Activity: Port scan or web application activity from a potentially malicious source, possibly associ ...
show moreActivity: Port scan or web application activity from a potentially malicious source, possibly associated with an elite threat actor.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-30T19:08:56Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Hello-World/1.0
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt from suspicious payload
Action: Blocked by firew ...
show moreActivity: Potential port scan or web attack attempt from suspicious payload
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T20:09:11Z
Protocol: UNKNOWN
Endpoint: x12x01x00&x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x01x00x0…➟ [Binary/non‑printable (fuzz‑probe) payload truncated]
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential web attack or probing activity detected with a generic GET request to root.
Acti ...
show moreActivity: Potential web attack or probing activity detected with a generic GET request to root.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T21:37:29Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0
X-Forwarded-For: -
show less
Activity: Port scan activity targeting web application with potential threat actor involvement
Actio ...
show moreActivity: Port scan activity targeting web application with potential threat actor involvement
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-30T21:42:14Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Port scan or web attack attempt from a potentially malicious source, possibly associated w ...
show moreActivity: Port scan or web attack attempt from a potentially malicious source, possibly associated with an elite threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T22:39:15Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential port scan or probing activity detected, possibly from an elite threat actor.
Act ...
show moreActivity: Potential port scan or probing activity detected, possibly from an elite threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T23:51:59Z
Protocol: UNKNOWN
Endpoint: x16x03x01x00ux01x00x00qx03x03xEF#xCA4Vx07xCFx81xA3x86xB4}x1ExB4xE1]FxDBxADxD2x07x8Fx22=|$x92…➟ [Binary/non‑printable (fuzz‑probe) payload truncated]
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential web attack or probing activity from suspicious IP
Action: Blocked by firewall
Re ...
show moreActivity: Potential web attack or probing activity from suspicious IP
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-30T23:59:26Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: http://<host_IP>:80
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
X-Forwarded-For: -
show less
Activity: Port scan activity targeting web application, potentially from an elite threat actor
Actio ...
show moreActivity: Port scan activity targeting web application, potentially from an elite threat actor
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T18:20:14Z
Protocol: GET HTTP/1.1
Endpoint: /portal/redlion
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Port scan activity targeting web application, potentially from an elite threat actor
Actio ...
show moreActivity: Port scan activity targeting web application, potentially from an elite threat actor
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T21:11:45Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt from a suspicious source
Action: Blocked by fire ...
show moreActivity: Potential port scan or web attack attempt from a suspicious source
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T19:44:45Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Hello-World/1.0
X-Forwarded-For: -
show less
Activity: Potential web attack or probing activity detected, possibly from a malicious or compromise ...
show moreActivity: Potential web attack or probing activity detected, possibly from a malicious or compromised source.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T21:17:47Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: http://<host_IP>
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
X-Forwarded-For: -
show less
Activity: Potential web attack attempt or reconnaissance activity detected from a request to the roo ...
show moreActivity: Potential web attack attempt or reconnaissance activity detected from a request to the root endpoint.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T21:25:53Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: python-requests/2.32.3
X-Forwarded-For: -
show less
Activity: Port scan or web reconnaissance activity from an elite threat actor targeting web applicat ...
show moreActivity: Port scan or web reconnaissance activity from an elite threat actor targeting web application endpoint.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T23:30:20Z
Protocol: GET HTTP/1.1
Endpoint: /developmentserver/metadatauploader
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Potential web scan or probing activity from a blocked or malformed request
Action: Blocked ...
show moreActivity: Potential web scan or probing activity from a blocked or malformed request
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T22:39:22Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
X-Forwarded-For: -
show less
Activity: Potential web scan or probing activity detected with a generic GET request resulting in a ...
show moreActivity: Potential web scan or probing activity detected with a generic GET request resulting in a 400 error, indicating possible malicious intent or misconfiguration.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T22:46:21Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
X-Forwarded-For: -
show less
Activity: Potential web attack or reconnaissance attempt targeting actuator endpoint, possibly from ...
show moreActivity: Potential web attack or reconnaissance attempt targeting actuator endpoint, possibly from an elite threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T22:14:53Z
Protocol: GET HTTP/1.1
Endpoint: /gateway/actuator
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
X-Forwarded-For: -
show less
Activity: Potential web scan or probing activity detected, possibly from an elite threat actor targe ...
show moreActivity: Potential web scan or probing activity detected, possibly from an elite threat actor targeting web application vulnerabilities.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T22:15:54Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)
X-Forwarded-For: -
show less
Activity: Port scan or web application activity from an elite threat actor
Action: Blocked by firewa ...
show moreActivity: Port scan or web application activity from an elite threat actor
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T22:27:44Z
Protocol: GET HTTP/1.1
Endpoint: /form.html
HTTP Referrer: -
User-Agent: curl/8.1.2
X-Forwarded-For: -
show less
Activity: Potential web attack attempt or probing activity
Action: Blocked by firewall
Response: 403 ...
show moreActivity: Potential web attack attempt or probing activity
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T23:46:53Z
Protocol: POST HTTP/1.1
Endpoint: /contact/?
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
X-Forwarded-For: -
show less
Activity: Potential web reconnaissance activity detected from a generic GET request with a suspiciou ...
show moreActivity: Potential web reconnaissance activity detected from a generic GET request with a suspicious user agent.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T13:39:46Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Port scan or reconnaissance attempt targeting web application
Action: Blocked by firewall
...
show moreActivity: Port scan or reconnaissance attempt targeting web application
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T14:26:29Z
Protocol: GET HTTP/1.1
Endpoint: /ReportServer
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Port scan or reconnaissance attempt targeting autodiscover endpoint, possibly by an elite ...
show moreActivity: Port scan or reconnaissance attempt targeting autodiscover endpoint, possibly by an elite threat actor.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T08:33:55Z
Protocol: GET HTTP/1.1
Endpoint: /autodiscover/autodiscover.json?@zdi/Powershell
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Port scan or web attack attempt from a potentially elite threat actor targeting web applic ...
show moreActivity: Port scan or web attack attempt from a potentially elite threat actor targeting web application endpoint
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T16:52:21Z
Protocol: GET HTTP/1.1
Endpoint: /developmentserver/metadatauploader
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Port ScanWeb App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.