SQL injection attempt detected and blocked by FortiGate IPS. HTTP GET request targeting a public web ...
show moreSQL injection attempt detected and blocked by FortiGate IPS. HTTP GET request targeting a public web server. FortiGate signature: HTTP.URI.SQL.Injection (Attack ID 15621). Action: dropped.
show less
FortiGate IPS detected and blocked an HTTP SQL Injection attempt from 61.220.100.193:59260 targeting ...
show moreFortiGate IPS detected and blocked an HTTP SQL Injection attempt from 61.220.100.193:59260 targeting TCP port 80 on an internal web server. IPS signature: HTTP.URI.SQL.Injection (ID 15621). Severity: High. Action: dropped. Timestamp: 2026-10-06 10:12:18 UTC+8.
show less
FortiGate IPS detected repeated malicious web exploit attempts from 114.35.245.150 targeting TCP/80. ...
show moreFortiGate IPS detected repeated malicious web exploit attempts from 114.35.245.150 targeting TCP/80. Attack patterns included Command Injection, OS Command Injection, Remote Code Execution (RCE), Arbitrary File Upload, and Authentication Bypass. Triggered IPS signatures included Palo.Alto.Networks.Expedition.CVE-2025-0107.Command.Injection, HuangDou.UTCMS.V9.OS.Command.Injection, Blueimp.jQuery.File.Upload.Widget.Arbitrary.File.Upload, SPIP.porte_plume.Remote.Code.Execution, ServiceNow.jvar_page_title.Jelly.Remote.Code.Execution, and anji-plus.AJ-Report.swagger-ui.Authentication.Bypass. All detected malicious requests were dropped by FortiGate IPS.
show less
FortiGate IPS blocked a high-severity web application attack from 38.60.157.86 on 2026-10-03 21:46:1 ...
show moreFortiGate IPS blocked a high-severity web application attack from 38.60.157.86 on 2026-10-03 21:46:19 UTC+8. The attacker sent a malicious HTTP GET request attempting to exploit Zimbra.Collaboration.RestFilter.Local.File.Inclusion (FortiGuard IPS ID 60097) and access /WEB-INF/web.xml. Action: dropped. Source port: 59768, destination port: 993. No successful access observed.
show less
Automated web application vulnerability scanning/exploitation attempts detected and blocked by Forti ...
show moreAutomated web application vulnerability scanning/exploitation attempts detected and blocked by FortiGate IPS.
at 2026/9/4 12:38:26
Source IP: 35.221.242.215
Multiple malicious HTTP requests targeted an internal web server, including:
- Spring Boot Actuator unauthorized access (/actuator/env)
- Vite arbitrary file read attempts
- Path traversal attempts
- Password/sensitive file access attempts
FortiGate IPS signatures:
Spring.Boot.Actuator.Unauthorized.Access
Vite.server.fs.deny.raw.Arbitrary.File.Read
Generic.Path.Traversal.Detection
Web.Server.Password.File.Access
All connections were blocked/dropped by the firewall.
show less
Malicious SMTP connection attempt detected and blocked by FortiGate. Source IP 45.76.44.82 repeatedl ...
show moreMalicious SMTP connection attempt detected and blocked by FortiGate. Source IP 45.76.44.82 repeatedly targeted our public mail service. FortiGate IPS detected "Remote.CMD.Shell" (Signature ID 12449), classified as a critical threat. Subsequent SMTP traffic from the same source was also denied by UTM.
show less
Attempted Mirai/Mozi malware deployment via HTTP command injection against a web server. Payload att ...
show moreAttempted Mirai/Mozi malware deployment via HTTP command injection against a web server. Payload attempted to download and execute Mozi.a. Blocked by FortiGate IPS signature 43191.
show less
IP: 104.28.247.69
Attack Name: Remote.CMD.Shell
Time: 2026-04-29 00:40:04
The attack caused the s ...
show moreIP: 104.28.247.69
Attack Name: Remote.CMD.Shell
Time: 2026-04-29 00:40:04
The attack caused the server to download an unknown link, which was detected as:
Virus/Botnet: W32/WebShell.P!tr
show less
Web App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.