSH or web brute-force activity detected by Fail2Ban
Brute-Force
Web App Attack
🇺🇸
kosada.com
2026-11-07 18:02:23
UTC ·
(2 days ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B7%5D=63&topics%5B9%5D=44&topics%5B10%5D=79&topics%5B11%5D=54 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B7%5D=63&topics%5B9%5D=44&topics%5B10%5D=79&topics%5B11%5D=54 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇮🇩
hermawan
2026-11-06 05:20:00
UTC ·
(3 days ago)
[Fri Nov 06 12:19:59.830560 2026] [security2:error] [pid 36689:tid 139782176888512] [client 82.26.28.224:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29 ...
show more
[Fri Nov 06 12:19:59.830560 2026] [security2:error] [pid 36689:tid 139782176888512] [client 82.26.28.224:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461388 found within REQUEST_FILENAME: /index.php/buku/508-buku-edisi-setiap-6-bulan-sekali/buku-prakiraan-musim/buku-prakiraan-musim-kemarau/buku-prakiraan-musim-kemarau-tahun-2017/tel:+62341461388 request_line = GET /index.php/buku/508-buku-edisi-setiap-6-bulan-sekali/buku-prakiraan-musim/buku-prakiraan-musim-kemarau/buku-prakiraan-musim-kemarau-tahun-2017/tel:+62341461388 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/buku/508-buku-edisi-setiap-6-bulan-sekali/buku-prakiraan-musim/buku-prakiraan-musim-kemarau/buku-prakiraan-musim-kemarau-tahun-2017/t
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-06 00:15:41
UTC ·
(4 days ago)
[Fri Nov 06 07:15:40.513496 2026] [security2:error] [pid 45514:tid 140166232491712] [client 82.26.28.224:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29 ...
show more
[Fri Nov 06 07:15:40.513496 2026] [security2:error] [pid 45514:tid 140166232491712] [client 82.26.28.224:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461595 found within REQUEST_FILENAME: /index.php/tel:+62341461595 request_line = GET /index.php/tel:+62341461595 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/tel:+62341461595"] [unique_id "au0cLCpB8_nTmb73XVRKUwAAAEM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[45519] [Gy0mg7g3rwg] [au0cLCpB8_nTmb73XVRKUwAAAEM] keep_alive=[0] [2026-11-06 07:15:40.513504] [R:au0cLCpB8_nTmb73XVRKUwAAAEM] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36' Host:'staklim-jatim.bmkg.go
...
show less
Email Spam
Hacking
🇺🇸
kosada.com
2026-10-13 11:06:34
UTC ·
(3 weeks ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=44&topics%5B2%5D=37&topics%5B3%5D=36&topics%5B4%5D=42 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=44&topics%5B2%5D=37&topics%5B3%5D=36&topics%5B4%5D=42 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇵🇱
Budyn
2026-10-09 10:46:10
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cloud.teddypot.cloud | URI: /wp-admin/ | UA: Mozilla/5.0 (Mac ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cloud.teddypot.cloud | URI: /wp-admin/ | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-04 10:03:03
UTC ·
(1 month ago)
block ruleset 0C5DD2DACEA35449E8B6505BDB26517CBF836AC7
Bad Web Bot
🇫🇷
spot
2026-10-02 17:45:37
UTC ·
(1 month ago)
82.26.28.224 - - [02/Oct/2026:18:45:36 +0100] "GET /./../../viewforum.php?f=114&sid=4a67d060801638ca569aabe7e45f76d2 HTTP/1.1" 400 863 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari ...
show more
82.26.28.224 - - [02/Oct/2026:18:45:36 +0100] "GET /./../../viewforum.php?f=114&sid=4a67d060801638ca569aabe7e45f76d2 HTTP/1.1" 400 863 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
...
show less
Web App Attack
VPN IP
🇨🇭
backslash
2026-09-03 12:06:20
UTC ·
(2 months ago)
block ruleset 0C5DD2DACEA35449E8B6505BDB26517CBF836AC7
Bad Web Bot
🇩🇪
FeG Deutschland
2026-08-20 13:40:16
UTC ·
(2 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇺🇸
kosada.com
2026-08-20 06:59:45
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
FeG Deutschland
2026-08-19 12:21:30
UTC ·
(2 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇩🇪
FeG Deutschland
2026-08-13 08:53:44
UTC ·
(2 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 248
Exploited Host
Web App Attack
🇳🇱
DrLex0
2026-08-06 02:42:54
UTC ·
(3 months ago)
New obvious plague of shitty distributed botnet crawler with utterly broken relative path handling
82.26.28.224 443 - [06/Aug/2026:02:42:53 +0000] "GET [redacted] HTTP/1.1" 400 934 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537 ...
show more
New obvious plague of shitty distributed botnet crawler with utterly broken relative path handling
82.26.28.224 443 - [06/Aug/2026:02:42:53 +0000] "GET [redacted] HTTP/1.1" 400 934 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
82.26.28.224 443 - [06/Aug/2026:02:42:54 +0000] "GET [redacted] HTTP/1.1" 400 934 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
82.26.28.224 443 - [06/Aug/2026:02:42:54 +0000] "GET [redacted] HTTP/1.1" 400 934 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
82.26.28.224 443 - [06/Aug/2026:02:42:54 +0000] "GET [redacted] HTTP/1.1" 400 934 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
show less
Bad Web Bot
Exploited Host
🇺🇸
kosada.com
2026-08-04 15:50:02
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
