🇩🇪
klaus_ph
2026-11-13 08:08:43
UTC ·
(19 hours ago)
64.16.133.38 - - [13/Nov/2026:09:08:43 +0100] "GET / HTTP/1.1" 200 670 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
...
Bad Web Bot
🇮🇩
hermawan
2026-11-07 04:30:48
UTC ·
(6 days ago)
[Sat Nov 07 11:30:47.797203 2026] [security2:error] [pid 56401:tid 139734638634688] [client 64.16.133.38:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29 ...
show more
[Sat Nov 07 11:30:47.797203 2026] [security2:error] [pid 56401:tid 139734638634688] [client 64.16.133.38:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461388 found within REQUEST_FILENAME: /index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/4168-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2023/tel:+62341461388 request_line = GET /index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/4168-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2023/tel:+62341461388 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/4168-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2023/tel:+62341461388"] [unique_id "au6pd_cKGq1DATvjpYZhuAAA
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-06 03:49:41
UTC ·
(1 week ago)
[Fri Nov 06 10:49:41.062361 2026] [security2:error] [pid 2543:tid 140298898355904] [client 64.16.133.38:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29. ...
show more
[Fri Nov 06 10:49:41.062361 2026] [security2:error] [pid 2543:tid 140298898355904] [client 64.16.133.38:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461388 found within REQUEST_FILENAME: /index.php/analisis-musim/499-monitoring-awal-musim-zona-musim-zom-di-propinsi-jawa-timur/monitoring-awal-musim-kemarau-zona-musim-zom-di-propinsi-jawa-timur/tel:+62341461388 request_line = GET /index.php/analisis-musim/499-monitoring-awal-musim-zona-musim-zom-di-propinsi-jawa-timur/monitoring-awal-musim-kemarau-zona-musim-zom-di-propinsi-jawa-timur/tel:+62341461388 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-musim/499-monitoring-awal-musim-zona-musim-zom-di-propinsi-jawa-timur/monitoring-awal-musim-kem
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-06 00:13:12
UTC ·
(1 week ago)
[Fri Nov 06 07:13:11.438183 2026] [security2:error] [pid 44126:tid 140166257936064] [client 64.16.133.38:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29 ...
show more
[Fri Nov 06 07:13:11.438183 2026] [security2:error] [pid 44126:tid 140166257936064] [client 64.16.133.38:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461388 found within REQUEST_FILENAME: /index.php/profil/meteorologi/list-all-categories/4379-wilayah-birokrasi-bersih-dan-melayani-wbbm/tel:+62341461388 request_line = GET /index.php/profil/meteorologi/list-all-categories/4379-wilayah-birokrasi-bersih-dan-melayani-wbbm/tel:+62341461388 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4379-wilayah-birokrasi-bersih-dan-melayani-wbbm/tel:+62341461388"] [unique_id "au0bl6b6tvvjgOqVVl7txAAAAAA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[44128] [d3ZDevig
...
show less
Email Spam
Hacking
🇩🇪
expandmade.com
2026-10-31 02:11:10
UTC ·
(2 weeks ago)
detect header anomalies [31/Oct/2026:02:11:10 "GET /5-importantes-razones-para-visitar-bamberg-alemania"]
Web App Attack
🇵🇱
Budyn
2026-10-10 03:05:13
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.teddypot.cloud | URI: /.git/HEAD | UA: Moz ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.teddypot.cloud | URI: /.git/HEAD | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇳🇱
Ike57
2026-10-08 12:08:07
UTC ·
(1 month ago)
Detected activity: Malicious activity detected; Abuse Confidence score over set treshold; Blocked by web application firewall | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari ...
show more
Detected activity: Malicious activity detected; Abuse Confidence score over set treshold; Blocked by web application firewall | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack
🇫🇷
spot
2026-10-04 03:25:01
UTC ·
(1 month ago)
64.16.133.38 - - [04/Oct/2026:04:25:01 +0100] "GET /./../../viewforum.php?f=117&sid=bf47a455f62fdd75d3280809d193fd05 HTTP/1.1" 400 863 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari ...
show more
64.16.133.38 - - [04/Oct/2026:04:25:01 +0100] "GET /./../../viewforum.php?f=117&sid=bf47a455f62fdd75d3280809d193fd05 HTTP/1.1" 400 863 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
...
show less
Web App Attack
VPN IP
🇨🇭
backslash
2026-09-27 15:57:00
UTC ·
(1 month ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇩🇪
conseilgouz
2026-09-27 02:42:34
UTC ·
(1 month ago)
vew-Joomla User : try to access forms...
Hacking
🇩🇪
jbcrn
2026-09-01 04:44:06
UTC ·
(2 months ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /deflagration.juicily-quelch/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like G ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /deflagration.juicily-quelch/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack
🇦🇺
afleventoffice.com.au
2026-08-30 04:18:32
UTC ·
(2 months ago)
GET /login.htm HTTP/1.1
Web App Attack
🇨🇭
Kepler-1649c
2026-08-27 22:05:21
UTC ·
(2 months ago)
Detected Attack: HTTP.GET.Request.Path.Traversal
Hacking
🇨🇭
backslash
2026-08-25 08:03:01
UTC ·
(2 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇩🇪
Viveronese
2026-08-25 05:48:15
UTC ·
(2 months ago)
HTTP vulnerability scanning
Web App Attack
