๐ช๐ธ
el-brujo
2026-10-08 10:39:21
(4 hours ago)
Cloudflare WAF: Request Path: /cgi-bin/php Request Query: ?-d+allow_url_include%3don+-d+auto_prepend ...
show more
Cloudflare WAF: Request Path: /cgi-bin/php Request Query: ?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input Host: live.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1) Action: block Source: firewallCustom ASN Description: Google LLC Country: SG Method: POST Timestamp: 2026-10-08T10:39:21Z ruleId: 6b2d48d0415e4adb9f099d85f54d1de6. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
๐ช๐ธ
el-brujo
2026-10-08 06:52:57
(8 hours ago)
08/Oct/2026:08:52:57.073601 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
08/Oct/2026:08:52:57.073601 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.143.219.34] ModSecurity: Warning. Pattern match "(?i)(?:\\\\\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "48"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI_RAW: /api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [hostname "grafana.elhacker.net"] [uri "/api/proc/self/environ"] [uniqu
...
show less
Hacking
Web App Attack
๐น๐ผ
kk_it_man
2026-10-08 06:46:02
(8 hours ago)
hack
Hacking
๐ซ๐ท
IRISIO
2026-10-08 06:39:22
(8 hours ago)
scans/SQL injection/spam posts : 119 queries
Web App Attack
SQL Injection
Anonymous
2026-10-08 05:24:22
(9 hours ago)
34.143.219.34 - - [08/Oct/2026:00:24:20 -0500] "GET /.env.production?import&raw HTTP/1.1" 301 277 "- ...
show more
34.143.219.34 - - [08/Oct/2026:00:24:20 -0500] "GET /.env.production?import&raw HTTP/1.1" 301 277 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 172.71.81.96
34.143.219.34 - - [08/Oct/2026:00:24:20 -0500] "GET /.env.development?import&raw HTTP/1.1" 301 278 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 172.71.81.96
34.143.219.34 - - [08/Oct/2026:00:24:20 -0500] "GET /.env.local?import&raw HTTP/1.1" 301 272 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 172.71.81.95
34.143.219.34 - - [08/Oct/2026:00:24:20 -0500] "GET /.env.local?raw HTTP/1.1" 301 261 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 172.71.81.96
34.143.219.34 - - [08/Oct/2026:00:24:20 -0500] "GET /.env.development?raw HTTP/1.1" 301 267 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.81.95
34.143.219.34 - - [08/Oct/2026:00:24:20 -0500] "GET /.env.lo
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
radardatelecom
2026-10-07 22:27:04
(16 hours ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-07 22:21:25
(16 hours ago)
Brute-Force
Web App Attack
Anonymous
2026-10-07 21:45:30
(17 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ต๐ฑ
wHosts
2026-10-07 21:35:11
(17 hours ago)
Blocked by Fail2Ban
Web App Attack
๐ฉ๐ช
rh24
2026-10-07 21:33:57
(17 hours ago)
(badbots) Bad bot user-agent [redacted] from 34.143.219.34 (SG/Singapore/34.219.143.34.bc.googleuser ...
show more
(badbots) Bad bot user-agent [redacted] from 34.143.219.34 (SG/Singapore/34.219.143.34.bc.googleusercontent.com)
show less
Hacking
๐บ๐ธ
IndigoRidge
2026-10-07 21:09:48
(17 hours ago)
34.143.219.34 - - [07/Oct/2026:17:09:44 -0400] "GET /api/system/fileView?file=/app/.env HTTP/1.1" 40 ...
show more
34.143.219.34 - - [07/Oct/2026:17:09:44 -0400] "GET /api/system/fileView?file=/app/.env HTTP/1.1" 404 61107 "https://westernupstatemls.com/api/system/fileView?file=/app/.env" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.143.219.34 - - [07/Oct/2026:17:09:44 -0400] "GET /userfiles?path=../../.env HTTP/1.1" 404 61107 "https://westernupstatemls.com/userfiles?path=../../.env" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
34.143.219.34 - - [07/Oct/2026:17:09:48 -0400] "GET /userfiles/x?path=../../.env HTTP/1.1" 404 61107 "https://westernupstatemls.com/userfiles/x?path=../../.env" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-07 20:53:24
(18 hours ago)
[ti-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <nam ...
show more
[ti-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 34.143.219.34 - - [07/Oct/2026:22:53:06 +0200] "POST /lib/terminal-xhr.php HTTP/1.1" 404 66517 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.143.219.34 - - [07/Oct/2026:22:53:08 +0200] "GET /build/manifest.json HTTP/1.1" 404 66431 "https://vastgoedkeur.nl/build/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.143.219.34 - - [07/Oct/2026:22:53:08 +0200] "GET /.vite/manifest.json HTTP/1.1" 404 61095 "https://vastgoedkeur.nl/.vite/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.143.219.34 - - [0
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-07 20:52:45
(18 hours ago)
Banned by Fail2Ban on server
Web App Attack
๐น๐ญ
thaizone.com
2026-10-07 20:18:24
(18 hours ago)
Brute Force Attack on a Web Resources (probe) #1
DDoS Attack
Web Spam
Brute-Force
Web App Attack
๐ท๐บ
Reaper
2026-10-07 19:53:14
(19 hours ago)
Repeated 404 errors from 34.143.219.34
Web App Attack