Activity: Potential web reconnaissance or probing activity, possibly from an elite threat actor, ind ...
show moreActivity: Potential web reconnaissance or probing activity, possibly from an elite threat actor, indicated by a GET request to the root endpoint resulting in a 400 error.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T21:01:59Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: http://<host_IP>/
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
X-Forwarded-For: -
show less
Activity: Potential web attack or scan activity from an unrecognized user agent targeting the web se ...
show moreActivity: Potential web attack or scan activity from an unrecognized user agent targeting the web server.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-30T05:45:12Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Hello-World/1.0
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt from a suspicious user agent
Action: Blocked by ...
show moreActivity: Potential port scan or web attack attempt from a suspicious user agent
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T01:20:22Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: SonicWALL Mobile Connect for OS X 5.0.11 (MacBookPro18,1; OS X 13.3.1 (22E261); build 5053)
X-Forwarded-For: -
show less
Activity: Potential port scan or malicious activity detected, possibly from an elite threat actor.
A ...
show moreActivity: Potential port scan or malicious activity detected, possibly from an elite threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T03:08:12Z
Protocol: UNKNOWN
Endpoint: x00x0E8x01x01x01x01x01x01x01x01x00x00x00x00x00
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential web activity from a mobile device, possibly probing or accessing the root endpoi ...
show moreActivity: Potential web activity from a mobile device, possibly probing or accessing the root endpoint, flagged as a generic threat or suspicious activity.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T04:08:01Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt from an elite threat actor
Action: Blocked by fi ...
show moreActivity: Potential port scan or web attack attempt from an elite threat actor
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T05:49:51Z
Protocol: UNKNOWN
Endpoint: x16x03x01x00{x01x00x00wx03x03x05xF7E7HYx8DxC6xCBx1Fnx94x96x93x17$q>xC8On+xC0SoxEAxACex10IxB5x9…➟ [Binary/non‑printable (fuzz‑probe) payload truncated]
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential web scan or probing activity from a script attempting to access the root endpoin ...
show moreActivity: Potential web scan or probing activity from a script attempting to access the root endpoint.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T06:10:39Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Python-urllib/3.9
X-Forwarded-For: -
show less
Activity: Attempted access to environment configuration file, potentially probing for sensitive data ...
show moreActivity: Attempted access to environment configuration file, potentially probing for sensitive data or misconfiguration.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T07:12:21Z
Protocol: GET HTTP/1.1
Endpoint: /api/.env
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt with suspicious payload
Action: Blocked by firew ...
show moreActivity: Potential port scan or web attack attempt with suspicious payload
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T09:39:37Z
Protocol: UNKNOWN
Endpoint: x16x03x01x01x17x01x00x01x13x03x03x7Fx09xD4x1Bx8Bx09x99xBEx17x98x85</xAA<x1BGxF2xB0x0CxD2xDE…➟ [Binary/non‑printable (fuzz‑probe) payload truncated]
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Port scan or web application attack attempt targeting cache management CGI script, potenti ...
show moreActivity: Port scan or web application attack attempt targeting cache management CGI script, potentially part of reconnaissance or exploitation activity.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-30T10:13:45Z
Protocol: GET HTTP/1.1
Endpoint: /squid-internal-mgr/cachemgr.cgi
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Potential web attack attempt or unauthorized access attempt
Action: Blocked by firewall
Re ...
show moreActivity: Potential web attack attempt or unauthorized access attempt
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-30T10:42:37Z
Protocol: POST HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: python-httpx/0.13.3
X-Forwarded-For: -
show less
Activity: Potential port scan or probing activity with suspicious payload
Action: Blocked by firewal ...
show moreActivity: Potential port scan or probing activity with suspicious payload
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T11:27:06Z
Protocol: UNKNOWN
Endpoint: x16x03x01x00ux01x00x00qx03x036xA4xF8:xB2//Fx10xB3I_&xC3xBECxBFx83xFCx94xD7xC0x9BxD8xB1xE5x19x…➟ [Binary/non‑printable (fuzz‑probe) payload truncated]
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt from a suspicious or malicious source
Action: Bl ...
show moreActivity: Potential port scan or web attack attempt from a suspicious or malicious source
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T13:01:46Z
Protocol: UNKNOWN
Endpoint: x00V8x82x94xD9x08xAE&xA4YxD9Hx1B#xB8xE02xC5?BqxF5xE1x18x87bxA6x1E|xDBxB7MxD6x8Fx1DxB4x22@xBAx…➟ [Binary/non‑printable (fuzz‑probe) payload truncated]
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt detected, possibly from a threat actor.
Action: ...
show moreActivity: Potential port scan or web attack attempt detected, possibly from a threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T13:58:12Z
Protocol: UNKNOWN
Endpoint: x03x00x00/*xE0x00x00x00x00x00Cookie: mstshash=Administr
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Port scan or web attack attempt from a known threat actor
Action: Blocked by firewall
Resp ...
show moreActivity: Port scan or web attack attempt from a known threat actor
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-30T15:30:08Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: curl/7.61.1
X-Forwarded-For: -
show less
Activity: Potential web attack or probing activity from an unrecognized request
Action: Blocked by f ...
show moreActivity: Potential web attack or probing activity from an unrecognized request
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T15:43:40Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: http://<host_IP>/
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0
X-Forwarded-For: -
show less
Activity: Port scan or web attack attempt from a known threat actor
Action: Blocked by firewall
Resp ...
show moreActivity: Port scan or web attack attempt from a known threat actor
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-30T16:05:04Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: curl/7.61.1
X-Forwarded-For: -
show less
Activity: Potential web reconnaissance or probing activity, possibly from an elite threat actor, att ...
show moreActivity: Potential web reconnaissance or probing activity, possibly from an elite threat actor, attempting to access the root endpoint.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T16:49:40Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt from suspicious activity
Action: Blocked by fire ...
show moreActivity: Potential port scan or web attack attempt from suspicious activity
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T17:03:40Z
Protocol: UNKNOWN
Endpoint: x00x00x00xB2x9AxD6x8ExCF.x22x83xA9xBF2xBA|roxAE_x95xECx80xE4xE9nx82qx9ExC6xA9x8FxF5
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential web attack attempt or unauthorized access attempt
Action: Blocked by firewall
Re ...
show moreActivity: Potential web attack attempt or unauthorized access attempt
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-30T17:39:30Z
Protocol: POST HTTP/1.1
Endpoint: /contact/?
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
X-Forwarded-For: -
show less
Activity: Potential web attack or probing activity detected, possibly an attempt to exploit web appl ...
show moreActivity: Potential web attack or probing activity detected, possibly an attempt to exploit web application vulnerabilities or scan for weaknesses.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T17:56:39Z
Protocol: POST HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt detected with suspicious protocol data
Action: B ...
show moreActivity: Potential port scan or web attack attempt detected with suspicious protocol data
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T18:55:23Z
Protocol: UNKNOWN
Endpoint: x05x01x00
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Port ScanWeb App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.