🇺🇦
URAN Publishing Service
2026-07-28 05:05:39
(12 hours ago)
160.187.211.130 - - [28/Jul/2026:08:05:38 +0300] "GET /wp-login.php HTTP/1.1" 404 4769 "https://duck ...
show more
160.187.211.130 - - [28/Jul/2026:08:05:38 +0300] "GET /wp-login.php HTTP/1.1" 404 4769 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0"
160.187.211.130 - - [28/Jul/2026:08:05:39 +0300] "GET /wp-login.php HTTP/1.1" 301 671 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇮🇩
sockominfo
2026-07-28 04:00:53
(13 hours ago)
WP2Shell FULL EXPLOIT CHAIN: all SQLi+RCE indicators confirmed from 160.187.211.130. Threat Score: 9 ...
show more
WP2Shell FULL EXPLOIT CHAIN: all SQLi+RCE indicators confirmed from 160.187.211.130. Threat Score: 9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 96%. MITRE ATT&CK: T1190 (Exploit Public-Facing Application). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Brute-Force
🇮🇩
sockominfo
2026-07-28 03:00:30
(14 hours ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Brute-Force
🇮🇩
sockominfo
2026-07-28 02:00:09
(15 hours ago)
WP2Shell FULL EXPLOIT CHAIN: all SQLi+RCE indicators confirmed from 160.187.211.130. Threat Score: 9 ...
show more
WP2Shell FULL EXPLOIT CHAIN: all SQLi+RCE indicators confirmed from 160.187.211.130. Threat Score: 9.2/10 (CRITICAL). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Brute-Force
🇩🇪
FeG Deutschland
2026-07-27 05:11:04
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
🇨🇦
1gz
2026-07-27 02:33:39
(1 day ago)
Triggered Cloudflare WAF (firewallManaged) from MY.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST met ...
show more
Triggered Cloudflare WAF (firewallManaged) from MY.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (compatible; CVE-2026-63030-checker)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
dayda.net
2026-07-26 03:29:13
(2 days ago)
query: rest_route=/batch/v1
Bad Web Bot
🇩🇪
FeG Deutschland
2026-07-26 03:22:43
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
🇩🇪
HandyTreff.de
2026-07-26 03:15:34
(2 days ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -45.461 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -45.461 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (compatible; CVE-2026-63030-checker)
show less
Web App Attack
Bad Web Bot
🇨🇦
1gz
2026-07-26 00:48:53
(2 days ago)
Triggered Cloudflare WAF (firewallManaged) from MY.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST met ...
show more
Triggered Cloudflare WAF (firewallManaged) from MY.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (compatible; CVE-2026-63030-checker)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇭🇳
unph
2026-07-24 05:07:34
(4 days ago)
Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin
Brute-Force
🇺🇦
URAN Publishing Service
2026-07-24 05:06:50
(4 days ago)
160.187.211.130 - - [24/Jul/2026:08:06:45 +0300] "GET /administrator/components/com_jce/jce.xml HTTP ...
show more
160.187.211.130 - - [24/Jul/2026:08:06:45 +0300] "GET /administrator/components/com_jce/jce.xml HTTP/1.1" 404 4750 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36"
160.187.211.130 - - [24/Jul/2026:08:06:49 +0300] "GET /administrator/components/com_jce/editor.xml HTTP/1.1" 404 4751 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.57 Safari/537.36"
...
show less
Web App Attack
🇮🇩
sockominfo
2026-07-23 06:00:28
(5 days ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Web App Attack
🇮🇩
sockominfo
2026-07-23 05:01:30
(5 days ago)
Suspicious Python Requests with Malicious Path. Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CV ...
show more
Suspicious Python Requests with Malicious Path. Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1210 (Exploitation of Remote Services). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-07-23 04:00:09
(5 days ago)
Suspicious Python Requests with Malicious Path. Threat Score: 7.5/10 (HIGH). Reported by TangerangKo ...
show more
Suspicious Python Requests with Malicious Path. Threat Score: 7.5/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack