Anonymous
2024-10-03 06:51:20
(1 year ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Hacking
SQL Injection
Web App Attack
๐ง๐ช
Ivo Vynckier
2024-09-14 10:02:00
(1 year ago)
23.170.40.56 - - [13/Sep/2024:23:59:35 +0200] "POST /index.php?action=porte_plume_previsu HTTP/1.1" ...
show more
23.170.40.56 - - [13/Sep/2024:23:59:35 +0200] "POST /index.php?action=porte_plume_previsu HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
๐จ๐ฆ
yukon.ca
2024-09-14 01:53:34
(1 year ago)
WordPress Enforcement Protection: WordPress ValvePress Automatic Plugin SQL Injection (CVE-2024-2795 ...
show more
WordPress Enforcement Protection: WordPress ValvePress Automatic Plugin SQL Injection (CVE-2024-27956)
Port:80
show less
Hacking
Exploited Host
๐บ๐ธ
SiliSoftware
2024-09-14 00:34:34
(1 year ago)
/wp-content/plugins/wp-automatic/inc/csv.php
Web App Attack
๐ช๐ธ
el-brujo
2024-09-14 00:33:51
(1 year ago)
14/Sep/2024:02:33:50.549686 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
14/Sep/2024:02:33:50.549686 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 23.170.40.56] ModSecurity: Warning. Found 1 byte(s) in ARGS:auth outside range: 1-255. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "517"] [id "920270"] [msg "Invalid character in request (null character)"] [data "ARGS:auth=\\\\x00"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "ns2.elhacker.net"] [uri "/wp-content/plugins/wp-automatic/inc/csv.php"] [unique_id "ZuTZ7rl8F2FTZtFZdY-z9gAAnTU"]
...
show less
Hacking
Web App Attack
Anonymous
2024-09-14 00:21:59
(1 year ago)
wordpress-trap
Web App Attack
๐ฆ๐บ
MAGIC
2024-09-14 00:03:09
(1 year ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐บ๐ธ
TheMadBeaker
2024-09-13 23:33:44
(1 year ago)
Fail2Ban Ban Triggered
Wordpress Attack Attempt
Brute-Force
Web App Attack
๐ฉ๐ช
ps-center
2024-09-13 23:24:38
(1 year ago)
MYH: Web Attack POST /wp-content/plugins/wp-automatic/inc/csv.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
๐ช๐ธ
el-brujo
2024-09-13 18:27:12
(1 year ago)
Cloudflare WAF: Request Path: /index.php Request Query: ?action=porte_plume_previsu Host: www.elhack ...
show more
Cloudflare WAF: Request Path: /index.php Request Query: ?action=porte_plume_previsu Host: www.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Action: block Source: firewallManaged ASN Description: CLOUDSOURCE-01 Country: US Method: POST Timestamp: 2024-09-13T18:27:12Z ruleId: e7e4b386797e417c998d872956c390a1. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
๐ช๐ธ
el-brujo
2024-09-13 17:49:51
(1 year ago)
13/Sep/2024:19:49:51.619658 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
13/Sep/2024:19:49:51.619658 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 23.170.40.56] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "703"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "elhacker.info"] [uri "/index.php"] [unique_id "ZuR7P_2kXTjlqhB7wVCyagABnxo"]
...
show less
Hacking
Web App Attack
๐บ๐ธ
mnsf
2024-09-13 17:05:20
(1 year ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
๐ฎ๐ฉ
Burayot
2024-09-13 16:40:21
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 23.170.40.56 (US/United States/-): 2 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 23.170.40.56 (US/United States/-): 2 in the last 3600 secs
show less
Web App Attack
๐ฆ๐บ
afleventoffice.com.au
2024-09-13 14:56:05
(1 year ago)
Web App Attack
๐ฒ๐พ
Rizzy
2024-09-13 13:14:20
(1 year ago)
Multiple WAF Violations
Brute-Force
Web App Attack