RCE attempt detected. The source attempted to exploit a Netgear CGI endpoint to delete `/tmp`, downl ...
show moreRCE attempt detected. The source attempted to exploit a Netgear CGI endpoint to delete `/tmp`, download and execute a remote malware payload.
Nice try. **403 better luck elsewhere.**
show less
Malicious RCE/command injection attempt. The attacker attempted to download and execute the Mozi.a m ...
show moreMalicious RCE/command injection attempt. The attacker attempted to download and execute the Mozi.a malware payload via wget, chmod, and /tmp execution, unfortunately, the playground was closed.
show less
Javascript Injection abuse Malicious attempt detected and blocked by ModSecurity. POST request to / ...
show moreJavascript Injection abuse Malicious attempt detected and blocked by ModSecurity. POST request to / triggered a JavaScript injection rule. Request was blocked with HTTP 403.
show less
Automated malicious reconnaissance attempting to locate exposed environment files, secrets, configur ...
show moreAutomated malicious reconnaissance attempting to locate exposed environment files, secrets, configuration data, and other sensitive application resources. The source is systematically probing for files that may contain credentials, API keys, database connections, or other valuable configuration information. Nice try. Nothing sensitive was left lying around.
show less
Automated malicious reconnaissance attempting to locate exposed environment files, secrets, configur ...
show moreAutomated malicious reconnaissance attempting to locate exposed environment files, secrets, configuration data, and other sensitive application resources. The source is systematically probing for files that may contain credentials, API keys, database connections, or other valuable configuration information. Nice try. Nothing sensitive was left lying around.
show less
Automated malicious reconnaissance attempting to locate exposed environment files, secrets, configur ...
show moreAutomated malicious reconnaissance attempting to locate exposed environment files, secrets, configuration data, and other sensitive application resources. The source is systematically probing for files that may contain credentials, API keys, database connections, or other valuable configuration information. Nice try. Nothing sensitive was left lying around.
show less
Automated malicious reconnaissance attempting to locate exposed environment files, secrets, configur ...
show moreAutomated malicious reconnaissance attempting to locate exposed environment files, secrets, configuration data, and other sensitive application resources. The source is systematically probing for files that may contain credentials, API keys, database connections, or other valuable configuration information. Nice try. Nothing sensitive was left lying around.
show less
Attempted to use encoded path traversal to reach a system shell through a CGI endpoint, apparently h ...
show moreAttempted to use encoded path traversal to reach a system shell through a CGI endpoint, apparently hoping the server would hand over command execution. It didn't.
show less
Automated reconnaissance and vulnerability scanning detected. The source IP repeatedly sent requests ...
show moreAutomated reconnaissance and vulnerability scanning detected. The source IP repeatedly sent requests to numerous unusual and device/application-specific endpoints, including HNAP1 and random Odin HTTP call paths. This activity appears to be automated probing for vulnerable services or exposed endpoints. All unauthorized requests were blocked by ModSecurity with HTTP 403 responses.
show less
Automated reconnaissance and vulnerability scanning detected. The source IP repeatedly sent requests ...
show moreAutomated reconnaissance and vulnerability scanning detected. The source IP repeatedly sent requests to numerous unusual and device/application-specific endpoints, including HNAP1 and random Odin HTTP call paths. This activity appears to be automated probing for vulnerable services or exposed endpoints. All unauthorized requests were blocked by ModSecurity with HTTP 403 responses.
show less
Javascript Injection abuse Malicious attempt detected and blocked by ModSecurity. POST request to / ...
show moreJavascript Injection abuse Malicious attempt detected and blocked by ModSecurity. POST request to / triggered a JavaScript injection rule. Request was blocked with HTTP 403.
show less
Automated reconnaissance/scanning activity detected. The source IP repeatedly probed the web server ...
show moreAutomated reconnaissance/scanning activity detected. The source IP repeatedly probed the web server for multiple WordPress-related files and endpoints, including login, administrative, and other common WordPress paths. The requests were unauthorized and were blocked by ModSecurity with HTTP 403 responses.
show less
Automated malicious reconnaissance attempting to locate exposed environment files, secrets, configur ...
show moreAutomated malicious reconnaissance attempting to locate exposed environment files, secrets, configuration data, and other sensitive application resources. The source is systematically probing for files that may contain credentials, API keys, database connections, or other valuable configuration information. Nice try. Nothing sensitive was left lying around.
show less
Automated malicious reconnaissance attempting to locate exposed environment files, secrets, configur ...
show moreAutomated malicious reconnaissance attempting to locate exposed environment files, secrets, configuration data, and other sensitive application resources. The source is systematically probing for files that may contain credentials, API keys, database connections, or other valuable configuration information. Nice try. Nothing sensitive was left lying around.
show less
Amazon Javascript Injection abuse Malicious attempt detected and blocked by ModSecurity. POST reques ...
show moreAmazon Javascript Injection abuse Malicious attempt detected and blocked by ModSecurity. POST request to / triggered a JavaScript injection rule. Request was blocked with HTTP 403.
show less
Attempted to use encoded path traversal to reach a system shell through a CGI endpoint, apparently h ...
show moreAttempted to use encoded path traversal to reach a system shell through a CGI endpoint, apparently hoping the server would hand over command execution. It didn't.
show less
Automated malicious reconnaissance attempting to locate exposed environment files, secrets, configur ...
show moreAutomated malicious reconnaissance attempting to locate exposed environment files, secrets, configuration data, and other sensitive application resources. The source is systematically probing for files that may contain credentials, API keys, database connections, or other valuable configuration information. Nice try. Nothing sensitive was left lying around.
show less
Google Automated malicious reconnaissance attempting to locate exposed environment files, secrets, c ...
show moreGoogle Automated malicious reconnaissance attempting to locate exposed environment files, secrets, configuration data, and other sensitive application resources. The source is systematically probing for files that may contain credentials, API keys, database connections, or other valuable configuration information. Nice try. Nothing sensitive was left lying around.
show less
Google Automated malicious reconnaissance attempting to locate exposed environment files, secrets, c ...
show moreGoogle Automated malicious reconnaissance attempting to locate exposed environment files, secrets, configuration data, and other sensitive application resources. The source is systematically probing for files that may contain credentials, API keys, database connections, or other valuable configuration information. Nice try. Nothing sensitive was left lying around.
show less
Google Automated malicious reconnaissance attempting to locate exposed environment files, secrets, c ...
show moreGoogle Automated malicious reconnaissance attempting to locate exposed environment files, secrets, configuration data, and other sensitive application resources. The source is systematically probing for files that may contain credentials, API keys, database connections, or other valuable configuration information. Nice try. Nothing sensitive was left lying around.
show less
Google Automated malicious reconnaissance attempting to locate exposed environment files, secrets, c ...
show moreGoogle Automated malicious reconnaissance attempting to locate exposed environment files, secrets, configuration data, and other sensitive application resources. The source is systematically probing for files that may contain credentials, API keys, database connections, or other valuable configuration information. Nice try. Nothing sensitive was left lying around.
show less
Amazon Javascript Injection abuse Malicious attempt detected and blocked by ModSecurity. POST reques ...
show moreAmazon Javascript Injection abuse Malicious attempt detected and blocked by ModSecurity. POST request to / triggered a JavaScript injection rule. Request was blocked with HTTP 403.
show less
Google Automated malicious reconnaissance attempting to locate exposed environment files, secrets, c ...
show moreGoogle Automated malicious reconnaissance attempting to locate exposed environment files, secrets, configuration data, and other sensitive application resources. The source is systematically probing for files that may contain credentials, API keys, database connections, or other valuable configuration information. Nice try. Nothing sensitive was left lying around.
show less
Google Automated malicious reconnaissance attempting to locate exposed environment files, secrets, c ...
show moreGoogle Automated malicious reconnaissance attempting to locate exposed environment files, secrets, configuration data, and other sensitive application resources. The source is systematically probing for files that may contain credentials, API keys, database connections, or other valuable configuration information. Nice try. Nothing sensitive was left lying around.
show less
Web App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.