Intrusion Watch report 180526

Observed 11 instances of unauthorised web server access and/or looking for web app vulnerabilities, source IP 18.170.32.116
Submitted to https://www.abuseipdb.com/check/18.170.32.116

HTTP Request Time Port User Agent
\x16\x03\x01 Mon, 10 Jul 2023 04:36:57 +0200 80 No User Agent captured.
\x16\x03\x01 Mon, 10 Jul 2023 04:37:05 +0200 80 No User Agent captured.
GET /manage/account/login HTTP/1.1 Mon, 10 Jul 2023 04:37:11 +0200 80 \'Cloud mapping experiment. Contact [email protected]\'
\x16\x03\x01 Mon, 10 Jul 2023 04:37:15 +0200 80 No User Agent captured.
GET /admin/index.html HTTP/1.1 Mon, 10 Jul 2023 04:37:20 +0200 80 \'Cloud mapping experiment. Contact [email protected]\'
\x16\x03\x01 Mon, 10 Jul 2023 04:37:25 +0200 80 No User Agent captured.
\x16\x03\x01 Mon, 10 Jul 2023 04:37:34 +0200 80 No User Agent captured.
GET /+CSCOE+/logon.html HTTP/1.1 Mon, 10 Jul 2023 04:37:40 +0200 80 \'Cloud mapping experiment. Contact [email protected]\'
\x16\x03\x01 Mon, 10 Jul 2023 04:37:44 +0200 80 No User Agent captured.
GET /cgi-bin/login.cgi HTTP/1.1 Mon, 10 Jul 2023 04:37:50 +0200 80 \'Cloud mapping experiment. Contact [email protected]\'
\x16\x03\x01 Mon, 10 Jul 2023 04:37:54 +0200 80 No User Agent captured.

Admin contact:
Admin mail

Edit

Pub: 10 Jul 2023 02:39 UTC

Views: 19