Activity: Port Scan and Web App Attack attempt
Action: Blocked by firewall
Access Log Entries:
• [ ...
show moreActivity: Port Scan and Web App Attack attempt
Action: Blocked by firewall
Access Log Entries:
• [07/Jun/2025:08:20:56 +0000] "GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Web Bot activity probing for server health endpoints
Action: Blocked by firewall
Access ...
show moreActivity: Web Bot activity probing for server health endpoints
Action: Blocked by firewall
Access Log Entries:
• [07/Jun/2025:07:14:47 +0000] "GET /actuator/health HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Attempted access to environment configuration file, indicative of potential web app attack ...
show moreActivity: Attempted access to environment configuration file, indicative of potential web app attack or reconnaissance
Action: Blocked by firewall
Access Log Entries:
• [07/Jun/2025:06:02:10 +0000] "GET /.env HTTP/1.1" 403 146 "-" "-" "-"
show less
Activity: Normal web activity and potential spoofing or probing attempts
Action: Blocked by firewal ...
show moreActivity: Normal web activity and potential spoofing or probing attempts
Action: Blocked by firewall
Access Log Entries:
• [07/Jun/2025:05:17:14 +0000] "GET http://ip-api.com/json/ HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-"
• [07/Jun/2025:05:17:14 +0000] "x04x01x00PxD0_px01x00" 400 150 "-" "-" "-"
• [07/Jun/2025:05:17:15 +0000] "x05x01x00" 400 150 "-" "-" "-"
show less
Activity: Attempted access to xmlrpc.php, potentially indicating hacking or web app attack activity
...
show moreActivity: Attempted access to xmlrpc.php, potentially indicating hacking or web app attack activity
Action: Blocked by firewall
Access Log Entries:
• [06/Jun/2025:23:04:28 +0000] "POST /xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
show less
Activity: Attempted access to PHP info page, potentially probing for vulnerabilities
Action: Blocke ...
show moreActivity: Attempted access to PHP info page, potentially probing for vulnerabilities
Action: Blocked by firewall
Access Log Entries:
• [06/Jun/2025:22:54:39 +0000] "GET /_profiler/phpinfo HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" "-"
show less
Activity: Port scan and potential exploited host activity
Action: Blocked by firewall
Access Log E ...
show moreActivity: Port scan and potential exploited host activity
Action: Blocked by firewall
Access Log Entries:
• [06/Jun/2025:21:55:24 +0000] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Web Bot activity attempting to access development server
Action: Blocked by firewall
Acc ...
show moreActivity: Web Bot activity attempting to access development server
Action: Blocked by firewall
Access Log Entries:
• [06/Jun/2025:18:59:28 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Web Bot activity scanning for web application vulnerabilities
Action: Blocked by firewall ...
show moreActivity: Web Bot activity scanning for web application vulnerabilities
Action: Blocked by firewall
Access Log Entries:
• [06/Jun/2025:18:22:59 +0000] "GET /hudson HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Web Bot activity scanning the website
Action: Blocked by firewall
Access Log Entries:
• ...
show moreActivity: Web Bot activity scanning the website
Action: Blocked by firewall
Access Log Entries:
• [06/Jun/2025:17:53:36 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Attempted access to .git/config file, indicative of web app attack or reconnaissance
Acti ...
show moreActivity: Attempted access to .git/config file, indicative of web app attack or reconnaissance
Action: Blocked by firewall
Access Log Entries:
• [06/Jun/2025:16:17:01 +0000] "GET /.git/config HTTP/1.1" 403 118 "-" "Mozilla/5.0 (Windows NT 6.0; rv:36.0) Gecko/20100101 Firefox/36.0 SeaMonkey/2.33.1" "-"
show less
Activity: Port scan and web application attack attempt
Action: Blocked by firewall
Access Log Entr ...
show moreActivity: Port scan and web application attack attempt
Action: Blocked by firewall
Access Log Entries:
• [06/Jun/2025:15:44:22 +0000] "SSH-2.0-Go" 400 150 "-" "-" "-"
• [06/Jun/2025:15:44:22 +0000] "MGLNDD_<host_IP>_443" 400 150 "-" "-" "-"
show less
Activity: Normal browsing, port scanning attempt, potential host exploitation
Action: Blocked by fi ...
show moreActivity: Normal browsing, port scanning attempt, potential host exploitation
Action: Blocked by firewall
Access Log Entries:
• [06/Jun/2025:14:38:24 +0000] "GET /.env HTTP/1.1" 403 146 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1" "-"
show less