Web application exploit probing
From server logs:
2026-07-05 02:52:37 (direkt-IP) [400 Bad Re ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:52:37 (direkt-IP) [400 Bad Request]
2026-07-05 02:56:53 (direkt-IP) � [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:52:52 (direkt-IP) 0 `� [ ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:52:52 (direkt-IP) 0 `� [400 Bad Request]
2026-07-05 02:52:52 (direkt-IP) 0 w�1.3.6.1.4.1.1466.20037 [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:53:08 (direkt-IP) <?xml version=' ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:53:08 (direkt-IP) <?xml version='1.0'?><stream:stream version='1.0' xml:lang='en' xmlns:stream='ht [400 Bad Request]
2026-07-05 02:53:53 (direkt-IP) /multistream/1.0.0 [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:53:38 (direkt-IP) x@,� �� ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:53:38 (direkt-IP) x@,� �� [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:54:38 (direkt-IP) C��=\x [400 B ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:54:38 (direkt-IP) C��=\x [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:55:08 (direkt-IP) �ANY-SCP ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:55:08 (direkt-IP) �ANY-SCP ECHOSCU [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:55:23 (direkt-IP) CONNECT [400 B ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:55:23 (direkt-IP) CONNECT [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:55:53 (direkt-IP) l [400 Bad Re ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:55:53 (direkt-IP) l [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:56:08 (direkt-IP) �Z�b�J�Y�� �4 ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:56:08 (direkt-IP) �Z�b�J�Y�� �4��[����\x [400 Bad Request]
2026-07-05 02:56:08 (direkt-IP) ����versionV��v�� [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 02:57:06 (direkt-IP) [400 Bad ...
show moreWeb application exploit probing
From server logs:
2026-07-05 02:57:06 (direkt-IP) [400 Bad Request]
AS211298 redan bannat
show less
Web application exploit probing
From server logs:
DIRECT_IP_HTTPS ip=[attacker] time=05/Jul/2026:03 ...
show moreWeb application exploit probing
From server logs:
DIRECT_IP_HTTPS ip=[attacker] time=05/Jul/2026:03:10:13 +0200
DIRECT_IP_HTTPS ip=[attacker] time=05/Jul/2026:03:10:26 +0200
2026-07-05 03:10:21 (direkt-IP) GET / HTTP/1.1 [444 Blockerad]
UA: Go-http-client/1.1
show less
Web application exploit probing
From server logs:
2026-07-05 03:16:48 [domain] GET /wp-content/up ...
show moreWeb application exploit probing
From server logs:
2026-07-05 03:16:48 [domain] GET /wp-content/uploads/ HTTP/1.1 [444 Blockerad]
2026-07-05 03:16:50 [domain] GET /wp-content/uploads/ HTTP/1.1 [444 Blockerad]
2026-07-05 03:16:50 [domain] GET /wp-content/uploads/ HTTP/1.1 [444 Blockerad]
2026-07-05 03:16:51 [domain] GET /wp-content/uploads/ HTTP/1.1 [444 Blockerad]
2026-07-05 03:17:15 [domain] GET /wp-content/uploads/ HTTP/1.1 [444 Blockerad]
show less
Web application exploit probing
From server logs:
2026-07-05 03:21:19 (direkt-IP) POST /cgi-bin/. ...
show moreWeb application exploit probing
From server logs:
2026-07-05 03:21:19 (direkt-IP) POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 [400 Bad Request]
2026-07-05 03:21:20 (direkt-IP) POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%6 [400 Bad Request]
2026-07-05 03:21:20 (direkt-IP) POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://inpu [444 Blockerad]
UA: libredtail-http
AS36352 redan bannat
show less
Web application exploit probing
From server logs:
SNI_BAD ip=[attacker] sni="www.gotox.se" time=05/ ...
show moreWeb application exploit probing
From server logs:
SNI_BAD ip=[attacker] sni="www.gotox.se" time=05/Jul/2026:03:49:37 +0200
2026-07-05 03:49:36 www.gotox.se GET / HTTP/1.1 [444 Blockerad]
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:152.0) Gecko/20100101 Firefox/152.0
AS14061 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 03:55:21 (direkt-IP) GET /actuator/h ...
show moreWeb application exploit probing
From server logs:
2026-07-05 03:55:21 (direkt-IP) GET /actuator/health HTTP/1.1 [444 Blockerad]
UA: Mozilla/5.0 zgrab/0.x
show less
Web application exploit probing
From server logs:
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:05 ...
show moreWeb application exploit probing
From server logs:
DIRECT_IP_HTTPS ip=[attacker] time=04/Jul/2026:05:42:47 +0200
2026-07-05 04:49:31 (direkt-IP) GET / HTTP/1.1 [444 Blockerad]
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
2026-07-05 04:49:32 (direkt-IP) {wvu@f� J��L)�� [400 Bad Request]
AS63949 redan bannat
show less
Web application exploit probing
From server logs:
2026-07-05 04:51:04 (direkt-IP) ��ʔ�0�G쬜 ...
show moreWeb application exploit probing
From server logs:
2026-07-05 04:51:04 (direkt-IP) ��ʔ�0�G쬜\x [400 Bad Request]
2026-07-05 04:51:04 (direkt-IP) ������R:\x [400 Bad Request]
show less
Web application exploit probing
From server logs:
2026-07-05 05:29:53 [domain] POST /xmlrpc.php H ...
show moreWeb application exploit probing
From server logs:
2026-07-05 05:29:53 [domain] POST /xmlrpc.php HTTP/1.1 [444 Blockerad]
UA: Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/81.0.0.0 Safari/537.36
show less
Web application exploit probing
From server logs:
2026-07-05 06:48:27 (direkt-IP) GET / HTTP/1.1 ...
show moreWeb application exploit probing
From server logs:
2026-07-05 06:48:27 (direkt-IP) GET / HTTP/1.1 [444 Blockerad]
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
show less
Web application exploit probing
From server logs:
2026-07-04 08:10:30 [domain] POST /xmlrpc.php H ...
show moreWeb application exploit probing
From server logs:
2026-07-04 08:10:30 [domain] POST /xmlrpc.php HTTP/1.1 [444 Blockerad]
UA: Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/100.0.0.0 Safari/537.36
show less
Web application exploit probing
From server logs:
2026-07-04 08:14:18 (direkt-IP) GET / HTTP/1.1 ...
show moreWeb application exploit probing
From server logs:
2026-07-04 08:14:18 (direkt-IP) GET / HTTP/1.1 [444 Blockerad]
show less
Web application exploit probing
From server logs:
2026-07-04 08:14:18 (direkt-IP) GET / HTTP/1.1 ...
show moreWeb application exploit probing
From server logs:
2026-07-04 08:14:18 (direkt-IP) GET / HTTP/1.1 [444 Blockerad]
show less
Web application exploit probing
From server logs:
2026-07-04 08:14:20 (direkt-IP) GET /version HT ...
show moreWeb application exploit probing
From server logs:
2026-07-04 08:14:20 (direkt-IP) GET /version HTTP/1.1 [444 Blockerad]
show less
Web application exploit probing
From server logs:
2026-07-04 08:14:21 (direkt-IP) GET / HTTP/1.1 ...
show moreWeb application exploit probing
From server logs:
2026-07-04 08:14:21 (direkt-IP) GET / HTTP/1.1 [444 Blockerad]
show less
Web application exploit probing
From server logs:
2026-07-04 08:14:22 (direkt-IP) GET /v1 HTTP/1. ...
show moreWeb application exploit probing
From server logs:
2026-07-04 08:14:22 (direkt-IP) GET /v1 HTTP/1.1 [444 Blockerad]
show less
Web App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.