Activity: Attempted SSH protocol version exchange, indicating a potential SSH scan or attack
Action ...
show moreActivity: Attempted SSH protocol version exchange, indicating a potential SSH scan or attack
Action: Blocked by firewall
Access Log Entries:
• [03/Jun/2025:12:37:55 +0000] "SSH-2.0-Go" 400 150 "-" "-" "-"
show less
Activity: Port scan attempt targeting web management interface
Action: Blocked by firewall
Access ...
show moreActivity: Port scan attempt targeting web management interface
Action: Blocked by firewall
Access Log Entries:
• [03/Jun/2025:07:01:09 +0000] "GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Web Bot activity scanning for exposed endpoints
Action: Blocked by firewall
Access Log E ...
show moreActivity: Web Bot activity scanning for exposed endpoints
Action: Blocked by firewall
Access Log Entries:
• [03/Jun/2025:03:26:34 +0000] "GET /actuator/health HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Web Bot activity detected from user agent 'Mozilla/5.0 zgrab/0.x', indicating potential we ...
show moreActivity: Web Bot activity detected from user agent 'Mozilla/5.0 zgrab/0.x', indicating potential web scraping or automated scanning.
Action: Blocked by firewall
Access Log Entries:
• [03/Jun/2025:02:34:06 +0000] "GET / HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Web Bot activity attempting to scan or probe the server
Action: Blocked by firewall
Acce ...
show moreActivity: Web Bot activity attempting to scan or probe the server
Action: Blocked by firewall
Access Log Entries:
• [03/Jun/2025:00:47:32 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Attempted access to xmlrpc.php, potentially indicative of hacking or web app attack
Actio ...
show moreActivity: Attempted access to xmlrpc.php, potentially indicative of hacking or web app attack
Action: Blocked by firewall
Access Log Entries:
• [02/Jun/2025:23:28:37 +0000] "POST /xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
show less
Activity: Ping of Death
Action: Blocked by firewall
Access Log Entries:
• [02/Jun/2025:22:51:09 +0 ...
show moreActivity: Ping of Death
Action: Blocked by firewall
Access Log Entries:
• [02/Jun/2025:22:51:09 +0000] "x16x03x03x01xA5x01x00x01xA1x03x03xC9xE6xC2xD7x1CxCCxD2x82x22xD21sE3K,;!!xA7xB9xE8xC2A{xE7x12x82xB3xE1~& x00" 400 150 "-" "-" "-"
show less
Activity: Normal browsing, port scanning attempt, potential exploit attempt
Action: Blocked by fire ...
show moreActivity: Normal browsing, port scanning attempt, potential exploit attempt
Action: Blocked by firewall
Access Log Entries:
• [02/Jun/2025:16:53:59 +0000] "x16x03x01x00ux01x00x00qx03x03xCCxF0x8Bx93xC4,xEDx0FuMxD2@xBDx00xA7xD8xF2Xx87x9660xxB0x8Ex9BaxDCxFB|?{x00x00x1AxC0/xC0+xC0x11xC0x07xC0x13xC0x09xC0x14xC0" 400 150 "-" "-" "-"
show less
Activity: Normal web activity and port scan attempt: It’s like Dutch IPs decided to throw a full‐blo ...
show moreActivity: Normal web activity and port scan attempt: It’s like Dutch IPs decided to throw a full‐blown circus at my reverse‑proxy—endless shenanigans and wild payloads (seriously, who sends an Outlook/SMB mash‑up over HTTP?!)
Action: Blocked by firewall
Access Log Entries:
• [02/Jun/2025:14:41:55 +0000] "238x00ll|'|'|SGFjS2VkX0Q3NUU2QUFB|'|'|WIN-QZN7FJ7D1O|'|'|Administrator|'|'|18-11-28|'|'||'|'|Win 7 Ultimate SP1 x64|'|'|No|'|'|S17|'|'|..|'|'|SW5ib3ggLSBPdXRsb29rIERhdGEgRmlsZSAtIE1pY3Jvc29mdCBPdXRsb29rAA==|'|'|" 400 150 "-" "-" "-"
• [02/Jun/2025:14:41:56 +0000] "GET / HTTP/1.1" 400 154 "http://<host_IP>/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36" "-"
show less