2025-02-16 19:50:12
(1 year ago)
$f2bV_matches
Brute-Force
🇩🇪
LRob
2025-02-13 12:40:22
(1 year ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
🇪🇸
el-brujo
2025-02-13 09:55:31
(1 year ago)
Cloudflare WAF: Request Path: /alfacgiapi/perl.alfa Request Query: Host: ns2.elhacker.net userAgent ...
show more
Cloudflare WAF: Request Path: /alfacgiapi/perl.alfa Request Query: Host: ns2.elhacker.net userAgent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Action: block Source: firewallManaged ASN Description: EKABI Country: BG Method: POST Timestamp: 2025-02-13T09:55:31Z ruleId: 0242110ae62e44028a13bf4834780914. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇬🇧
Mendip_Defender
2025-02-13 09:42:42
(1 year ago)
87.120.114.184 - - [13/Feb/2025:09:42:39 +0000] "POST /wp-plain.php HTTP/1.1" 301 162 "www.google.co ...
show more
87.120.114.184 - - [13/Feb/2025:09:42:39 +0000] "POST /wp-plain.php HTTP/1.1" 301 162 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
87.120.114.184 - - [13/Feb/2025:09:42:39 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
Hacking
Web App Attack
🇪🇸
el-brujo
2025-02-13 08:57:11
(1 year ago)
13/Feb/2025:09:57:10.209582 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
13/Feb/2025:09:57:10.209582 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 87.120.114.184] ModSecurity: Warning. Pattern match "(?:^|=)\\\\\\\\s*(?:{|\\\\\\\\s*\\\\\\\\(\\\\\\\\s*|\\\\\\\\w+=(?:[^\\\\\\\\s]*|\\\\\\\\$.*|\\\\\\\\$.*|<.*|>.*|\\\\\\\\'.*\\\\\\\\'|\\\\".*\\\\")\\\\\\\\s+|!\\\\\\\\s*|\\\\\\\\$)*\\\\\\\\s*(?:'|\\\\")*(?:[\\\\\\\\?\\\\\\\\*\\\\\\\\[\\\\\\\\]\\\\\\\\(\\\\\\\\)\\\\\\\\-\\\\\\\\|+\\\\\\\\w'\\\\"\\\\\\\\./\\\\\\\\\\\\\\\\]+/)?[\\\\\\\\\\\\\\\\'\\\\"]*(?:l[\\\\\\\\\\\\\\\\'\\\\"]*(?:s(?:[\\\\\\\\\\\\\\\\'\\\\"]*(?:b[\\\\\\\\\\\\\\\\'\\\\"]*_[\\\\\\\\\\\\\\\\'\\\\"]*r[\\\\\\\\\\\\\\\\'\\\\"]*e[\\\\\\\\\\\\\\\\'\\\\"]*l[\\\\\\\\\\\\\\\\' ..." at REQUEST_COOKIES:g. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "464"] [id "932150"] [msg "Remote Command Execution: Direct Unix Command Execution"] [data "Matched Data: echo found within REQUEST_COOKIES:g: echo Sp3ctra"] [severity "CRITICAL"] [ver
...
show less
Hacking
Web App Attack
🇪🇸
el-brujo
2025-02-13 08:57:10
(1 year ago)
Cloudflare WAF: Request Path: /alfacgiapi/perl.alfa Request Query: Host: hwagm.elhacker.net userAge ...
show more
Cloudflare WAF: Request Path: /alfacgiapi/perl.alfa Request Query: Host: hwagm.elhacker.net userAgent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Action: block Source: firewallManaged ASN Description: EKABI Country: BG Method: POST Timestamp: 2025-02-13T08:57:10Z ruleId: 0242110ae62e44028a13bf4834780914. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇺🇦
URAN Publishing Service
2025-02-13 08:09:59
(1 year ago)
87.120.114.184 - - [13/Feb/2025:10:09:58 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" ...
show more
87.120.114.184 - - [13/Feb/2025:10:09:58 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 275 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
87.120.114.184 - - [13/Feb/2025:10:09:59 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 279 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
Web App Attack
🇺🇸
octageeks.com
2025-02-13 05:08:38
(1 year ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇮🇩
Hamzah Yakub
2025-02-12 18:35:26
(1 year ago)
Hacking Attempt /wp-content/themes/seotheme/db.php
Hacking
Web App Attack
🇮🇩
securejdprop
2025-02-12 01:48:18
(1 year ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 87.120.114.184 per ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 87.120.114.184 performed 'crowdsecurity/http-bad-user-agent' (2 events over 3.620136ms) at 2025-02-12 01:48:16.890367094 +0000 UTC
show less
Bad Web Bot
Web App Attack
🇮🇩
[email protected]
2025-02-12 01:32:20
(1 year ago)
Attempts to find pages that do not exist on website.
Web App Attack
🇮🇩
Hamzah Yakub
2025-02-12 00:21:29
(1 year ago)
Hacking Attempt /wp-content/plugins/apikey/apikey.php
Hacking
Web App Attack
2025-02-11 23:33:35
(1 year ago)
wordpress-trap
Web App Attack
🇬🇧
Swiptly
2025-02-11 21:14:12
(1 year ago)
Multiple critical ModSecurity events
...
Web Spam
Bad Web Bot
2025-02-11 15:45:57
(1 year ago)
$f2bV_matches
Brute-Force