๐ฉ๐ช
Vegascosmetics
2025-06-25 21:50:54
(1 year ago)
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
๐ช๐ธ
el-brujo
2025-06-24 07:21:00
(1 year ago)
Cloudflare WAF: Request Path: /.env Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macin ...
show more
Cloudflare WAF: Request Path: /.env Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 Action: block Source: firewallManaged ASN Description: PHMGMT-AS1 Country: IT Method: GET Timestamp: 2025-06-24T07:21:00Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
๐ฉ๐ช
ManagedStack
2025-06-24 07:07:22
(1 year ago)
Wordpress Attack
Web App Attack
Anonymous
2025-06-24 06:55:33
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_MODSEC
Brute-Force
SSH
๐ฉ๐ช
Hazzard
2025-06-24 06:47:50
(1 year ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted])
Port Scan
๐ช๐ธ
el-brujo
2025-06-24 06:46:23
(1 year ago)
Cloudflare WAF: Request Path: /.env Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macin ...
show more
Cloudflare WAF: Request Path: /.env Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 Action: block Source: firewallManaged ASN Description: PHMGMT-AS1 Country: IT Method: GET Timestamp: 2025-06-24T06:46:23Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
๐จ๐ฑ
darkside
2025-06-24 06:44:04
(1 year ago)
128.90.161.97 - - [24/Jun/2025:02:44:00 -0400] "GET /.env HTTP/1.1" 404 76288 "-" "Mozilla/5.0 (Maci ...
show more
128.90.161.97 - - [24/Jun/2025:02:44:00 -0400] "GET /.env HTTP/1.1" 404 76288 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
128.90.161.97 - - [24/Jun/2025:02:44:02 -0400] "GET /wp-content/ HTTP/1.1" 404 76288 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
Web App Attack
๐ฎ๐ฉ
Burayot
2025-06-24 06:42:01
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 128.90.161.97 (IT/Italy/undefined.h ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 128.90.161.97 (IT/Italy/undefined.hostname.localhost): 1 in the last 3600 secs
show less
Web App Attack
๐ง๐ช
cmbplf
2025-06-24 06:21:31
(1 year ago)
846 requests with url.path *.env
Brute-Force
Bad Web Bot
๐บ๐ธ
ipblock.com
2025-06-24 05:55:00
(1 year ago)
IPBlock protected site ID [4055-d][s=04].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-06-24 05:53:11
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 128.90.161.97 (undefined.hostname.localhost): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 128.90.161.97 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 24 01:53:07.902136 2025] [security2:error] [pid 2204551:tid 2204551] [client 128.90.161.97:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "easy-byte.net"] [uri "/.env"] [unique_id "aFo9Qw5c6Z--QxV6Ls6fZwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Globe2
2025-06-24 05:51:20
(1 year ago)
[24/Jun/2025:06:42:31 +0100] D8oznqoxRv6R6KxTMl2q-xY0 128.90.161.97 52900 91.212.212.13 80
[24/Jun/2 ...
show more
[24/Jun/2025:06:42:31 +0100] D8oznqoxRv6R6KxTMl2q-xY0 128.90.161.97 52900 91.212.212.13 80
[24/Jun/2025:06:42:31 +0100] Zzrg9Vz6kisEYtMLhycylElK 128.90.161.97 56876 91.212.212.13 80
[24/Jun/2025:06:51:19 +0100] jpfDO3Di7ojL73yl24L-XSau 128.90.161.97 64799 91.212.212.13 80
...
show less
Web App Attack
๐บ๐ธ
kosada.com
2025-06-24 05:20:58
(1 year ago)
Web vulnerability probing
Web App Attack
๐ฎ๐ณ
zam
2025-06-24 05:05:20
(1 year ago)
128.90.161.97 - - [24/Jun/2025:05:05:18 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin. ...
show more
128.90.161.97 - - [24/Jun/2025:05:05:18 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 275
show less
Web App Attack
๐ฉ๐ช
conseilgouz
2025-06-24 04:04:00
(1 year ago)
vee-17 : Block hidden directories=>/.env(/)
Hacking