Vulnerability Scan: A security scanner, identified by 'zgrab', attempted to access the Squid cache m ...
show moreVulnerability Scan: A security scanner, identified by 'zgrab', attempted to access the Squid cache manager CGI, indicating a search for known vulnerabilities.
show less
Vulnerability Scan / Proxy Enumeration: A scanner identified as 'zgrab' attempted to access the Squi ...
show moreVulnerability Scan / Proxy Enumeration: A scanner identified as 'zgrab' attempted to access the Squid proxy manager interface, potentially seeking misconfigurations or information disclosure.
show less
Path Traversal & Remote Code Execution (RCE): Attempt to achieve Remote Code Execution via a CGI-BIN ...
show morePath Traversal & Remote Code Execution (RCE): Attempt to achieve Remote Code Execution via a CGI-BIN path traversal vulnerability, downloading and executing an external script.
show less
Information Gathering / Web Scanner: An attempt was made to access an environment configuration file ...
show moreInformation Gathering / Web Scanner: An attempt was made to access an environment configuration file, indicating information gathering.
show less
Information Disclosure Attempt / Web Scanner: A GET request was made for a sensitive .env configurat ...
show moreInformation Disclosure Attempt / Web Scanner: A GET request was made for a sensitive .env configuration file, indicating information disclosure reconnaissance.
show less
Path Traversal / Information Disclosure Attempt: A path traversal attempt was made to access a produ ...
show morePath Traversal / Information Disclosure Attempt: A path traversal attempt was made to access a production environment configuration file, indicating sensitive information disclosure.
show less
Credential Harvesting: An attempt to locate and access sensitive credential files using directory tr ...
show moreCredential Harvesting: An attempt to locate and access sensitive credential files using directory traversal.
show less
Vulnerability Scan: Numerous HTTP GET requests targeting common web application vulnerabilities and ...
show moreVulnerability Scan: Numerous HTTP GET requests targeting common web application vulnerabilities and administrative interfaces were detected.
show less
Targeted Reconnaissance: An attacker conducted targeted reconnaissance by probing for sensitive appl ...
show moreTargeted Reconnaissance: An attacker conducted targeted reconnaissance by probing for sensitive application endpoints related to wallets or financial services.
show less
WordPress Vulnerability Scan: An attempt to identify WordPress installations and common vulnerabilit ...
show moreWordPress Vulnerability Scan: An attempt to identify WordPress installations and common vulnerability paths.
show less
Vulnerability Scan: An attacker attempted to access Kubernetes configuration files, which could lead ...
show moreVulnerability Scan: An attacker attempted to access Kubernetes configuration files, which could lead to cluster compromise.
show less
Exploitation Attempt: An attempt was made to exploit a vulnerability using a known web shell or malw ...
show moreExploitation Attempt: An attempt was made to exploit a vulnerability using a known web shell or malware payload ('androxgh0st').
show less
Port Scan/Vulnerability Scan: A GET request from an 'IPScanner' user agent indicates a potential por ...
show morePort Scan/Vulnerability Scan: A GET request from an 'IPScanner' user agent indicates a potential port or vulnerability scan.
show less
Remote Code Execution (RCE) Attempt: An attempt to execute arbitrary commands remotely via a ThinkPH ...
show moreRemote Code Execution (RCE) Attempt: An attempt to execute arbitrary commands remotely via a ThinkPHP vulnerability was detected, aiming to download and run a malicious payload.
show less
Vulnerability Scan: An attempt to access the Squid cache manager CGI interface, which could reveal s ...
show moreVulnerability Scan: An attempt to access the Squid cache manager CGI interface, which could reveal sensitive information or allow management functions.
show less
Remote Code Execution: A critical attempt to execute remote code was detected, involving a login att ...
show moreRemote Code Execution: A critical attempt to execute remote code was detected, involving a login attempt followed by downloading and executing a malicious file.
show less
Command Injection: An attacker attempted to execute arbitrary shell commands by injecting them into ...
show moreCommand Injection: An attacker attempted to execute arbitrary shell commands by injecting them into a 'hostname' parameter.
show less
Reconnaissance/Information Gathering: A Go HTTP client requested the '/metrics' endpoint, likely att ...
show moreReconnaissance/Information Gathering: A Go HTTP client requested the '/metrics' endpoint, likely attempting to discover system monitoring information.
show less
Remote Code Execution (RCE) Attempt: An attempt was made to achieve remote code execution via path t ...
show moreRemote Code Execution (RCE) Attempt: An attempt was made to achieve remote code execution via path traversal to execute a shell script, likely downloading and running further malware.
show less
Remote Code Execution Attempt: A remote code execution attempt was made via path traversal and comma ...
show moreRemote Code Execution Attempt: A remote code execution attempt was made via path traversal and command injection to download and execute a malicious script.
show less
Path Traversal and Remote Code Execution: An attempt was made to exploit a path traversal vulnerabil ...
show morePath Traversal and Remote Code Execution: An attempt was made to exploit a path traversal vulnerability to execute arbitrary commands and download a malicious script.
show less
Credential Attack: Attempt to interact with Windows Remote Management (WinRM) using NTLM authenticat ...
show moreCredential Attack: Attempt to interact with Windows Remote Management (WinRM) using NTLM authentication, indicative of reconnaissance or credential-based attacks.
show less
Brute-Force
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.