🇩🇪
Holger
2026-10-14 06:18:22
UTC ·
(3 weeks ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
Anonymous
2026-10-09 20:50:20
UTC ·
(1 month ago)
Flagged as abuse by IisGuard automated detection (tier L3, score 65/100). Reasons: Reputation=1, BadPath=23,8, Rate=20, Diversity=20.
Web App Attack
DDoS Attack
Bad Web Bot
Anonymous
2026-10-09 20:38:39
UTC ·
(1 month ago)
[Fri Oct 09 22:38:38.261246 2026] [proxy_fcgi:error] [pid 1790:tid 1945] [client 34.142.148.4:33944] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 22:38:38.508711 2026] [proxy_fcgi:error] [pid 1790:tid 1960] [client 34.142.148.4:33944] AH01 ...
show more
[Fri Oct 09 22:38:38.261246 2026] [proxy_fcgi:error] [pid 1790:tid 1945] [client 34.142.148.4:33944] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 22:38:38.508711 2026] [proxy_fcgi:error] [pid 1790:tid 1960] [client 34.142.148.4:33944] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 22:38:38.508711 2026] [proxy_fcgi:error] [pid 1790:tid 1960] [client 34.142.148.4:33944] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
Anonymous
2026-10-09 19:33:40
UTC ·
(1 month ago)
[Fri Oct 09 21:33:37.982411 2026] [proxy_fcgi:error] [pid 65744:tid 65778] [client 34.142.148.4:60220] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 21:33:38.222605 2026] [proxy_fcgi:error] [pid 65744:tid 65789] [client 34.142.148.4:60220] ...
show more
[Fri Oct 09 21:33:37.982411 2026] [proxy_fcgi:error] [pid 65744:tid 65778] [client 34.142.148.4:60220] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 21:33:38.222605 2026] [proxy_fcgi:error] [pid 65744:tid 65789] [client 34.142.148.4:60220] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 21:33:38.222605 2026] [proxy_fcgi:error] [pid 65744:tid 65789] [client 34.142.148.4:60220] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 21:33:39.716366 2026] [proxy_fcgi:error] [pid 10288:tid 10325] [client 34.142.148.4:60280] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
Anonymous
2026-10-09 19:11:37
UTC ·
(1 month ago)
[Fri Oct 09 20:50:20.072593 2026] [proxy_fcgi:error] [pid 3036:tid 3085] [client 34.142.148.4:35742] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 20:50:20.327227 2026] [proxy_fcgi:error] [pid 3036:tid 3074] [client 34.142.148.4:35742] AH01 ...
show more
[Fri Oct 09 20:50:20.072593 2026] [proxy_fcgi:error] [pid 3036:tid 3085] [client 34.142.148.4:35742] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 20:50:20.327227 2026] [proxy_fcgi:error] [pid 3036:tid 3074] [client 34.142.148.4:35742] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 20:50:23.306050 2026] [proxy_fcgi:error] [pid 1790:tid 1943] [client 34.142.148.4:35806] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 21:11:35.106821 2026] [proxy_fcgi:error] [pid 65744:tid 65781] [client 34.142.148.4:53504] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 21:11:35.379580 2026] [proxy_fcgi:error] [pid 1791:tid 1999] [client 34.142.148.4:39162] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
Anonymous
2026-10-09 18:59:02
UTC ·
(1 month ago)
DNS Compromise
DDoS Attack
🇩🇪
Manuel Braeuer
2026-10-09 18:38:39
UTC ·
(1 month ago)
34.142.148.4 - - [09/Oct/2026:20:38:30 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berlin.de/.htpasswd" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.142.148.4 - - [09/Oct/2026:20:38:31 +0200] "GET /server.key H ...
show more
34.142.148.4 - - [09/Oct/2026:20:38:30 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berlin.de/.htpasswd" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.142.148.4 - - [09/Oct/2026:20:38:31 +0200] "GET /server.key HTTP/2.0" 403 106 "https://winsvr-berlin.de/server.key" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.142.148.4 - - [09/Oct/2026:20:38:36 +0200] "GET /.env?.svg?.wasm?init HTTP/2.0" 403 106 "https://winsvr-berlin.de/.env?.svg?.wasm?init" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.142.148.4 - - [09/Oct/2026:20:38:38 +0200] "GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/api/fs/read?allowOutsideWorkspace=true&path=/app/.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.142.148.4 - - [09/Oct/2026:20:38:39 +0200] "GET /%2Fsettings HTTP/2.0" 403 106 "https://wi
...
show less
Web App Attack
🇩🇪
AbuseBaer
2026-10-09 18:36:25
UTC ·
(1 month ago)
access attempt detected by IDS script (B)
Web App Attack
Anonymous
2026-10-09 18:25:27
UTC ·
(1 month ago)
Automated abuse report by SpeedIT Security Team
Brute-Force
SSH
🇩🇪
Dennis
2026-10-09 18:02:43
UTC ·
(1 month ago)
34.142.148.4 has been banned for triggering http-probing (11 events over 421.224739ms).
Brute-Force
Web App Attack
🇩🇪
XICTRON
2026-10-09 17:55:07
UTC ·
(1 month ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
Anonymous
2026-10-09 17:49:01
UTC ·
(1 month ago)
Bot / scanning and/or hacking attempts: POST /api/fs/exec HTTP/2.0, POST /api/templates/preview HTTP/2.0, POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend, POST /feast/read-document HTTP/2.0, POST /exec-py HTTP/2.0, POST /langflow/api/ ...
show more
Bot / scanning and/or hacking attempts: POST /api/fs/exec HTTP/2.0, POST /api/templates/preview HTTP/2.0, POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend, POST /feast/read-document HTTP/2.0, POST /exec-py HTTP/2.0, POST /langflow/api/v1/validate/code HTTP/2.0, POST /cgi-bin/php?-d+allow_url_include%3don+-d+auto_prepend_fil, POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_, POST /api/designer/v1/file-content HTTP/2.0, POST /api/v1/node-load-method/customMCP HTTP/2.0, POST /api/v1/build_public_tmp/00000000-0000-0000-0000-000000000, POST /index.php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_fi, POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%, POST /flowise/api/v1/node-load-method/customMCP HTTP/2.0, POST /api/v1/validate/code HTTP/2.0, POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_, POST /php-cgi/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_, POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e, POST /dashboard HTTP/2.0
show less
Hacking
Web App Attack
Anonymous
2026-10-09 17:26:32
UTC ·
(1 month ago)
PSCSERV WPSCAN 34.142.148.4
Bad Web Bot
Web App Attack
🇩🇪
gadix
2026-10-09 17:24:44
UTC ·
(1 month ago)
[09/Oct/2026:19:24:44.199089 +0200] askjXD7m5JfUlr9isJiHwgAAABQ 34.142.148.4 34292 127.0.0.1 7081
[09/Oct/2026:19:24:44.203604 +0200] askjXEpFcNxbgnT6OLJ7iQAAAAA 34.142.148.4 34296 127.0.0.1 7081
[09/Oct/2026:19:24:44.220197 +0200] askjXAYj-SEuOzhu17 ...
show more
[09/Oct/2026:19:24:44.199089 +0200] askjXD7m5JfUlr9isJiHwgAAABQ 34.142.148.4 34292 127.0.0.1 7081
[09/Oct/2026:19:24:44.203604 +0200] askjXEpFcNxbgnT6OLJ7iQAAAAA 34.142.148.4 34296 127.0.0.1 7081
[09/Oct/2026:19:24:44.220197 +0200] askjXAYj-SEuOzhu17Gd0wAAABU 34.142.148.4 34314 127.0.0.1 7081
...
show less
Web App Attack
Anonymous
2026-10-09 17:15:01
UTC ·
(1 month ago)
34.142.148.4 - - [09/Oct/2026:19:15:01 +0200] "GET /.npmrc HTTP/2.0" 301 169 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@)"
Bad Web Bot