Activity: Potential web scan or probing activity from an IP address, possibly indicating reconnaissa ...
show moreActivity: Potential web scan or probing activity from an IP address, possibly indicating reconnaissance or malicious intent.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-28T09:28:48Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: http://<host_IP>
User-Agent: Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)
X-Forwarded-For: -
show less
Activity: Potential web attack or probing activity detected, possibly an attempt to access or scan t ...
show moreActivity: Potential web attack or probing activity detected, possibly an attempt to access or scan the web server.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-28T00:49:06Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: http://<host_IP>/
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
X-Forwarded-For: -
show less
Activity: Potential web attack or reconnaissance attempt from a suspicious IP, possibly related to p ...
show moreActivity: Potential web attack or reconnaissance attempt from a suspicious IP, possibly related to port scanning or web application probing by an elite threat actor.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-28T08:59:30Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Hello-World/1.0
X-Forwarded-For: -
show less
Activity: Port scan activity targeting web application
Action: Blocked by firewall
Response: 403
Tim ...
show moreActivity: Port scan activity targeting web application
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-28T11:35:16Z
Protocol: GET HTTP/1.1
Endpoint: /hudson
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Port scan or web attack attempt from an elite threat actor
Action: Blocked by firewall
Res ...
show moreActivity: Port scan or web attack attempt from an elite threat actor
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-28T18:26:21Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: curl/7.61.1
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt from suspicious payload
Action: Blocked by firew ...
show moreActivity: Potential port scan or web attack attempt from suspicious payload
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-28T05:17:22Z
Protocol: UNKNOWN
Endpoint: x16x03x01x00xEEx01x00x00xEAx03x03x8Bx1FxB3x9C2x09x86Gx8Bx82xC7x81x14xFFx22xF7x0Bx17d>x14NxB…➟ [Binary/non‑printable (fuzz‑probe) payload truncated]
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Attempted web shell access or command injection targeting server via suspicious POST reque ...
show moreActivity: Attempted web shell access or command injection targeting server via suspicious POST request
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-28T07:51:04Z
Protocol: POST HTTP/1.1
Endpoint: /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Port scan or web attack attempt from a potentially elite threat actor
Action: Blocked by f ...
show moreActivity: Port scan or web attack attempt from a potentially elite threat actor
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-28T00:43:32Z
Protocol: GET HTTP/1.1
Endpoint: /op/9_md/9/9/9/9/9
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Port scan or web attack attempt from a known threat actor
Action: Blocked by firewall
Resp ...
show moreActivity: Port scan or web attack attempt from a known threat actor
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-28T01:26:28Z
Protocol: GET HTTP/1.0
Endpoint: /
HTTP Referrer: -
User-Agent: curl/7.88.1
X-Forwarded-For: -
show less
Activity: Attempted access to sensitive credentials via web application, potentially malicious probi ...
show moreActivity: Attempted access to sensitive credentials via web application, potentially malicious probing.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-28T02:02:20Z
Protocol: GET HTTP/1.1
Endpoint: /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000
HTTP Referrer: -
User-Agent: Mozilla/5.0
X-Forwarded-For: -
show less
Activity: Potential web application probing or reconnaissance activity, possibly attempting to acces ...
show moreActivity: Potential web application probing or reconnaissance activity, possibly attempting to access sensitive PHP info page.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-28T02:33:36Z
Protocol: GET HTTP/1.1
Endpoint: /phpinfo.php
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3
X-Forwarded-For: -
show less
Activity: Port scan or probing activity detected, possibly from an attacker attempting to identify o ...
show moreActivity: Port scan or probing activity detected, possibly from an attacker attempting to identify open services or vulnerabilities.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-28T06:22:16Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
X-Forwarded-For: -
show less
Activity: Port scan or web application attack attempt targeting cache management CGI script
Action: ...
show moreActivity: Port scan or web application attack attempt targeting cache management CGI script
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-28T08:17:55Z
Protocol: GET HTTP/1.1
Endpoint: /squid-internal-mgr/cachemgr.cgi
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Potential web attack or scan activity from an unrecognized user agent targeting the web se ...
show moreActivity: Potential web attack or scan activity from an unrecognized user agent targeting the web server.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-28T09:11:59Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Hello-World/1.0
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt from suspicious payload
Action: Blocked by firew ...
show moreActivity: Potential port scan or web attack attempt from suspicious payload
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-28T09:17:45Z
Protocol: UNKNOWN
Endpoint: x12x01x00&x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x01x00x0…➟ [Binary/non‑printable (fuzz‑probe) payload truncated]
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential port scan or probing activity detected, possibly from an elite threat actor.
Act ...
show moreActivity: Potential port scan or probing activity detected, possibly from an elite threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-28T09:30:24Z
Protocol: UNKNOWN
Endpoint: x16x03x01x00ux01x00x00qx03x03HxD5xD8xECxEEQxDAjxB3xA2xB7xE2x8F%x06p8xEA$xA1x80xA9x9Ax91xCABx…➟ [Binary/non‑printable (fuzz‑probe) payload truncated]
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential web attack or probing activity detected, possibly a port scan or web app attack ...
show moreActivity: Potential web attack or probing activity detected, possibly a port scan or web app attack from an unrecognized or suspicious request.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-28T13:24:01Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36
X-Forwarded-For: -
show less
Activity: Potential web activity from an IP possibly flagged for malicious or suspicious activity
Ac ...
show moreActivity: Potential web activity from an IP possibly flagged for malicious or suspicious activity
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-28T18:54:38Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: http://<host_IP>
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
X-Forwarded-For: -
show less
Activity: Potential web reconnaissance or probing activity detected, possibly from an unrecognized o ...
show moreActivity: Potential web reconnaissance or probing activity detected, possibly from an unrecognized or suspicious request.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-28T20:34:23Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
X-Forwarded-For: -
show less
Activity: Attempted access to actuator health endpoint, possibly probing for vulnerabilities or syst ...
show moreActivity: Attempted access to actuator health endpoint, possibly probing for vulnerabilities or system status.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-28T21:48:10Z
Protocol: GET HTTP/1.1
Endpoint: /actuator/health
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Port ScanWeb App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.