Activity: Port Scan and Exploited Host
Action: Blocked by firewall
Access Log Entries:
• [02/Jun/2 ...
show moreActivity: Port Scan and Exploited Host
Action: Blocked by firewall
Access Log Entries:
• [02/Jun/2025:10:19:15 +0000] "GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Attempted access to xmlrpc.php, potentially indicative of hacking or web app attack
Actio ...
show moreActivity: Attempted access to xmlrpc.php, potentially indicative of hacking or web app attack
Action: Blocked by firewall
Access Log Entries:
• [02/Jun/2025:23:28:37 +0000] "POST /xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "-"
show less
Activity: Ping of Death
Action: Blocked by firewall
Access Log Entries:
• [02/Jun/2025:22:51:09 +0 ...
show moreActivity: Ping of Death
Action: Blocked by firewall
Access Log Entries:
• [02/Jun/2025:22:51:09 +0000] "x16x03x03x01xA5x01x00x01xA1x03x03xC9xE6xC2xD7x1CxCCxD2x82x22xD21sE3K,;!!xA7xB9xE8xC2A{xE7x12x82xB3xE1~& x00" 400 150 "-" "-" "-"
show less
Activity: Attempted Web Application Access (potential login or authentication attempt)
Action: Bloc ...
show moreActivity: Attempted Web Application Access (potential login or authentication attempt)
Action: Blocked by firewall
Access Log Entries:
• [01/Jun/2025:16:24:47 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 400 154 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" "-"
show less
Activity: Web Bot Activity (likely a web scanner or crawler)
Action: Blocked by firewall
Access Lo ...
show moreActivity: Web Bot Activity (likely a web scanner or crawler)
Action: Blocked by firewall
Access Log Entries:
• [01/Jun/2025:16:01:33 +0000] "GET /version HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Web Bot activity attempting to access development server
Action: Blocked by firewall
Acc ...
show moreActivity: Web Bot activity attempting to access development server
Action: Blocked by firewall
Access Log Entries:
• [01/Jun/2025:22:46:25 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Web Bot activity attempting to access development server
Action: Blocked by firewall
Acc ...
show moreActivity: Web Bot activity attempting to access development server
Action: Blocked by firewall
Access Log Entries:
• [01/Jun/2025:03:55:59 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 400 150 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Web Bot activity attempting to access management interface
Action: Blocked by firewall
A ...
show moreActivity: Web Bot activity attempting to access management interface
Action: Blocked by firewall
Access Log Entries:
• [01/Jun/2025:21:55:25 +0000] "GET /manager/html HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Activity: Normal web activity and port scan attempt
Action: Blocked by firewall
Access Log Entries ...
show moreActivity: Normal web activity and port scan attempt
Action: Blocked by firewall
Access Log Entries:
• [01/Jun/2025:06:59:18 +0000] "GET / HTTP/1.1" 400 154 "http://<host_IP>/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" "-"
show less
Activity: Potential port scanning and web server exploitation attempts via encoded URL payloads
Act ...
show moreActivity: Potential port scanning and web server exploitation attempts via encoded URL payloads
Action: Blocked by firewall
Access Log Entries:
• [01/Jun/2025:12:08:18 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-"
• [01/Jun/2025:12:08:19 +0000] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 150 "-" "-" "-"
show less
Activity: Port Scan
Action: Blocked by firewall
Access Log Entries:
• [01/Jun/2025:11:53:01 +0000] ...
show moreActivity: Port Scan
Action: Blocked by firewall
Access Log Entries:
• [01/Jun/2025:11:53:01 +0000] "HEAD /epa/scripts/win/nsepa_setup.exe HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" "-"
show less
Activity: Port scan attempt and possible SQL injection attempt
Action: Blocked by firewall
Access ...
show moreActivity: Port scan attempt and possible SQL injection attempt
Action: Blocked by firewall
Access Log Entries:
• [01/Jun/2025:20:26:08 +0000] "x12x01x00&x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x01x00x00xFF" 400 150 "-" "-" "-"
• [01/Jun/2025:20:26:13 +0000] "x16x03x01x00Nx01x00x00Jx03x03xA6`xF3x01x22xE1Ga|xFExFAx9ExD1x04xE9 .x93x97x12ix0C!fxD2x1AxAAx97xB4x9D{xCCx00x00x0CxC0/xC0+x00x9ExCCxA8x13x01x13x02x01x00x00x15x00x00x00x11x00x0Fx00x00x0C<host_IP>" 400 150 "-" "-" "-"
show less