Below is a list of the last 500 suspicious interactions with this IP.
Last observed Fri, 25 Sep 2026 04:30:51 (Australia/Brisbane)
| Description | Count |
|---|---|
| ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | 172 |
| ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | 85 |
| ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | 53 |
| ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | 50 |
| ET HUNTING Javascript Sandbox Escape via Global Object (process) | 43 |
| ET WEB_SERVER WEB-PHP phpinfo access | 42 |
| ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | 36 |
| ET INFO ChatGPT-User Traffic Detected Inbound M2 | 34 |
| ET INFO ChatGPT-User Traffic Detected Inbound M1 | 34 |
| ET WEB_SERVER Likely Malicious Request for /proc/self/environ | 22 |
| ET WEB_SERVER /etc/passwd Detected in URI | 20 |
| ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | 18 |
| ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | 17 |
| ET SCAN Suspicious User-Agent Containing Security Scan/ner Likely Scan | 16 |
| ET WEB_SERVER Possible SQL Injection Obfuscated by REVERSE function in HTTP Request Body | 14 |
| ET INFO Python aiohttp User-Agent Observed Inbound | 10 |
| ET SCAN LeakIX Inbound User-Agent | 8 |
| ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body | 8 |
| ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body | 8 |
| ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability | 7 |
| ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030 & CVE-2026-60137) M2 | 6 |
| ET WEB_SPECIFIC_APPS Qwik Unauthenticated RCE via server$ Deserialization (CVE-2026-27971) | 2 |
| ET WEB_SPECIFIC_APPS SmarterTools SmarterMail Authentication Bypass (CVE-2026-23760) | 2 |
| ET WEB_SPECIFIC_APPS Wordpress LiteSpeed Cache Plugin debug.log Access Attempt (CVE-2024-44000) | 2 |
| ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030) M2 | 2 |
| ET WEB_SPECIFIC_APPS Adobe Commerce & Magento SessionReaper Unauthenticated Remote Code Execution (CVE-2025-54236) | 2 |
| ET WEB_SERVER HTTP POST Generic eval of base64_decode | 2 |
| ET SCAN Exabot Webcrawler User Agent | 2 |
| Timestamp | Description | Protocol | Destination Port |
|---|---|---|---|
| 2026-09-25 04:30:51 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:51 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-25 04:30:51 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:51 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-25 04:30:51 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:51 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-25 04:30:50 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:50 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:50 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-25 04:30:50 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-25 04:30:50 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:50 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:50 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-25 04:30:50 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:50 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:50 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:50 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:50 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:50 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:50 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:50 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:49 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-25 04:30:49 | ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) | TCP | 3000 |
| 2026-09-23 02:09:13 | ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability | TCP | 3000 |
| 2026-09-21 08:08:48 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-21 08:08:48 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-21 08:08:48 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-17 17:28:54 | ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body | TCP | 3000 |
| 2026-09-17 17:28:54 | ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body | TCP | 3000 |
| 2026-09-17 17:28:54 | ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030 & CVE-2026-60137) M2 | TCP | 3000 |
| 2026-09-17 17:28:54 | ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body | TCP | 3000 |
| 2026-09-17 17:28:54 | ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030 & CVE-2026-60137) M2 | TCP | 3000 |
| 2026-09-17 17:28:54 | ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body | TCP | 3000 |
| 2026-09-17 09:36:52 | ET INFO Python aiohttp User-Agent Observed Inbound | TCP | 3000 |
| 2026-09-17 09:36:52 | ET INFO Python aiohttp User-Agent Observed Inbound | TCP | 3000 |
| 2026-09-16 08:42:17 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-09-16 08:42:17 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-09-12 20:38:34 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-09-12 20:38:34 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-09-11 15:21:17 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-11 15:21:17 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-11 15:21:17 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-11 15:21:17 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-11 15:21:17 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-11 15:21:17 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-11 15:21:17 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-11 15:21:17 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-11 15:21:17 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-11 15:21:17 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-11 15:21:17 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-11 15:21:17 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-11 15:21:17 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-11 15:21:17 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-11 15:21:17 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-11 15:21:17 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-11 10:02:30 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-11 10:02:30 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-11 10:02:30 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-11 10:02:29 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-11 10:02:29 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-11 10:02:29 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-10 04:56:32 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-10 04:56:32 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-10 04:56:32 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-10 04:56:32 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-10 04:56:32 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-10 04:56:32 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-09 05:24:52 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-09-09 05:24:52 | ET WEB_SERVER HTTP POST Generic eval of base64_decode | TCP | 3000 |
| 2026-09-09 05:24:52 | ET WEB_SERVER HTTP POST Generic eval of base64_decode | TCP | 3000 |
| 2026-09-09 05:24:52 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-09-09 05:24:51 | ET WEB_SPECIFIC_APPS Qwik Unauthenticated RCE via server$ Deserialization (CVE-2026-27971) | TCP | 3000 |
| 2026-09-09 05:24:51 | ET WEB_SPECIFIC_APPS Qwik Unauthenticated RCE via server$ Deserialization (CVE-2026-27971) | TCP | 3000 |
| 2026-09-09 05:24:51 | ET WEB_SPECIFIC_APPS SmarterTools SmarterMail Authentication Bypass (CVE-2026-23760) | TCP | 3000 |
| 2026-09-09 05:24:51 | ET WEB_SPECIFIC_APPS SmarterTools SmarterMail Authentication Bypass (CVE-2026-23760) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-08 12:38:09 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-09-06 09:48:02 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-09-06 09:48:02 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-09-06 09:48:02 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-09-06 09:48:02 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-09-06 09:16:44 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-06 09:16:44 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-06 09:16:44 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-06 09:16:44 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-06 09:16:44 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-06 01:56:29 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-06 01:56:29 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-06 01:56:29 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-06 01:56:29 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-06 01:56:29 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-05 18:15:56 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-05 18:15:56 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-05 07:04:11 | ET WEB_SERVER Possible SQL Injection Obfuscated by REVERSE function in HTTP Request Body | TCP | 3000 |
| 2026-09-05 07:04:11 | ET WEB_SERVER Possible SQL Injection Obfuscated by REVERSE function in HTTP Request Body | TCP | 3000 |
| 2026-09-04 22:05:00 | ET WEB_SERVER Possible SQL Injection Obfuscated by REVERSE function in HTTP Request Body | TCP | 3000 |
| 2026-09-04 22:05:00 | ET WEB_SERVER Possible SQL Injection Obfuscated by REVERSE function in HTTP Request Body | TCP | 3000 |
| 2026-09-04 06:31:14 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-04 06:31:14 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-04 05:18:23 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-04 05:18:23 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-04 03:26:58 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-04 03:26:58 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-03 18:41:09 | ET INFO Python aiohttp User-Agent Observed Inbound | TCP | 3000 |
| 2026-09-03 18:41:09 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-03 18:41:09 | ET INFO Python aiohttp User-Agent Observed Inbound | TCP | 3000 |
| 2026-09-03 18:41:09 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-02 10:24:49 | ET WEB_SERVER Possible SQL Injection Obfuscated by REVERSE function in HTTP Request Body | TCP | 3000 |
| 2026-09-02 10:24:49 | ET WEB_SERVER Possible SQL Injection Obfuscated by REVERSE function in HTTP Request Body | TCP | 3000 |
| 2026-09-01 16:22:03 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-01 16:22:03 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-01 16:22:03 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-09-01 16:22:03 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-09-01 16:22:03 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-09-01 16:22:03 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-08-31 17:54:32 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-31 17:54:32 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-31 17:09:33 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-08-31 17:09:33 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-08-29 18:58:34 | ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body | TCP | 3000 |
| 2026-08-29 18:58:34 | ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body | TCP | 3000 |
| 2026-08-29 18:58:34 | ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030 & CVE-2026-60137) M2 | TCP | 3000 |
| 2026-08-29 18:58:34 | ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body | TCP | 3000 |
| 2026-08-29 18:58:34 | ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body | TCP | 3000 |
| 2026-08-29 18:58:34 | ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030 & CVE-2026-60137) M2 | TCP | 3000 |
| 2026-08-28 21:50:17 | ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability | TCP | 3000 |
| 2026-08-28 21:50:17 | ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability | TCP | 3000 |
| 2026-08-27 05:39:22 | ET WEB_SERVER Possible SQL Injection Obfuscated by REVERSE function in HTTP Request Body | TCP | 3000 |
| 2026-08-27 05:39:22 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-08-27 05:39:22 | ET WEB_SERVER Possible SQL Injection Obfuscated by REVERSE function in HTTP Request Body | TCP | 3000 |
| 2026-08-27 05:39:22 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-08-26 23:57:12 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-26 23:57:12 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-25 07:25:19 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-08-25 07:25:19 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-08-25 07:25:19 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-08-25 07:25:19 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-08-25 07:25:19 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-08-25 07:25:19 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-08-24 09:52:18 | ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030 & CVE-2026-60137) M2 | TCP | 3000 |
| 2026-08-24 09:52:18 | ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body | TCP | 3000 |
| 2026-08-24 09:52:18 | ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body | TCP | 3000 |
| 2026-08-24 09:52:18 | ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030 & CVE-2026-60137) M2 | TCP | 3000 |
| 2026-08-24 09:52:18 | ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body | TCP | 3000 |
| 2026-08-24 09:52:18 | ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body | TCP | 3000 |
| 2026-08-19 23:28:48 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-19 23:28:48 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-19 15:32:53 | ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | TCP | 3000 |
| 2026-08-19 15:32:53 | ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | TCP | 3000 |
| 2026-08-18 20:19:05 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-18 20:19:05 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-16 08:22:59 | ET INFO Python aiohttp User-Agent Observed Inbound | TCP | 3000 |
| 2026-08-16 08:22:59 | ET INFO Python aiohttp User-Agent Observed Inbound | TCP | 3000 |
| 2026-08-15 00:45:47 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-15 00:45:47 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-12 22:27:35 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-12 22:27:35 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-12 03:25:20 | ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | TCP | 3000 |
| 2026-08-12 03:25:20 | ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-08-11 09:24:30 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-11 09:24:30 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-11 09:24:30 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-11 09:24:30 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-11 09:24:30 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-08-10 23:07:05 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-10 23:07:05 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-10 23:07:05 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-10 23:07:05 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-10 11:49:37 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-10 11:49:37 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-10 07:07:26 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 07:07:26 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-10 06:09:00 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-10 06:09:00 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-09 22:32:34 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-09 22:32:34 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-09 01:42:27 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-09 01:42:27 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-09 01:42:27 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-09 01:42:27 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-08 20:56:29 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-08 20:56:29 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-08 20:56:29 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-08 20:56:29 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-08 17:56:22 | ET INFO Python aiohttp User-Agent Observed Inbound | TCP | 3000 |
| 2026-08-08 17:56:22 | ET INFO Python aiohttp User-Agent Observed Inbound | TCP | 3000 |
| 2026-08-07 07:05:35 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-08-07 07:05:35 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-06 22:50:51 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-06 22:50:51 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-06 22:50:51 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-06 22:50:51 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SERVER /etc/passwd Detected in URI | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET EXPLOIT VMware Spring Cloud Directory Traversal (CVE-2020-5410) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208) | TCP | 3000 |
| 2026-08-06 22:50:51 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-06 22:12:57 | ET WEB_SPECIFIC_APPS Adobe Commerce & Magento SessionReaper Unauthenticated Remote Code Execution (CVE-2025-54236) | TCP | 3000 |
| 2026-08-06 22:12:57 | ET WEB_SPECIFIC_APPS Adobe Commerce & Magento SessionReaper Unauthenticated Remote Code Execution (CVE-2025-54236) | TCP | 3000 |
| 2026-08-03 15:33:31 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-03 15:33:31 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-03 15:33:30 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-03 15:33:30 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-03 14:32:33 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-03 14:32:33 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-03 14:32:33 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-03 14:32:33 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-08-03 14:32:33 | ET WEB_SERVER Likely Malicious Request for /proc/self/environ | TCP | 3000 |
| 2026-08-03 14:32:33 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-08-03 12:28:11 | ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability | TCP | 3000 |
| 2026-08-03 12:28:11 | ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability | TCP | 3000 |
| 2026-08-03 08:52:20 | ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability | TCP | 3000 |
| 2026-08-03 08:52:20 | ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability | TCP | 3000 |
| 2026-08-01 20:56:22 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-08-01 20:56:22 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-07-28 07:35:30 | ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body | TCP | 3000 |
| 2026-07-28 07:35:30 | ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body | TCP | 3000 |
| 2026-07-28 07:35:30 | ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body | TCP | 3000 |
| 2026-07-28 07:35:30 | ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030) M2 | TCP | 3000 |
| 2026-07-28 07:35:30 | ET WEB_SPECIFIC_APPS WordPress Core wp2shell Remote Code Execution (CVE-2026-63030) M2 | TCP | 3000 |
| 2026-07-28 07:35:30 | ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body | TCP | 3000 |
| 2026-07-24 23:24:04 | ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | TCP | 3000 |
| 2026-07-24 23:24:04 | ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | TCP | 3000 |
| 2026-07-22 22:06:41 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-07-22 22:06:41 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-07-15 09:31:39 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-07-15 09:31:39 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-07-14 14:10:42 | ET WEB_SERVER Possible SQL Injection Obfuscated by REVERSE function in HTTP Request Body | TCP | 3000 |
| 2026-07-14 14:10:42 | ET WEB_SERVER Possible SQL Injection Obfuscated by REVERSE function in HTTP Request Body | TCP | 3000 |
| 2026-07-13 03:38:19 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-07-13 03:38:19 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-07-11 19:48:57 | ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | TCP | 3000 |
| 2026-07-11 19:48:57 | ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | TCP | 3000 |
| 2026-07-06 07:25:16 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-07-06 07:25:16 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-07-05 23:52:08 | ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | TCP | 3000 |
| 2026-07-05 23:52:08 | ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | TCP | 3000 |
| 2026-07-04 07:26:30 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-07-04 07:26:30 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-07-03 16:11:27 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-07-03 16:11:27 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-07-03 16:11:27 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-07-03 16:11:27 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-07-01 11:39:23 | ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | TCP | 3000 |
| 2026-07-01 11:39:23 | ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | TCP | 3000 |
| 2026-06-29 00:18:23 | ET SCAN LeakIX Inbound User-Agent | TCP | 3000 |
| 2026-06-29 00:18:23 | ET SCAN LeakIX Inbound User-Agent | TCP | 3000 |
| 2026-06-28 20:28:48 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-06-28 20:28:48 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-06-28 06:13:11 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-06-28 06:13:11 | ET INFO ChatGPT-User Traffic Detected Inbound M2 | TCP | 3000 |
| 2026-06-28 06:13:11 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-06-28 06:13:11 | ET INFO ChatGPT-User Traffic Detected Inbound M1 | TCP | 3000 |
| 2026-06-27 02:23:31 | ET SCAN LeakIX Inbound User-Agent | TCP | 3000 |
| 2026-06-27 02:23:31 | ET SCAN LeakIX Inbound User-Agent | TCP | 3000 |
| 2026-06-26 23:53:50 | ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | TCP | 3000 |
| 2026-06-26 23:53:50 | ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML | TCP | 3000 |
| 2026-06-25 08:00:53 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-06-25 08:00:53 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-06-25 08:00:53 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-06-25 08:00:53 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-06-25 08:00:53 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-06-25 08:00:53 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-06-24 20:43:00 | ET INFO Python aiohttp User-Agent Observed Inbound | TCP | 3000 |
| 2026-06-24 20:43:00 | ET INFO Python aiohttp User-Agent Observed Inbound | TCP | 3000 |
| 2026-06-24 17:25:05 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-06-24 17:25:05 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-06-24 17:25:05 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-06-24 17:25:05 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
| 2026-06-24 17:25:05 | ET HUNTING Javascript Sandbox Escape via Global Object (process) | TCP | 3000 |
| 2026-06-24 17:25:05 | ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182) | TCP | 3000 |
| 2026-06-21 08:38:17 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-06-21 08:38:17 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-06-20 13:52:26 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-06-20 13:52:26 | ET WEB_SERVER WEB-PHP phpinfo access | TCP | 3000 |
| 2026-06-19 09:53:42 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-06-19 09:53:42 | ET WEB_SPECIFIC_APPS WordPress Plugin Gravity SMTP Unauthenticated REST API (CVE-2026-4020) | TCP | 3000 |
| 2026-06-19 07:08:40 | ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body | TCP | 3000 |
Back to top