|
🇺🇸
Charlesiv
|
|
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 36352 (AS-COLOCROSSING)
...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 36352 (AS-COLOCROSSING)
Protocol: HTTP/1.1 (GET method)
Endpoint: /etc/passwd
Timestamp: 2025-06-12T05:34:02Z
Ray ID: 94e6fa142afe4bcd
UA: Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
show less
|
Bad Web Bot
|
|
|
🇪🇸
el-brujo
|
|
Cloudflare WAF: Request Path: /etc/passwd Request Query: Host: elhacker.net userAgent: Mozilla/5.0 ...
show more
Cloudflare WAF: Request Path: /etc/passwd Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1 Action: log Source: firewallManaged ASN Description: AS-COLOCROSSING Country: US Method: GET Timestamp: 2025-06-12T05:40:29Z ruleId: e35c9a670b864a3ba0203ffb1bc977d1. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
|
Hacking
SQL Injection
Web App Attack
|
|
|
🇺🇸
kosada.com
|
|
Web vulnerability probing
|
Web App Attack
|
|
|
🇬🇧
preissler.co.uk
|
|
Web scanning
|
Web App Attack
|
|
|
🇳🇱
ipoac.nl
|
|
[Wed May 28 16:17:25.086468 2025] [core:error] [pid 2349408:tid 2349836] [client 198.12.73.18:59486] ...
show more
[Wed May 28 16:17:25.086468 2025] [core:error] [pid 2349408:tid 2349836] [client 198.12.73.18:59486] AH10244: invalid URI path (///////../../../etc/passwd)
show less
|
Hacking
|
|
|
🇧🇪
Ivo Vynckier
|
|
198.12.73.18 - - [26/May/2025:00:26:31 +0200] "GET /?qs=%27%22%20teste=efx-1&search=%27%22%20teste=e ...
show more
198.12.73.18 - - [26/May/2025:00:26:31 +0200] "GET /?qs=%27%22%20teste=efx-1&search=%27%22%20teste=efx-2&query=%27%22%20teste=efx-3&keywords=%27%22%20teste=efx-4&term=%27%22%20teste=efx-5&text=%27%22%20teste=efx-6&input=%27%22%20teste=efx-7&value=%27%22%20teste=efx-8&username=%27%22%20teste=efx-9&password=%27%22%20teste=efx-10&name=%27%22%20teste=efx-11&email=%27%22%20teste=efx-12&comment=%27%22%20teste=efx-13&message=%27%22%20teste=efx-14&body=%27%22%20teste=efx-15&title=%27%22%20teste=efx-16&subject=%27%22%20teste=efx-17&description=%27%22%20teste=efx-18 HTTP/1.1" 403 498 "-" "Mozilla/5.0 (Knoppix; Linux i686; rv:121.0) Gecko/20100101 Firefox/121.0"
show less
|
Hacking
Brute-Force
|
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
|
Anonymous
|
|
Bot / seems abusive / Apache connections: 24
|
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
Charlesiv
|
|
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
ASN: 36352 (AS-CO ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
ASN: 36352 (AS-COLOCROSSING)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Query: ?dd=%27%22%20teste=efx-alfa82&de=%27%22%20teste=efx-alfa83&df=%27%22%20teste=efx-alfa84&dg=%27%22%20teste=efx-alfa85&dh=%27%22%20teste=efx-alfa86&di=%27%22%20teste=efx-alfa87&dj=%27%22%20teste=efx-alfa88&dk=%27%22%20teste=efx-alfa89&dl=%27%22%20teste=efx-alfa90&dm=%27%22%20teste=efx-alfa91&dn=%27%22%20teste=efx-alfa92&do=%27%22%20teste=efx-alfa93&dp=%27%22%20teste=efx-alfa94&dq=%27%22%20teste=efx-alfa95&dr=%27%22%20teste=efx-alfa96&ds=%27%22%20teste=efx-alfa97&dt=%27%22%20teste=efx-alfa98&du=%27%22%20teste=efx-alfa99&dv=%27%22%20teste=efx-alfa100&dw=%27%22%20teste=efx-alfa101&dx=%27%22%20teste=efx-alfa102&dy=%27%22%20teste=efx-alfa103&dz=%27%22%20teste=efx-alfa104
Timestamp: 2025-05-25T08:03:18Z
Ray ID: 945383f8ba864bbd
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.75 Safari/537.36
show less
|
Bad Web Bot
|
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
|
🇧🇪
Ivo Vynckier
|
|
198.12.73.18 - - [24/May/2025:15:39:53 +0200] "POST /___graphql HTTP/1.1" 403 498 "-" "Mozilla/5.0 ( ...
show more
198.12.73.18 - - [24/May/2025:15:39:53 +0200] "POST /___graphql HTTP/1.1" 403 498 "-" "Mozilla/5.0 (X11; Linux i686; rv:128.0) Gecko/20100101 Firefox/128.0"
198.12.73.18 - - [24/May/2025:15:39:53 +0200] "POST /altair HTTP/1.1" 403 498 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
198.12.73.18 - - [24/May/2025:15:39:54 +0200] "POST /explorer HTTP/1.1" 403 498 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Mobile/15E148 Safari/604.1"
198.12.73.18 - - [24/May/2025:15:39:54 +0200] "POST /graphiql HTTP/1.1" 403 498 "-" "Mozilla/5.0 (Debian; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0"
show less
|
Hacking
|
|
|
🇷🇺
cybertailor
|
|
2025/05/24 19:48:22 [error] 6739#0: *1053433 limiting requests, excess: 10.675 by zone "lr_slow", cl ...
show more
2025/05/24 19:48:22 [error] 6739#0: *1053433 limiting requests, excess: 10.675 by zone "lr_slow", client: 198.12.73.18, server: sysrq.in, request: "POST /graphql/schema.json HTTP/1.1", host: "sysrq.in"
...
show less
|
Bad Web Bot
|
|
|
🇪🇸
el-brujo
|
|
[Fri May 23 15:49:54.669609 2025] [proxy_fcgi:error] [pid 1789281:tid 1790020] [remote 198.12.73.18: ...
show more
[Fri May 23 15:49:54.669609 2025] [proxy_fcgi:error] [pid 1789281:tid 1790020] [remote 198.12.73.18:0] AH01071: Got error 'Primary script unknown\n'
[Fri May 23 15:49:55.528953 2025] [proxy_fcgi:error] [pid 1789279:tid 1789938] [remote 198.12.73.18:0] AH01071: Got error 'Primary script unknown\n'
...
show less
|
Hacking
Web App Attack
|
|
|
🇳🇱
Site.eu
|
|
Excessive 404/403 errors
|
Brute-Force
|
|
|
🇷🇺
cybertailor
|
|
2025/05/23 01:59:46 [error] 6737#0: *887103 limiting requests, excess: 10.366 by zone "lr_slow", cli ...
show more
2025/05/23 01:59:46 [error] 6737#0: *887103 limiting requests, excess: 10.366 by zone "lr_slow", client: 198.12.73.18, server: sysrq.in, request: "GET /api/v5/orders HTTP/1.1", host: "sysrq.in"
...
show less
|
Bad Web Bot
|
|