MWA SOC
2025-03-24 11:53:51
(3 days ago)
Hacking
exxos
2025-03-11 15:20:00
(2 weeks ago)
Attacks with Bad user agents
Hacking
MrMac
2025-03-09 07:04:10
(2 weeks ago)
TCP/80,443,8080,8888,45634 (350 packets total) over 7.0 days
Port Scan
Mark Marks
2025-03-06 12:36:50
(3 weeks ago)
Unauthorized connection attempt detected port 8080
Hacking
Per-Erik Runebert
2025-03-06 09:39:11
(3 weeks ago)
Excessive unauthorized requests
Hacking
Anonymous
2025-03-06 04:50:10
(3 weeks ago)
Reported from Nginx log analysis 4. Log: 141.255.166.90 - - [05/Mar/2025:xx:xx:xx 0100] "GET /cgi-b ... show more Reported from Nginx log analysis 4. Log: 141.255.166.90 - - [05/Mar/2025:xx:xx:xx 0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" xxx xxx "-" "-" "-" "CH Switzerland Zurich" "AS51852" "Private Layer INC" | 141.255.166.90 - - [05/Mar/2025:xx:xx:xx 0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" xxx xxx "-" "-" "-" "CH Switzerland Zurich" "AS51852" "Private Layer INC" | 141.255.166.90 - - [05/Mar/2025:xx:xx:xx 0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" xxx xxx "-" "-" "-" "CH Switzerland Zurich" "AS51852" "Private Layer INC" show less
Port Scan
Brute-Force
SSH
b4un0
2025-03-06 00:04:35
(3 weeks ago)
Auto-report from pfSense: Detected suspicious activity.
Brute-Force
SSH
JPPO
2025-03-05 23:36:46
(3 weeks ago)
Multiport scan 4 ports : 80(x168) 443(x162) 8080(x154) 8888(x149)
Port Scan
Murazaki
2025-03-05 23:00:31
(3 weeks ago)
82.67.76.4 141.255.166.90 - - [05/Mar/2025:10:26:42 +0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1 ... show more 82.67.76.4 141.255.166.90 - - [05/Mar/2025:10:26:42 +0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 503 190 "http://82.67.76.4:80/cgi-bin/luci/;stok=/locale" "-" "-"
82.67.76.4 141.255.166.90 - - [05/Mar/2025:11:20:24 +0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 503 190 "http://82.67.76.4:80/cgi-bin/luci/;stok=/locale" "-" "-"
82.67.76.4 141.255.166.90 - - [05/Mar/2025:13:18:41 +0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 503 190 "-" "-" "-"
82.67.76.4 141.255.166.90 - - [05/Mar/2025:13:51:56 +0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 503 190 "http://82.67.76.4:80/cgi-bin/luci/;stok=/locale" "-" "-"
82.67.76.4 141.255.166.90 - - [05/Mar/2025:14:42:53 +0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 503 190 "http://82.67.76.4:80/cgi-bin/luci/;stok=/locale" "-" "-"
... show less
Bad Web Bot
Cynar & Cinny
2025-03-05 20:42:42
(3 weeks ago)
ufw_block_log_banned
Port Scan
powersec
2025-03-05 20:01:41
(3 weeks ago)
Malicious Network Traffic. Request: GET /cgi-bin/luci/;stok=/locale HTTP/1.1
Hacking
Bad Web Bot
Web App Attack
Anonymous
2025-03-05 17:54:18
(3 weeks ago)
Reported from Nginx log analysis 19. Log: 141.255.166.90 - - [05/Mar/2025:xx:xx:xx 0000] "GET /cgi- ... show more Reported from Nginx log analysis 19. Log: 141.255.166.90 - - [05/Mar/2025:xx:xx:xx 0000] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" xxx xxx "-" "-" "-" "CH Switzerland Zurich" "AS51852" "Private Layer INC" show less
Port Scan
Brute-Force
SSH
Anonymous
2025-03-05 16:56:59
(3 weeks ago)
Reported from Nginx log analysis 18. Log: 141.255.166.90 - - [05/Mar/2025:xx:xx:xx 0100] "GET /cgi- ... show more Reported from Nginx log analysis 18. Log: 141.255.166.90 - - [05/Mar/2025:xx:xx:xx 0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" xxx xxx "-" "-" "-" "CH Switzerland Zurich" "AS51852" "Private Layer INC" | 141.255.166.90 - - [05/Mar/2025:xx:xx:xx 0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" xxx xxx "-" "-" "-" "CH Switzerland Zurich" "AS51852" "Private Layer INC" show less
Port Scan
Brute-Force
SSH
rtbh.com.tr
2025-03-05 16:49:13
(3 weeks ago)
list.rtbh.com.tr report: tcp/443, tcp/80, tcp/8080, tcp/8888
Brute-Force
diego
2025-03-05 14:12:29
(3 weeks ago)
[probe-68-69] 2025-03-05 14:12:29, Client: 141.255.166.90:51224, Protocol: 6, Unauthorized activity ... show more [probe-68-69] 2025-03-05 14:12:29, Client: 141.255.166.90:51224, Protocol: 6, Unauthorized activity to HTTP: GET /cgi-bin/luci/;stok=/locale show less
Web App Attack