๐ช๐ธ
el-brujo
2026-09-02 05:41:06
(6 hours ago)
02/Sep/2026:07:41:05.742604 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
02/Sep/2026:07:41:05.742604 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.172.41.110] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".resources"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "vlc.elhacker.net"] [uri "/vlc-winrt/2.6.0/VL
...
show less
Hacking
Web App Attack
Anonymous
2026-09-01 22:05:15
(14 hours ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
๐ซ๐ท
service Informatique
2026-08-31 04:00:37
(2 days ago)
GET /robots.txt
Web App Attack
๐จ๐ญ
backslash
2026-08-30 17:42:00
(2 days ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
๐ช๐ธ
el-brujo
2026-08-30 13:48:07
(2 days ago)
30/Aug/2026:15:48:06.886757 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
30/Aug/2026:15:48:06.886757 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.172.41.110] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".Com"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "papyre.elhacker.info"] [uri "/T/Torbe/Putalocura.C
...
show less
Hacking
Web App Attack
๐ซ๐ท
bigorre.org
2026-08-29 17:12:35
(3 days ago)
unidentified crawl, no bot reference in user agent
Bad Web Bot
๐จ๐ฆ
polycoda
2026-08-29 15:26:26
(3 days ago)
โฑ๏ธ Excessive scraping in short period of time
Hacking
Web App Attack
๐ฎ๐ฉ
sockominfo
2026-08-29 11:00:53
(4 days ago)
Webshell discovery success (Response: 200). Threat Score: 8.9/10 (CRITICAL). Confidence: 70%. CVSS v ...
show more
Webshell discovery success (Response: 200). Threat Score: 8.9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 93%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Email Spam
๐ฎ๐ฉ
sockominfo
2026-08-29 09:00:53
(4 days ago)
Webshell discovery success (Response: 200). Threat Score: 9/10 (CRITICAL). Confidence: 70%. CVSS v3. ...
show more
Webshell discovery success (Response: 200). Threat Score: 9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 96%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Email Spam
๐ซ๐ท
Stara
2026-08-29 08:32:51
(4 days ago)
Automated block by CSF/LFD - suspicious activity detected
Brute-Force
Web App Attack
๐ฎ๐ฉ
sockominfo
2026-08-29 04:00:09
(4 days ago)
Webshell discovery success (Response: 200). Threat Score: 9.3/10 (CRITICAL). Reported by TangerangKo ...
show more
Webshell discovery success (Response: 200). Threat Score: 9.3/10 (CRITICAL). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Email Spam
๐ฎ๐ฉ
sockominfo
2026-08-29 03:00:12
(4 days ago)
Webshell discovery success (Response: 200). Threat Score: 9.2/10 (CRITICAL). Reported by TangerangKo ...
show more
Webshell discovery success (Response: 200). Threat Score: 9.2/10 (CRITICAL). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Email Spam
๐ฉ๐ช
jbcrn
2026-08-29 00:42:02
(4 days ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /deflagration.trekometer. User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; SleepBot/1.0; +http://sleepbot.com/) Chrome/131.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
sockominfo
2026-08-29 00:00:28
(4 days ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Email Spam