Credential Attack: Attempt to interact with Windows Remote Management (WinRM) using NTLM authenticat ...
show moreCredential Attack: Attempt to interact with Windows Remote Management (WinRM) using NTLM authentication, indicative of reconnaissance or credential-based attacks.
show less
Vulnerability Scan: A vulnerability scanner (zgrab) attempted to access the Apache Tomcat Manager /m ...
show moreVulnerability Scan: A vulnerability scanner (zgrab) attempted to access the Apache Tomcat Manager /manager/text/list endpoint for reconnaissance.
show less
Vulnerability Scan: A network scanner attempted to access a development server's metadata uploader p ...
show moreVulnerability Scan: A network scanner attempted to access a development server's metadata uploader path.
show less
Vulnerability Scan: A request from a ZGrab scanner was made to access a known path for Apache Druid, ...
show moreVulnerability Scan: A request from a ZGrab scanner was made to access a known path for Apache Druid, indicating a search for vulnerabilities.
show less
Vulnerability Scan: A network scanner attempted to access a Tomcat Manager interface path, indicatin ...
show moreVulnerability Scan: A network scanner attempted to access a Tomcat Manager interface path, indicating a vulnerability scan for administrative access.
show less
Network Scan / Service Probe: A non-standard request string was received, indicative of a network sc ...
show moreNetwork Scan / Service Probe: A non-standard request string was received, indicative of a network scan or service probe attempting to identify active services.
show less
Vulnerability Scan / Mass Scan: A ZGrab scanner probed for the '/portal/redlion' path, indicating a ...
show moreVulnerability Scan / Mass Scan: A ZGrab scanner probed for the '/portal/redlion' path, indicating a mass scan for specific web application components or vulnerabilities.
show less
Vulnerability Scan: A web scanner attempted to access a known path associated with Apache Druid, pot ...
show moreVulnerability Scan: A web scanner attempted to access a known path associated with Apache Druid, potentially probing for vulnerabilities.
show less
Command Injection: Attempted command injection vulnerability exploitation to download and execute Mo ...
show moreCommand Injection: Attempted command injection vulnerability exploitation to download and execute Mozi botnet malware.
show less
Remote Code Execution / Vulnerability Exploitation: An attempt to exploit a PHP CGI argument injecti ...
show moreRemote Code Execution / Vulnerability Exploitation: An attempt to exploit a PHP CGI argument injection vulnerability (e.g., CVE-2024-4577) through path traversal to execute arbitrary commands.
show less
Vulnerability Scan: An attempt was made to access a .env file, indicating a scan for exposed environ ...
show moreVulnerability Scan: An attempt was made to access a .env file, indicating a scan for exposed environment configuration and sensitive data.
show less
JDWP Probing: A probe attempting to initiate a Java Debug Wire Protocol (JDWP) handshake, which coul ...
show moreJDWP Probing: A probe attempting to initiate a Java Debug Wire Protocol (JDWP) handshake, which could indicate an attempt to exploit exposed debugging interfaces.
show less
JDWP Probe / Debugger Access Attempt: A JDWP handshake was detected, indicating an attempt to access ...
show moreJDWP Probe / Debugger Access Attempt: A JDWP handshake was detected, indicating an attempt to access a Java Debug Wire Protocol port which can lead to remote code execution.
show less
Malformed Request: A request was made with a non-standard HTTP method, suggesting a malformed or sus ...
show moreMalformed Request: A request was made with a non-standard HTTP method, suggesting a malformed or suspicious probe.
show less
Information Disclosure / Reconnaissance: An attacker attempted to access an exposed Git configuratio ...
show moreInformation Disclosure / Reconnaissance: An attacker attempted to access an exposed Git configuration file, which could lead to sensitive information disclosure.
show less
Information Disclosure: An attempt was made to retrieve a .env file from an API directory, which may ...
show moreInformation Disclosure: An attempt was made to retrieve a .env file from an API directory, which may contain sensitive credentials.
show less
JDWP Debug Port Scan: An attempt was made to establish a Java Debug Wire Protocol (JDWP) handshake, ...
show moreJDWP Debug Port Scan: An attempt was made to establish a Java Debug Wire Protocol (JDWP) handshake, which could lead to remote code execution.
show less
Information Disclosure / Sensitive File Disclosure: A request was made to access the sensitive .env ...
show moreInformation Disclosure / Sensitive File Disclosure: A request was made to access the sensitive .env file, indicating an information disclosure attempt.
show less
Vulnerability Scan: An automated path scanner is performing reconnaissance to discover web resources ...
show moreVulnerability Scan: An automated path scanner is performing reconnaissance to discover web resources.
show less
Web App AttackHacking
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.