๐บ๐ธ
104.23.243.44
1 hour ago
04/Nov/2026:07:12:34.160722 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
04/Nov/2026:07:12:34.160722 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 104.23.243.44] ModSecurity: Warning. Pattern match "(?:^|=)\\\\\\\\s*(?:{|\\\\\\\\s*\\\\\\\\(\\\\\\\\s*|\\\\\\\\w+=(?:[^\\\\\\\\s]*|\\\\\\\\$.*|\\\\\\\\$.*|<.*|>.*|\\\\\\\\'.*\\\\\\\\'|\\\\".*\\\\")\\\\\\\\s+|!\\\\\\\\s*|\\\\\\\\$)*\\\\\\\\s*(?:'|\\\\")*(?:[\\\\\\\\?\\\\\\\\*\\\\\\\\[\\\\\\\\]\\\\\\\\(\\\\\\\\)\\\\\\\\-\\\\\\\\|+\\\\\\\\w'\\\\"\\\\\\\\./\\\\\\\\\\\\\\\\]+/)?[\\\\\\\\\\\\\\\\'\\\\"]*(?:l[\\\\\\\\\\\\\\\\'\\\\"]*(?:s(?:[\\\\\\\\\\\\\\\\'\\\\"]*(?:b[\\\\\\\\\\\\\\\\'\\\\"]*_[\\\\\\\\\\\\\\\\'\\\\"]*r[\\\\\\\\\\\\\\\\'\\\\"]*e[\\\\\\\\\\\\\\\\'\\\\"]*l[\\\\\\\\\\\\\\\\' ..." at ARGS_NAMES:php echo esc_url( add_query_arg( array( 'action' . [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "464"] [id "932150"] [msg "Remote Command Execution: Direct Unix Command Execution"] [data "Matched Data: php found within ARGS_NAMES:php echo
...
show less
Hacking
Web App Attack
๐บ๐ธ
166.166.133.104
1 hour ago
T-Pot Honeypot (Honeypots): Automated attack on port 5900/VNC
Hacking
Web App Attack
๐ซ๐ท
51.159.172.24
1 hour ago
04/Nov/2026:07:09:15.602216 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
04/Nov/2026:07:09:15.602216 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 51.159.172.24] ModSecurity: Rule 55bc6eecb3e0 [id "932105"][file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "159"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "elhacker.info"] [uri "/"] [unique_id "aurMC7HVC614Inq4m1kTlgAAAws"]
...
show less
Hacking
Web App Attack
๐ช๐น
196.188.93.169
1 hour ago
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T06:08:54Z and 2026-11-0 ...
show more
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T06:08:54Z and 2026-11-04T06:08:56Z
show less
Brute-Force
SSH
๐จ๐ณ
180.100.212.177
1 hour ago
T-Pot Honeypot (Cowrie): Automated attack on port 22/SSH
Brute-Force
SSH
๐บ๐ธ
170.106.160.90
1 hour ago
04/Nov/2026:07:08:46.063100 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
04/Nov/2026:07:08:46.063100 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 170.106.160.90] ModSecurity: Warning. Pattern match "\\\\\\\\b(?:keep-alive|close),\\\\\\\\s?(?:keep-alive|close)\\\\\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "339"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "alpine.elhacker.net"] [uri "/"] [unique_id "aurL7pMQN71lw1eFaTdRjAAABOE"]
...
show less
Hacking
Web App Attack
๐ท๐ด
2.57.121.112
1 hour ago
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T06:08:22Z and 2026-11-0 ...
show more
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T06:08:22Z and 2026-11-04T06:08:24Z
show less
Brute-Force
SSH
๐ฐ๐ท
1.212.225.99
1 hour ago
2026-11-04T03:56:15.350225 ns2.elhacker.net postfix/smtpd[147183]: warning: unknown[1.212.225.99]: S ...
show more
2026-11-04T03:56:15.350225 ns2.elhacker.net postfix/smtpd[147183]: warning: unknown[1.212.225.99]: SASL PLAIN authentication failed: authentication failure, sasl_username=abderramah
2026-11-04T07:08:05.312294 ns2.elhacker.net postfix/smtpd[235281]: warning: unknown[1.212.225.99]: SASL PLAIN authentication failed: authentication failure, [email protected]
...
show less
Hacking
Brute-Force
๐ฏ๐ต
218.219.193.151
1 hour ago
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T06:08:03Z and 2026-11-0 ...
show more
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T06:08:03Z and 2026-11-04T06:08:06Z
show less
Brute-Force
SSH
๐บ๐ธ
216.22.13.194
1 hour ago
2026-11-04T07:07:57.762539 ns2.elhacker.net proftpd[235312]: session[235312] 0.0.0.0 (216.22.13.194[ ...
show more
2026-11-04T07:07:57.762539 ns2.elhacker.net proftpd[235312]: session[235312] 0.0.0.0 (216.22.13.194[216.22.13.194]): USER root (Login failed): Incorrect password
2026-11-04T07:08:00.770811 ns2.elhacker.net proftpd[235320]: session[235320] 0.0.0.0 (216.22.13.194[216.22.13.194]): USER root (Login failed): Incorrect password
...
show less
FTP Brute-Force
๐ธ๐ช
78.70.41.148
1 hour ago
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T06:07:06Z and 2026-11-0 ...
show more
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T06:07:06Z and 2026-11-04T06:07:07Z
show less
Brute-Force
SSH
๐บ๐ธ
23.95.197.245
1 hour ago
T-Pot Honeypot (Cowrie): Automated attack on port 22/SSH
Brute-Force
SSH
๐ต๐ฑ
151.115.73.238
1 hour ago
04/Nov/2026:07:06:09.763733 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
04/Nov/2026:07:06:09.763733 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 151.115.73.238] ModSecurity: Rule 55bc6eecb3e0 [id "932105"][file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "159"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "elhacker.info"] [uri "/"] [unique_id "aurLUbHVC614Inq4m1kSGQAAAxc"]
...
show less
Hacking
Web App Attack
๐จ๐ด
181.52.113.102
1 hour ago
2026-11-04T05:52:40.120093 ns2.elhacker.net postfix/smtpd[200978]: warning: unknown[181.52.113.102]: ...
show more
2026-11-04T05:52:40.120093 ns2.elhacker.net postfix/smtpd[200978]: warning: unknown[181.52.113.102]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-11-04T07:05:02.154871 ns2.elhacker.net postfix/smtpd[226944]: warning: unknown[181.52.113.102]: SASL LOGIN authentication failed: authentication failure, [email protected]
...
show less
Hacking
Brute-Force
๐ฏ๐ต
34.146.248.7
1 hour ago
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T06:04:03Z and 2026-11-0 ...
show more
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T06:04:03Z and 2026-11-04T06:04:06Z
show less
Brute-Force
SSH
248.135.104.155
2 hours ago
04/Nov/2026:07:01:58 +0100cf-connecting-ip: 248.135.104.155
04/Nov/2026:07:01:58 +0100cf-visitor: {" ...
show more
04/Nov/2026:07:01:58 +0100cf-connecting-ip: 248.135.104.155
04/Nov/2026:07:01:58 +0100cf-visitor: {"scheme":"https"}
04/Nov/2026:07:01:58 +0100
04/Nov/2026:07:01:58 +0100---uPBzacjh---D--
04/Nov/2026:07:01:58 +0100
04/Nov/2026:07:01:58 +0100---uPBzacjh---E--
04/Nov/2026:07:01:58 +0100<html>\x0d\x0a<head><title>403 Forbidden</title></head>\x0d\x0a<body>\x0d\x0a<center><h1>403 Forbidden</h1></center>\x0d\x0a<hr><center>nginx</center>\x0d\x0a</body>\x0d\x0a</html>\x0d\x0a
04/Nov/2026:07:01:58 +0100
04/Nov/2026:07:01:58 +0100---uPBzacjh---F--
04/Nov/2026:07:01:58 +0100HTTP/2.0 403
...
show less
Hacking
Web App Attack
242.139.38.1
2 hours ago
04/Nov/2026:07:01:11 +0100cf-connecting-ip: 242.139.38.1
04/Nov/2026:07:01:11 +0100cf-visitor: {"sch ...
show more
04/Nov/2026:07:01:11 +0100cf-connecting-ip: 242.139.38.1
04/Nov/2026:07:01:11 +0100cf-visitor: {"scheme":"https"}
04/Nov/2026:07:01:11 +0100
04/Nov/2026:07:01:11 +0100---jwFfHLG5---D--
04/Nov/2026:07:01:11 +0100
04/Nov/2026:07:01:11 +0100---jwFfHLG5---E--
04/Nov/2026:07:01:11 +0100<html>\x0d\x0a<head><title>403 Forbidden</title></head>\x0d\x0a<body>\x0d\x0a<center><h1>403 Forbidden</h1></center>\x0d\x0a<hr><center>nginx</center>\x0d\x0a</body>\x0d\x0a</html>\x0d\x0a
04/Nov/2026:07:01:11 +0100
04/Nov/2026:07:01:11 +0100---jwFfHLG5---F--
04/Nov/2026:07:01:11 +0100HTTP/2.0 403
...
show less
Hacking
Web App Attack
๐บ๐ธ
76.164.96.147
2 hours ago
2026-11-04T06:37:25.334418 ns2.elhacker.net postfix/smtpd[220483]: warning: dsl-dhcp-conrtxxahre-76- ...
show more
2026-11-04T06:37:25.334418 ns2.elhacker.net postfix/smtpd[220483]: warning: dsl-dhcp-conrtxxahre-76-164-96-147.consolidated.net[76.164.96.147]: SASL PLAIN authentication failed: authentication failure, sasl_username=wactor
2026-11-04T06:59:59.043400 ns2.elhacker.net postfix/smtpd[230966]: warning: dsl-dhcp-conrtxxahre-76-164-96-147.consolidated.net[76.164.96.147]: SASL PLAIN authentication failed: authentication failure, [email protected]
...
show less
Hacking
Brute-Force
๐ซ๐ท
78.232.61.226
2 hours ago
04/Nov/2026:06:58:57.149175 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
04/Nov/2026:06:58:57.149175 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 78.232.61.226] ModSecurity: Rule 55bc6eecb3e0 [id "932105"][file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"][line "159"] - Execution error - PCRE limits exceeded (-8): (null). [hostname "elhacker.info"] [uri "/"] [unique_id "aurJocCHETw8Tx8EXX89zAAACcg"]
...
show less
Hacking
Web App Attack
๐ต๐ฑ
89.68.245.7
2 hours ago
2026-11-04T06:20:20.077389 ns2.elhacker.net postfix/smtpd[213419]: warning: 89-68-245-7.dynamic.play ...
show more
2026-11-04T06:20:20.077389 ns2.elhacker.net postfix/smtpd[213419]: warning: 89-68-245-7.dynamic.play.pl[89.68.245.7]: SASL PLAIN authentication failed: authentication failure, sasl_username=angela
2026-11-04T06:58:51.064577 ns2.elhacker.net postfix/smtpd[230983]: warning: 89-68-245-7.dynamic.play.pl[89.68.245.7]: SASL PLAIN authentication failed: authentication failure, sasl_username=wactor
...
show less
Hacking
Brute-Force
๐บ๐ธ
64.207.225.55
2 hours ago
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T05:56:23Z and 2026-11-0 ...
show more
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T05:56:23Z and 2026-11-04T05:56:25Z
show less
Brute-Force
SSH
๐บ๐ธ
66.132.172.143
2 hours ago
T-Pot Honeypot (Honeypots): Automated attack on port 9200/ELASTICSEARCH
Port Scan
Hacking
๐จ๐ฆ
208.96.233.67
2 hours ago
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T05:55:10Z and 2026-11-0 ...
show more
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T05:55:10Z and 2026-11-04T05:55:13Z
show less
Brute-Force
SSH
๐ซ๐ท
212.47.246.245
2 hours ago
04/Nov/2026:06:55:09.286464 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
04/Nov/2026:06:55:09.286464 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 212.47.246.245] ModSecurity: Access denied with code 400 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/etc/httpd/conf.d/mod_security.conf"] [line "155"] [id "200002"] [msg "Multipart request body failed strict validation: PE 0, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM 0, IQ 0, IP 0, IH 0, FL 0"] [hostname "elhacker.info"] [uri "/"] [unique_id "aurIvb7J99DTid2RFWu2OgAAAFI"]
...
show less
Hacking
Web App Attack
๐ฎ๐ณ
4.240.100.218
2 hours ago
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T05:55:04Z and 2026-11-0 ...
show more
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-11-04T05:55:04Z and 2026-11-04T05:55:07Z
show less
Brute-Force
SSH