🇯🇵
yoren
2026-11-08 04:51:23
UTC ·
(6 days ago)
Automated report from JTZL's Bot Maze: crawled hidden bot-trap pages and crossed the site's configured blocking threshold.
Bad Web Bot
2026-11-08 00:45:59
UTC ·
(6 days ago)
IP matched detection query Many sub paths, bad urls forwarding.
Brute-Force
🇮🇩
hermawan
2026-11-07 07:00:46
UTC ·
(6 days ago)
[Sat Nov 07 14:00:45.878728 2026] [security2:error] [pid 119416:tid 139734135334592] [client 64.16.133.156:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4. ...
show more
[Sat Nov 07 14:00:45.878728 2026] [security2:error] [pid 119416:tid 139734135334592] [client 64.16.133.156:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461595 found within REQUEST_FILENAME: /index.php/analisis-bulanan/175-analisis-distribusi-hujan/analisis-distribusi-sifat-hujan/analisis-distribusi-sifat-hujan-jawa-timur-bulanan/tel:+62341461595 request_line = GET /index.php/analisis-bulanan/175-analisis-distribusi-hujan/analisis-distribusi-sifat-hujan/analisis-distribusi-sifat-hujan-jawa-timur-bulanan/tel:+62341461595 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/175-analisis-distribusi-hujan/analisis-distribusi-sifat-hujan/analisis-distribusi-sifat-hujan-jawa-timur-bulanan/tel:+
...
show less
Email Spam
Hacking
🇮🇹
Progetto1
2026-10-15 22:20:03
UTC ·
(4 weeks ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇵🇱
Budyn
2026-10-09 17:48:27
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.definitelynotahoneypot.online | URI: /.env ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.definitelynotahoneypot.online | URI: /.env | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-09 08:29:18
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: idp.goblinpot.site | URI: /wp-admin/ | UA: Mozilla/5.0 (Macin ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: idp.goblinpot.site | URI: /wp-admin/ | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
findlab
2026-10-04 12:15:01
UTC ·
(1 month ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇫🇷
spot
2026-10-02 20:35:06
UTC ·
(1 month ago)
64.16.133.156 - - [02/Oct/2026:21:35:05 +0100] "GET /./../../viewforum.php?f=55&sid=269c44ce6dcfd4f3eadc1264f218dc0a HTTP/1.1" 400 863 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari ...
show more
64.16.133.156 - - [02/Oct/2026:21:35:05 +0100] "GET /./../../viewforum.php?f=55&sid=269c44ce6dcfd4f3eadc1264f218dc0a HTTP/1.1" 400 863 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
...
show less
Web App Attack
VPN IP
🇨🇭
backslash
2026-09-18 00:27:30
UTC ·
(1 month ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇩🇪
milcraft.nl
2026-09-09 12:09:55
UTC ·
(2 months ago)
Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse.
DDoS Attack
Web App Attack
🇩🇪
FeG Deutschland
2026-08-22 02:35:49
UTC ·
(2 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇬🇧
masterguru
2026-08-19 01:38:13
UTC ·
(2 months ago)
Distributed DDOS attack - Botnet. Operator EQ matched 0 at REQUEST_HEADERS. (88550-185)
Hacking
🇨🇭
backslash
2026-08-11 00:18:16
UTC ·
(3 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇩🇪
FeG Deutschland
2026-07-26 22:09:58
UTC ·
(3 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 08:24:03
UTC ·
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 64.16.133.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 04:23:57.550921 2026] [security2:error] [pid 1997842:tid 1997842] [client 64.16.133.156:2237 ...
show more
(mod_security) mod_security (id:210730) triggered by 64.16.133.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 04:23:57.550921 2026] [security2:error] [pid 1997842:tid 1997842] [client 64.16.133.156:22379] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||andrejblatnik.com|F|2"] [data ".cekape.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "andrejblatnik.com"] [uri "/www.cekape.com"] [unique_id "amXEHSDs6nNB9jBCjOaT_QAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
