Activity: Potential web activity with blocked response, possibly probing or scanning activity from a ...
show moreActivity: Potential web activity with blocked response, possibly probing or scanning activity from a threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T08:08:16Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0
X-Forwarded-For: -
show less
Activity: Potential web scan or probing activity detected, possibly from an elite threat actor attem ...
show moreActivity: Potential web scan or probing activity detected, possibly from an elite threat actor attempting to identify vulnerabilities.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T18:23:34Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)
X-Forwarded-For: -
show less
Activity: Port scan attempt targeting .git/config file, possibly part of reconnaissance activity.
Ac ...
show moreActivity: Port scan attempt targeting .git/config file, possibly part of reconnaissance activity.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T05:29:27Z
Protocol: GET HTTP/1.1
Endpoint: /.git/config
HTTP Referrer: -
User-Agent: Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);
X-Forwarded-For: -
show less
Activity: Potential web attack or probing activity targeting Web Application with suspicious request ...
show moreActivity: Potential web attack or probing activity targeting Web Application with suspicious request
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T05:25:06Z
Protocol: GET HTTP/2.0
Endpoint: /wsman
HTTP Referrer: http://<host_IP>/wsman
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt detected, possibly from an elite threat actor.
A ...
show moreActivity: Potential port scan or web attack attempt detected, possibly from an elite threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T17:55:45Z
Protocol: UNKNOWN
Endpoint: x03x00x00/*xE0x00x00x00x00x00Cookie: mstshash=Administr
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt detected, possibly from a threat actor.
Action: ...
show moreActivity: Potential port scan or web attack attempt detected, possibly from a threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T18:02:53Z
Protocol: UNKNOWN
Endpoint: x03x00x00/*xE0x00x00x00x00x00Cookie: mstshash=Administr
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt detected, possibly from an elite threat actor.
A ...
show moreActivity: Potential port scan or web attack attempt detected, possibly from an elite threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T18:30:08Z
Protocol: UNKNOWN
Endpoint: x03x00x00/*xE0x00x00x00x00x00Cookie: mstshash=Administr
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt detected, possibly from a threat actor.
Action: ...
show moreActivity: Potential port scan or web attack attempt detected, possibly from a threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T18:11:56Z
Protocol: UNKNOWN
Endpoint: x03x00x00/*xE0x00x00x00x00x00Cookie: mstshash=Administr
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt detected, possibly from a threat actor.
Action: ...
show moreActivity: Potential port scan or web attack attempt detected, possibly from a threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T17:40:09Z
Protocol: UNKNOWN
Endpoint: x03x00x00/*xE0x00x00x00x00x00Cookie: mstshash=Administr
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt detected, possibly from a threat actor.
Action: ...
show moreActivity: Potential port scan or web attack attempt detected, possibly from a threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T18:15:43Z
Protocol: UNKNOWN
Endpoint: x03x00x00/*xE0x00x00x00x00x00Cookie: mstshash=Administr
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt from a suspicious source, possibly linked to an ...
show moreActivity: Potential port scan or web attack attempt from a suspicious source, possibly linked to an elite threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T17:51:07Z
Protocol: UNKNOWN
Endpoint: x03x00x00/*xE0x00x00x00x00x00Cookie: mstshash=Administr
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt detected, possibly from an elite threat actor.
A ...
show moreActivity: Potential port scan or web attack attempt detected, possibly from an elite threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T11:59:05Z
Protocol: UNKNOWN
Endpoint: x03x00x00/*xE0x00x00x00x00x00Cookie: mstshash=Administr
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt from a suspicious source, possibly indicating re ...
show moreActivity: Potential port scan or web attack attempt from a suspicious source, possibly indicating reconnaissance activity.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T04:17:20Z
Protocol: UNKNOWN
Endpoint: x03x00x00/*xE0x00x00x00x00x00Cookie: mstshash=Administr
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt from suspicious payload
Action: Blocked by firew ...
show moreActivity: Potential port scan or web attack attempt from suspicious payload
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T06:30:11Z
Protocol: UNKNOWN
Endpoint: x16x03x01x01xA8x01x00x01xA4x03x03xE7xFCxFF>jx16QxBEWB;vxA3zxF3x9A'MxC18x02,9x9B*xDF'x7F_x14n8 K…➟ [Binary/non‑printable (fuzz‑probe) payload truncated]
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential web reconnaissance or probing activity, possibly from an attacker or misconfigur ...
show moreActivity: Potential web reconnaissance or probing activity, possibly from an attacker or misconfigured client.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T00:29:27Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
X-Forwarded-For: -
show less
Activity: Port scan or web application attack attempt from a potentially malicious source, possibly ...
show moreActivity: Port scan or web application attack attempt from a potentially malicious source, possibly associated with an elite threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T12:37:03Z
Protocol: GET HTTP/2.0
Endpoint: /
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential web reconnaissance activity detected from a suspicious user agent.
Action: Block ...
show moreActivity: Potential web reconnaissance activity detected from a suspicious user agent.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T23:51:51Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Potential web attack or reconnaissance attempt from suspicious referrer
Action: Blocked by ...
show moreActivity: Potential web attack or reconnaissance attempt from suspicious referrer
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T23:36:26Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: http://<host_IP>:80
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
X-Forwarded-For: -
show less
Activity: Potential web attack or probing activity from an unrecognized request
Action: Blocked by f ...
show moreActivity: Potential web attack or probing activity from an unrecognized request
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-26T23:39:40Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: http://<host_IP>
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
X-Forwarded-For: -
show less
Activity: Potential web reconnaissance or probing activity from a known threat actor
Action: Blocked ...
show moreActivity: Potential web reconnaissance or probing activity from a known threat actor
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-25T15:55:55Z
Protocol: GET HTTP/1.1
Endpoint: /
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt from an unknown source, possibly linked to an el ...
show moreActivity: Potential port scan or web attack attempt from an unknown source, possibly linked to an elite threat actor.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-25T03:36:06Z
Protocol: UNKNOWN
Endpoint: MGLNDD_<host_IP>_80
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Potential web reconnaissance or probing activity targeting autodiscover endpoint, possibly ...
show moreActivity: Potential web reconnaissance or probing activity targeting autodiscover endpoint, possibly by an elite threat actor.
Action: Blocked by firewall
Response: 403
Timestamp: 2025-05-25T09:28:52Z
Protocol: GET HTTP/1.1
Endpoint: /autodiscover/autodiscover.json?@zdi/Powershell
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Activity: Potential port scan or web attack attempt from IP <host_IP>
Action: Blocked by firewall
Re ...
show moreActivity: Potential port scan or web attack attempt from IP <host_IP>
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-25T17:55:41Z
Protocol: UNKNOWN
Endpoint: MGLNDD_<host_IP>_443
HTTP Referrer: -
User-Agent: -
X-Forwarded-For: -
show less
Activity: Port scan activity targeting web application management interface, potentially indicating ...
show moreActivity: Port scan activity targeting web application management interface, potentially indicating reconnaissance or probing for vulnerabilities.
Action: Blocked by firewall
Response: 400
Timestamp: 2025-05-25T13:33:24Z
Protocol: GET HTTP/1.1
Endpoint: /manager/text/list
HTTP Referrer: -
User-Agent: Mozilla/5.0 zgrab/0.x
X-Forwarded-For: -
show less
Port ScanWeb App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.