Anonymous
2026-10-13 00:27:23
(3 days ago)
[Tue Oct 13 02:27:21.759461 2026] [proxy_fcgi:error] [pid 4194:tid 4239] [client 34.151.250.141:5015 ...
show more
[Tue Oct 13 02:27:21.759461 2026] [proxy_fcgi:error] [pid 4194:tid 4239] [client 34.151.250.141:50154] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
Anonymous
2026-10-12 21:01:33
(3 days ago)
[Mon Oct 12 23:01:31.513872 2026] [proxy_fcgi:error] [pid 12220:tid 12252] [client 34.151.250.141:36 ...
show more
[Mon Oct 12 23:01:31.513872 2026] [proxy_fcgi:error] [pid 12220:tid 12252] [client 34.151.250.141:36456] AH01071: Got error 'Primary script unknown'
[Mon Oct 12 23:01:31.737968 2026] [proxy_fcgi:error] [pid 1587:tid 1730] [client 34.151.250.141:36474] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
Anonymous
2026-10-12 19:22:05
(3 days ago)
[Mon Oct 12 21:22:03.742487 2026] [proxy_fcgi:error] [pid 4194:tid 4232] [client 34.151.250.141:3760 ...
show more
[Mon Oct 12 21:22:03.742487 2026] [proxy_fcgi:error] [pid 4194:tid 4232] [client 34.151.250.141:37608] AH01071: Got error 'Primary script unknown'
[Mon Oct 12 21:22:03.969862 2026] [proxy_fcgi:error] [pid 4194:tid 4233] [client 34.151.250.141:37648] AH01071: Got error 'Primary script unknown'
[Mon Oct 12 21:22:03.969862 2026] [proxy_fcgi:error] [pid 4194:tid 4233] [client 34.151.250.141:37648] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
Anonymous
2026-10-12 18:15:17
(3 days ago)
[Mon Oct 12 20:15:15.582890 2026] [proxy_fcgi:error] [pid 4194:tid 4237] [client 34.151.250.141:4134 ...
show more
[Mon Oct 12 20:15:15.582890 2026] [proxy_fcgi:error] [pid 4194:tid 4237] [client 34.151.250.141:41344] AH01071: Got error 'Primary script unknown'
[Mon Oct 12 20:15:15.814205 2026] [proxy_fcgi:error] [pid 1580:tid 1704] [client 34.151.250.141:41368] AH01071: Got error 'Primary script unknown'
[Mon Oct 12 20:15:15.814205 2026] [proxy_fcgi:error] [pid 1580:tid 1704] [client 34.151.250.141:41368] AH01071: Got error 'Primary script unknown'
[Mon Oct 12 20:15:16.513558 2026] [proxy_fcgi:error] [pid 1582:tid 1666] [client 34.151.250.141:41320] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
π©πͺ
XICTRON
2026-10-12 16:55:04
(3 days ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
Anonymous
2026-10-12 16:37:18
(3 days ago)
[Mon Oct 12 18:04:02.297104 2026] [proxy_fcgi:error] [pid 1587:tid 1757] [client 34.151.250.141:4715 ...
show more
[Mon Oct 12 18:04:02.297104 2026] [proxy_fcgi:error] [pid 1587:tid 1757] [client 34.151.250.141:47156] AH01071: Got error 'Primary script unknown'
[Mon Oct 12 18:04:02.529947 2026] [proxy_fcgi:error] [pid 1587:tid 1740] [client 34.151.250.141:47156] AH01071: Got error 'Primary script unknown'
[Mon Oct 12 18:04:04.794369 2026] [proxy_fcgi:error] [pid 1587:tid 1732] [client 34.151.250.141:47202] AH01071: Got error 'Primary script unknown'
[Mon Oct 12 18:37:16.601785 2026] [proxy_fcgi:error] [pid 12220:tid 12254] [client 34.151.250.141:57598] AH01071: Got error 'Primary script unknown'
[Mon Oct 12 18:37:17.038967 2026] [proxy_fcgi:error] [pid 12220:tid 12261] [client 34.151.250.141:57618] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
π©πͺ
jakidomi
2026-10-12 15:32:33
(3 days ago)
CrowdSec detection: crowdsecurity/http-sensitive-files
Web App Attack
π³π±
Alt255
2026-10-12 15:27:55
(3 days ago)
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.151.250.141 - - [12/Oct/2026:17:27:36 +0200] "GET /.env.supabase HTTP/1.1" 301 582 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
...
show less
Bad Web Bot
Web App Attack
π©πͺ
ghostwarriors
2026-10-12 15:20:12
(3 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
π©πͺ
netman
2026-10-12 15:09:34
(3 days ago)
HTTP: 34.151.250.141 blocked because of 100 failures
...
DDoS Attack
Web App Attack
π©πͺ
Manuel Braeuer
2026-10-12 15:06:34
(3 days ago)
34.151.250.141 - - [12/Oct/2026:17:06:28 +0200] "GET /@fs/src/.env?import&raw?? HTTP/2.0" 403 106 "h ...
show more
34.151.250.141 - - [12/Oct/2026:17:06:28 +0200] "GET /@fs/src/.env?import&raw?? HTTP/2.0" 403 106 "https://winsvr-berlin.de/@fs/src/.env?import&raw??" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.151.250.141 - - [12/Oct/2026:17:06:30 +0200] "GET /pages/api/index.astro.mjs.map HTTP/2.0" 403 106 "https://winsvr-berlin.de/pages/api/index.astro.mjs.map" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.151.250.141 - - [12/Oct/2026:17:06:32 +0200] "GET /private-key HTTP/2.0" 403 106 "https://winsvr-berlin.de/private-key" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.151.250.141 - - [12/Oct/2026:17:06:32 +0200] "GET /.s3cfg HTTP/2.0" 403 106 "https://winsvr-berlin.de/.s3cfg" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.151.250.141 - - [12/Oct/2026:17:06:34 +0200] "GET /.terraform.lock.hcl HTTP/2.0" 403 106 "https://winsvr-be
...
show less
Web App Attack
π¬π§
consul.to
2026-10-12 14:59:16
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
π©πͺ
snhosting
2026-10-12 14:33:29
(3 days ago)
34.151.250.141 - - [12/Oct/2026:16:33:19 +0200] "GET /robots.txt HTTP/2.0" 404 0 "-" "Mozilla/5.0 (c ...
show more
34.151.250.141 - - [12/Oct/2026:16:33:19 +0200] "GET /robots.txt HTTP/2.0" 404 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.151.250.141 - - [12/Oct/2026:16:33:19 +0200] "GET /z9x8c7v6b5-debug-trigger-snhosting.de HTTP/2.0" 404 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.151.250.141 - - [12/Oct/2026:16:33:19 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.151.250.141 - - [12/Oct/2026:16:33:19 +0200] "POST / HTTP/2.0" 404 0 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.151.250.141 - - [12/Oct/2026:16:33:19 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π©πͺ
ger-stg-sifi1
2026-10-12 14:32:09
(3 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
π©πͺ
FD-IX
2026-10-12 14:29:53
(3 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack