Web application exploit probing
From server logs:
2026-07-04 21:40:42 (direkt-IP) stats [400 Bad ...
show moreWeb application exploit probing
From server logs:
2026-07-04 21:40:42 (direkt-IP) stats [400 Bad Request]
2026-07-04 21:41:43 (direkt-IP) @ [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-04 21:41:58 (direkt-IP) � [400 Bad Re ...
show moreWeb application exploit probing
From server logs:
2026-07-04 21:41:58 (direkt-IP) � [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-04 21:42:11 (direkt-IP) [400 Bad ...
show moreWeb application exploit probing
From server logs:
2026-07-04 21:42:11 (direkt-IP) [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-04 21:57:52 (direkt-IP) GET / HTTP/1.0 ...
show moreWeb application exploit probing
From server logs:
2026-07-04 21:57:52 (direkt-IP) GET / HTTP/1.0 [444 Blockerad]
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity
show less
Direct IP probe / invalid SNI
From server logs:
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:22:3 ...
show moreDirect IP probe / invalid SNI
From server logs:
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:22:36:15 +0200
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:22:36:19 +0200
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:22:36:19 +0200
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:22:36:19 +0200
show less
Direct IP probe / invalid SNI
From server logs:
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:22:4 ...
show moreDirect IP probe / invalid SNI
From server logs:
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:22:47:50 +0200
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:22:47:50 +0200
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:22:47:50 +0200
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:22:47:50 +0200
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:22:47:50 +0200
show less
Web application exploit probing
From server logs:
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:23 ...
show moreWeb application exploit probing
From server logs:
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:23:28:12 +0200
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:23:28:12 +0200
2026-07-04 23:28:12 (direkt-IP) GET / HTTP/1.1 [444 Blockerad]
UA: Go-http-client/1.1
show less
Web application exploit probing
From server logs:
2026-07-04 23:42:17 x.gotox.se GET /wp-content/ ...
show moreWeb application exploit probing
From server logs:
2026-07-04 23:42:17 x.gotox.se GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1 [444 Blockerad]
2026-07-04 23:42:18 x.gotox.se GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1 [444 Blockerad]
2026-07-04 23:42:20 x.gotox.se GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1 [444 Blockerad]
2026-07-04 23:42:21 x.gotox.se GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1 [444 Blockerad]
show less
Web application exploit probing
From server logs:
2026-07-04 23:46:25 (direkt-IP) GET / HTTP/1.0 ...
show moreWeb application exploit probing
From server logs:
2026-07-04 23:46:25 (direkt-IP) GET / HTTP/1.0 [444 Blockerad]
show less
Web application exploit probing
From server logs:
2026-07-05 00:45:58 wildcard.[domain] GET /wp-c ...
show moreWeb application exploit probing
From server logs:
2026-07-05 00:45:58 wildcard.[domain] GET /wp-content/uploads/ HTTP/1.1 [444 Blockerad]
2026-07-05 00:45:59 wildcard.[domain] GET /wp-content/uploads/ HTTP/1.1 [444 Blockerad]
2026-07-05 00:45:59 wildcard.[domain] GET /wp-content/uploads/ HTTP/1.1 [444 Blockerad]
2026-07-05 00:46:00 wildcard.[domain] GET /wp-content/uploads/ HTTP/1.1 [444 Blockerad]
2026-07-05 00:46:36 wildcard.[domain] GET /wp-content/uploads/ HTTP/1.1 [444 Blockerad]
show less
Web application exploit probing
From server logs:
2026-07-05 00:49:34 (direkt-IP) GET / HTTP/1.1 ...
show moreWeb application exploit probing
From server logs:
2026-07-05 00:49:34 (direkt-IP) GET / HTTP/1.1 [444 Blockerad]
UA: Mozilla/5.0 zgrab/0.x
show less
Web application exploit probing
From server logs:
2026-07-05 01:04:47 (direkt-IP) GET / HTTP/1.1 ...
show moreWeb application exploit probing
From server logs:
2026-07-05 01:04:47 (direkt-IP) GET / HTTP/1.1 [444 Blockerad]
UA: Mozilla/5.0 zgrab/0.x
2026-07-05 01:04:50 (direkt-IP) ��3`��t�h~(�/ q [400 Bad Request]
AS14061 redan bannat
show less
Web application exploit probing
From server logs:
DIRECT_IP_HTTPS ip=[attacker] time=05/Jul/2026:01 ...
show moreWeb application exploit probing
From server logs:
DIRECT_IP_HTTPS ip=[attacker] time=05/Jul/2026:01:16:16 +0200
DIRECT_IP_HTTPS ip=[attacker] time=05/Jul/2026:01:16:16 +0200
2026-07-05 01:16:16 (direkt-IP) GET / HTTP/1.1 [444 Blockerad]
UA: Go-http-client/1.1
show less
Web application exploit probing
From server logs:
2026-07-05 02:06:00 (direkt-IP) GET / HTTP/1.1 ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:06:00 (direkt-IP) GET / HTTP/1.1 [444 Blockerad]
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
show less
Web application exploit probing
From server logs:
2026-07-05 02:07:32 www.gotox.se GET /wp-conten ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:07:32 www.gotox.se GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1 [444 Blockerad]
2026-07-05 02:07:33 www.gotox.se GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1 [444 Blockerad]
2026-07-05 02:07:34 www.gotox.se GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1 [444 Blockerad]
2026-07-05 02:07:35 www.gotox.se GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1 [444 Blockerad]
show less
Web application exploit probing
From server logs:
2026-07-05 02:48:30 (direkt-IP) GET / HTTP/1.0 ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:48:30 (direkt-IP) GET / HTTP/1.0 [444 Blockerad]
2026-07-05 02:48:30 (direkt-IP) OPTIONS / HTTP/1.0 [444 Blockerad]
2026-07-05 02:48:30 (direkt-IP) GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0 [444 Blockerad]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:48:46 (direkt-IP) H�� [40 ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:48:46 (direkt-IP) H�� [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:50:06 (direkt-IP) OPTIONS sip:[se ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:50:06 (direkt-IP) OPTIONS sip:[server] SIP/2.0 [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:50:22 (direkt-IP) 8�JA^��� [40 ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:50:22 (direkt-IP) 8�JA^��� [400 Bad Request]
2026-07-05 02:50:52 (direkt-IP) [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:50:37 (direkt-IP) �+<M\033[0 ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:50:37 (direkt-IP) �+<M\033[0m [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:51:07 (direkt-IP) 1�SMBr [400 Ba ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:51:07 (direkt-IP) 1�SMBr [400 Bad Request]
2026-07-05 02:51:07 (direkt-IP) n�SMB@ [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:51:22 (direkt-IP) *1 [400 Bad Re ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:51:22 (direkt-IP) *1 [400 Bad Request]
2026-07-05 02:54:08 (direkt-IP) fox a 1 -1 fox hello [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:51:37 (direkt-IP) MQTT< [ ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:51:37 (direkt-IP) MQTT< [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:51:52 (direkt-IP) � [400 Bad Re ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:51:52 (direkt-IP) � [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:52:07 (direkt-IP) � [40 ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:52:07 (direkt-IP) � [400 Bad Request]
AS211298 redan bannat
show less
Web App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.