Activity: Potential port scan or web attack attempt from IP <host_IP>
Action: Blocked by firewall
Re ...
show moreActivity: Potential port scan or web attack attempt from IP <host_IP>
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T13:28:27Z
Protocol: UNKNOWN
Endpoint: MGLNDD_<host_IP>_80
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Port scan or web application probing by an elite threat actor
Action: Blocked by firewall
...
show moreActivity: Port scan or web application probing by an elite threat actor
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T13:19:17Z
Protocol: GET HTTP/1.1
Endpoint: /version
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Potential web application reconnaissance activity targeting login page, possibly from an e ...
show moreActivity: Potential web application reconnaissance activity targeting login page, possibly from an elite threat actor.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T04:21:18Z
Protocol: GET HTTP/1.1
Endpoint: /login
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Potential web attack attempt or reconnaissance activity targeting the web server, possibly ...
show moreActivity: Potential web attack attempt or reconnaissance activity targeting the web server, possibly from an elite threat actor.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T18:08:34Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: python-requests/2.32.3
X-Forwarded-For: -
show less
Activity: Potential web attack or probing activity from an IP address, possibly indicating reconnais ...
show moreActivity: Potential web attack or probing activity from an IP address, possibly indicating reconnaissance or malicious intent.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T15:06:00Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: http://<host_IP>
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
X-Forwarded-For: -
show less
Activity: Potential web activity from mobile device, possibly probing or accessing the root endpoint ...
show moreActivity: Potential web activity from mobile device, possibly probing or accessing the root endpoint, flagged as a generic or suspicious activity.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T15:59:43Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
X-Forwarded-For: -
show less
Activity: Potential web attack or reconnaissance attempt from suspicious IP
Action: Blocked by firew ...
show moreActivity: Potential web attack or reconnaissance attempt from suspicious IP
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T02:50:21Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: http://<host_IP>:80
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
X-Forwarded-For: -
show less
Activity: Potential web attack or probing activity from an unrecognized or suspicious request
Action ...
show moreActivity: Potential web attack or probing activity from an unrecognized or suspicious request
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T09:19:12Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: http://<host_IP>
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
X-Forwarded-For: -
show less
Activity: Potential web attack or reconnaissance attempt from suspicious referrer
Action: Blocked by ...
show moreActivity: Potential web attack or reconnaissance attempt from suspicious referrer
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T15:02:11Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: http://<host_IP>:80
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
X-Forwarded-For: -
show less
Activity: Potential web scan or probing activity from a blocked or suspicious request
Action: Blocke ...
show moreActivity: Potential web scan or probing activity from a blocked or suspicious request
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T02:06:30Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
X-Forwarded-For: -
show less
Activity: Port scan or web application activity potentially associated with elite threat actors
Acti ...
show moreActivity: Port scan or web application activity potentially associated with elite threat actors
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T15:11:17Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: curl/7.64.1
X-Forwarded-For: -
show less
Activity: Port scan or web attack attempt from an elite threat actor
Action: Blocked by firewall
Res ...
show moreActivity: Port scan or web attack attempt from an elite threat actor
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T11:55:20Z
Protocol: GET HTTP/1.0
Endpoint: /
HTTP Referrer: -
User-Agent: curl/7.88.1
X-Forwarded-For: -
show less
Activity: Potential web scan or probing activity from a blocked or malformed request
Action: Blocked ...
show moreActivity: Potential web scan or probing activity from a blocked or malformed request
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T07:53:03Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Safari/537.36
X-Forwarded-For: -
show less
Activity: Attempted access to .git/config file, potentially probing for source code or configuration ...
show moreActivity: Attempted access to .git/config file, potentially probing for source code or configuration information.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T08:12:15Z
Protocol: GET HTTP/1.1
Endpoint: /.git/config
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/115.0
X-Forwarded-For: -
show less
Activity: Port scan or probing activity targeting web application
Action: Blocked by firewall
Respon ...
show moreActivity: Port scan or probing activity targeting web application
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T07:56:56Z
Protocol: GET HTTP/1.1
Endpoint: /webui/
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0
X-Forwarded-For: -
show less
Activity: Potential web reconnaissance or probing activity targeting geoserver endpoint, possibly fr ...
show moreActivity: Potential web reconnaissance or probing activity targeting geoserver endpoint, possibly from an attacker or malicious scanner.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T08:09:45Z
Protocol: GET HTTP/1.1
Endpoint: /geoserver/web/
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0
X-Forwarded-For: -
show less
Activity: Potential web scan or probing activity from an unrecognized or malformed request, possibly ...
show moreActivity: Potential web scan or probing activity from an unrecognized or malformed request, possibly indicating an attack or misconfiguration.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T02:39:29Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36
X-Forwarded-For: -
show less
Activity: Potential web reconnaissance activity detected from a known threat actor IP.
Action: Block ...
show moreActivity: Potential web reconnaissance activity detected from a known threat actor IP.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T07:36:47Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Port scan activity detected from a known threat actor attempting to identify open web serv ...
show moreActivity: Port scan activity detected from a known threat actor attempting to identify open web services.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T08:28:17Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt detected with blocked request
Action: Blocked by ...
show moreActivity: Potential port scan or web attack attempt detected with blocked request
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T00:09:11Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0
X-Forwarded-For: -
show less
Activity: Attempted access to .git/config file, possibly probing for source code or configuration in ...
show moreActivity: Attempted access to .git/config file, possibly probing for source code or configuration information.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T02:07:34Z
Protocol: GET HTTP/1.1
Endpoint: /.git/config
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Linux; Android 9; CPH1859) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
X-Forwarded-For: -
show less
Activity: Port scan or web application attack targeting cache management endpoint, potentially part ...
show moreActivity: Port scan or web application attack targeting cache management endpoint, potentially part of reconnaissance or exploitation activity.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-29T07:11:47Z
Protocol: GET HTTP/1.1
Endpoint: /squid-internal-mgr/cachemgr.cgi
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt detected, possibly from a malicious actor or aut ...
show moreActivity: Potential port scan or web attack attempt detected, possibly from a malicious actor or automated tool.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T08:49:26Z
Protocol: UNKNOWN
Endpoint: x03x00x00/*xE0x00x00x00x00x00Cookie: mstshash=Administr
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt from suspicious payload
Action: Blocked by firew ...
show moreActivity: Potential port scan or web attack attempt from suspicious payload
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-29T10:09:13Z
Protocol: UNKNOWN
Endpoint: x16x03x01x00ux01x00x00qx03x03xA6o+xB4x05xE0x061xAAxE4xBF~xA4x8AxC0kxE5x84xABxA2x12=xDFBxD5gx…➟ [Binary/non‑printable (fuzz‑probe) payload truncated]
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Port ScanWeb App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.