🇺🇸
kosada.com
2026-11-10 15:07:32
UTC ·
(3 days ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=81&topics%5B1%5D=47&topics%5B2%5D=60&topics%5B3%5D=69 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=81&topics%5B1%5D=47&topics%5B2%5D=60&topics%5B3%5D=69 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇮🇩
hermawan
2026-11-09 12:11:41
UTC ·
(4 days ago)
[Mon Nov 09 19:11:40.944585 2026] [security2:error] [pid 625364:tid 140392842372800] [client 82.26.28.130:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.2 ...
show more
[Mon Nov 09 19:11:40.944585 2026] [security2:error] [pid 625364:tid 140392842372800] [client 82.26.28.130:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461388" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "98"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461388 found within REQUEST_FILENAME: /index.php/profil/meteorologi/list-all-categories/122-peralatan-observasi-klimatologi/tel:+62341461388 request_line = GET /index.php/profil/meteorologi/list-all-categories/122-peralatan-observasi-klimatologi/tel:+62341461388 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/122-peralatan-observasi-klimatologi/tel:+62341461388"] [unique_id "avG4fC1GcI_wYFXBjkt5mwAAAwY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[625431] [NHVQ3ZYIz9Q] [avG4fC1GcI_wYFXBjkt5mwAAAwY]
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-07 07:00:54
UTC ·
(6 days ago)
[Sat Nov 07 14:00:54.285904 2026] [security2:error] [pid 119416:tid 139735284577984] [client 82.26.28.130:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.2 ...
show more
[Sat Nov 07 14:00:54.285904 2026] [security2:error] [pid 119416:tid 139735284577984] [client 82.26.28.130:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461595 found within REQUEST_FILENAME: /index.php/profil/meteorologi/list-all-categories/4001-galeri-kegiatan/galeri-kegiatan-tahun-2019/11-galeri-kegiatan-bulan-november-tahun-2019/tel:+62341461595 request_line = GET /index.php/profil/meteorologi/list-all-categories/4001-galeri-kegiatan/galeri-kegiatan-tahun-2019/11-galeri-kegiatan-bulan-november-tahun-2019/tel:+62341461595 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4001-galeri-kegiatan/galeri-kegiatan-tahun-2019/11-galeri-kegiatan-bulan-november-tahun-2019/
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-11-06 00:50:54
UTC ·
(1 week ago)
[Fri Nov 06 07:50:31.693815 2026] [security2:error] [pid 58618:tid 140166255806144] [client 82.26.28.130:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29 ...
show more
[Fri Nov 06 07:50:31.693815 2026] [security2:error] [pid 58618:tid 140166255806144] [client 82.26.28.130:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "62341461595" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: 62341461595 found within REQUEST_FILENAME: /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim/tel:+62341461595 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim/tel:+62341461595 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim/tel:+62341461595"] [unique_id "au0kVyM3ytN47fvGIaF-vQAAAEA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[58628] [Zg7L//g0SQM] [
...
show less
Email Spam
Hacking
🇺🇸
kosada.com
2026-10-29 13:57:51
UTC ·
(2 weeks ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B4%5D=34&topics%5B6%5D=61&topics%5B7%5D=38&topics%5B8%5D=65 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B4%5D=34&topics%5B6%5D=61&topics%5B7%5D=38&topics%5B8%5D=65 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇩🇪
FeG Deutschland
2026-10-25 01:36:36
UTC ·
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
🇨🇭
backslash
2026-10-19 10:36:01
UTC ·
(3 weeks ago)
block ruleset 0C5DD2DACEA35449E8B6505BDB26517CBF836AC7
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-12 20:53:57
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 82.26.28.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 16:53:49.400693 2026] [security2:error] [pid 20224:tid 20224] [client 82.26.28.130:44515] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 82.26.28.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 16:53:49.400693 2026] [security2:error] [pid 20224:tid 20224] [client 82.26.28.130:44515] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||justinrudd.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "justinrudd.com"] [uri "/MAILTO:[email protected] "] [unique_id "as1I3YRmdIE789rj3RhLYQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-10-12 17:32:38
UTC ·
(1 month ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=63&topics%5B2%5D=66&topics%5B3%5D=56&topics%5B4%5D=37 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=63&topics%5B2%5D=66&topics%5B3%5D=56&topics%5B4%5D=37 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇵🇱
Budyn
2026-10-10 04:13:34
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: elastic.dont-eat-the-pudding.xyz | URI: /.env | U ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: elastic.dont-eat-the-pudding.xyz | URI: /.env | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-09 21:09:17
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: beta.astropot.space | URI: /wp-admin/ | UA: Mozilla/5.0 (Maci ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: beta.astropot.space | URI: /wp-admin/ | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-09 10:53:56
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: k8s.budyn.ovh | URI: /.env | UA: Mozilla/5.0 (Mac ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: k8s.budyn.ovh | URI: /.env | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇫🇷
spot
2026-10-03 16:49:22
UTC ·
(1 month ago)
82.26.28.130 - - [03/Oct/2026:17:49:21 +0100] "GET /./../../viewforum.php?f=87&sid=779b633ff89285e716e0bef0e74f0122 HTTP/1.1" 400 863 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/ ...
show more
82.26.28.130 - - [03/Oct/2026:17:49:21 +0100] "GET /./../../viewforum.php?f=87&sid=779b633ff89285e716e0bef0e74f0122 HTTP/1.1" 400 863 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36"
...
show less
Web App Attack
VPN IP
🇩🇪
bescared
2026-09-28 08:13:58
UTC ·
(1 month ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-09-04 14:36:00
UTC ·
(2 months ago)
block ruleset 0C5DD2DACEA35449E8B6505BDB26517CBF836AC7
Bad Web Bot
