🇳🇱
45.156.87.104
23 hours ago
[2026-11-01 08:32:04.688897] [authz_core:error] [pid 1573979:tid 135062200764096] [client 45.156.87. ...
show more
[2026-11-01 08:32:04.688897] [authz_core:error] [pid 1573979:tid 135062200764096] [client 45.156.87.104:41848] AH01630: client denied by server configuration: /var/www/*/.env.backup, referer http://dev.*/.env.backup , error_notes:backup-files , URI:'/.env.backup'
[2026-11-01 08:32:04.702027] [authz_core:error] [pid 1573979:tid 135062318663360] [client 45.156.87.104:41848] AH01630: client denied by server configuration: /var/www/*/.env.bak, referer http://dev.*/.env.bak , error_notes:backup-files , URI:'/.env.bak'
[2026-11-01 08:32:04.716008] [authz_core:error] [pid 1573979:tid 135062183978688] [client 45.156.87.104:41848] AH01630: client denied by server configuration: /var/www/*/.env.dev, referer http://dev.*/.env.dev , error_notes:dot-files , URI:'/.env.dev'
[2026-11-01 08:32:04.729807] [authz_core:error] [pid 1573979:tid 135062175585984] [client 45.156.87.104:41848] AH01630: client denied by server configuration: /var/www/*/.env.development, referer http://dev.*/.env.development , error_notes:dot-files , U
show less
Web App Attack
Bad Web Bot
🇳🇱
2a0f:ca80:b00b:8ae4::5
23 hours ago
[2026-11-01 08:32:02.749074] [authz_core:error] [pid 1573978:tid 135061638715072] [client 2a0f:ca80: ...
show more
[2026-11-01 08:32:02.749074] [authz_core:error] [pid 1573978:tid 135061638715072] [client 2a0f:ca80:b00b:8ae4::5:37726] AH01630: client denied by server configuration: /var/www/*/wp-json, referer http://dev.*/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings , error_notes:wp:plugin-exploit , URI:'/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings'
[2026-11-01 08:32:02.760929] [authz_core:error] [pid 1573978:tid 135062335448768] [client 2a0f:ca80:b00b:8ae4::5:37726] AH01630: client denied by server configuration: /var/www/*/.git, referer http://dev.*/.git/config , error_notes:config-files , URI:'/.git/config'
[2026-11-01 08:32:04.050990] [authz_core:error] [pid 1573978:tid 135061680678592] [client 2a0f:ca80:b00b:8ae4::5:37726] AH01630: client denied by server configuration: /var/www/*/phpinfo, referer http://dev.*/phpinfo , error_notes:php_info , URI:'/phpinfo'
[2026-11-01 08:32:04.062873] [authz_core:error] [pid 1573978:tid 135062327056064] [client 2a0f:ca80:b00b:8ae4::5:37726] A
show less
Web App Attack
Bad Web Bot
🇧🇪
198.235.24.134
01 Nov 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/ HTTP/2.0;
show less
Bad Web Bot
🇪🇹
196.189.236.67
01 Nov 2026
[2026-11-01 06:55:04.596201] [core:error] [pid 1573979:tid 135061655500480] [client 196.189.236.67:5 ...
show more
[2026-11-01 06:55:04.596201] [core:error] [pid 1573979:tid 135061655500480] [client 196.189.236.67:59420] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) , URI:'/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh'
[2026-11-01 06:55:05.965815] [core:error] [pid 1573978:tid 135062301877952] [client 196.189.236.67:59430] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) , URI:'/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh'
[2026-11-01 06:55:05.965815] [core:error] [pid 1573978:tid 135062301877952] [client 196.189.236.67:59430] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) , URI:'/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%
show less
Web App Attack
Bad Web Bot
🇺🇸
40.119.43.92
01 Nov 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/*/Powershell HTTP/1.1;
Bad Web Bot
🇹🇼
198.235.24.85
01 Nov 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:wrong-host; uri:/ HTTP/1.0;
show less
Bad Web Bot
🇺🇸
52.188.225.226
01 Nov 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/version HTTP/1.1;
Bad Web Bot
🇧🇪
35.210.176.28
01 Nov 2026
[2026-11-01 04:39:32.924893] [authz_core:error] [pid 1573978:tid 135061647107776] [client 35.210.176 ...
show more
[2026-11-01 04:39:32.924893] [authz_core:error] [pid 1573978:tid 135061647107776] [client 35.210.176.28:20908] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-11-01 04:39:33.380561] [authz_core:error] [pid 1573979:tid 135061680678592] [client 35.210.176.28:20924] AH01630: client denied by server configuration: /var/www/*/pub , error_notes:wrong-host , URI:'/pub/'
[2026-11-01 04:39:33.951269] [authz_core:error] [pid 1573978:tid 135062200764096] [client 35.210.176.28:20934] AH01630: client denied by server configuration: /var/www/*/files , error_notes:wrong-host , URI:'/files/'
[2026-11-01 04:39:34.459638] [authz_core:error] [pid 1573979:tid 135061638715072] [client 35.210.176.28:20950] AH01630: client denied by server configuration: /var/www/*/downloads , error_notes:wrong-host , URI:'/downloads/'
[2026-11-01 04:39:38.869821] [authz_core:error] [pid 1573978:tid 135062175585984] [client 35.210.176.28:20962] AH01630: client denied by server configuration: /var
show less
Web App Attack
Bad Web Bot
🇦🇪
141.145.153.109
01 Nov 2026
[2026-11-01 04:17:30.787246] [authz_core:error] [pid 1573978:tid 135062419474112] [client 141.145.15 ...
show more
[2026-11-01 04:17:30.787246] [authz_core:error] [pid 1573978:tid 135062419474112] [client 141.145.153.109:0] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wp-wp2shell , URI:'/?rest_route=/batch/v1'
[2026-11-01 04:17:31.212276] [authz_core:error] [pid 1573979:tid 135062495147712] [client 141.145.153.109:0] AH01630: client denied by server configuration: /var/www/*/wp-json , error_notes:wp-wp2shell , URI:'/wp-json/batch/v1'
[2026-11-01 04:17:37.271345] [authz_core:error] [pid 1573978:tid 135062553896640] [client 141.145.153.109:0] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wp-rest:user-enum , URI:'/?rest_route=/wp/v2/users'
[2026-11-01 04:18:08.843903] [authz_core:error] [pid 1573978:tid 135062411065024] [client 141.145.153.109:0] AH01630: client denied by server configuration: /var/www/*/register , error_notes:login-probing , URI:'/register/'
[2026-11-01 04:18:09.199571] [authz_core:error] [pid 1573979:tid 135062419474112] [client 141.145.153.109:0] AH
show less
Web App Attack
Bad Web Bot
🇵🇱
194.180.49.41
01 Nov 2026
[2026-11-01 03:52:32.768519] [authz_core:error] [pid 1573978:tid 135062310270656] [client 194.180.49 ...
show more
[2026-11-01 03:52:32.768519] [authz_core:error] [pid 1573978:tid 135062310270656] [client 194.180.49.41:40182] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-11-01 03:52:33.136454] [authz_core:error] [pid 1573979:tid 135061680678592] [client 194.180.49.41:40190] AH01630: client denied by server configuration: /var/www/*/.env , error_notes:config-files , URI:'/.env'
show less
Web App Attack
Bad Web Bot
🇩🇪
139.162.144.251
01 Nov 2026
[2026-11-01 02:14:42.154325] [authz_core:error] [pid 1573978:tid 135062200764096] [client 139.162.14 ...
show more
[2026-11-01 02:14:42.154325] [authz_core:error] [pid 1573978:tid 135062200764096] [client 139.162.144.251:39672] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-11-01 02:14:46.488712] [authz_core:error] [pid 1573979:tid 135062318663360] [client 139.162.144.251:53476] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-11-01 02:14:46.488712] [authz_core:error] [pid 1573979:tid 135062318663360] [client 139.162.144.251:53476] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-11-01 02:15:24.733671] [authz_core:error] [pid 1573979:tid 135062217549504] [client 139.162.144.251:38122] AH01630: client denied by server configuration: /var/www/html/guestLogin.html , error_notes:wrong-host , URI:'/guestLogin.html?guest=1'
[2026-11-01 02:15:24.733671] [authz_core:error] [pid 1573979:tid 135062217549504] [client 139.162.144.251:38122] AH01630: client denied by server co
show less
Web App Attack
Bad Web Bot
🇺🇸
205.210.31.5
01 Nov 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:wp-rest:user-enum; uri:/?rest_route=/wp/v2/users HTTP/2.0;
show less
Bad Web Bot
🇧🇪
198.235.24.184
01 Nov 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:wp-json-user-enum; uri:/wp-json/wp/v2/users HTTP/2.0;
show less
Bad Web Bot
🇧🇪
198.235.24.244
01 Nov 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/wp-json/ HTTP/2.0;
show less
Bad Web Bot
🇺🇸
2600:3c05:0:2000:41ff:fe84:c54c:0
31 Oct 2026
[2026-11-01 00:58:25.411247] [authz_core:error] [pid 1573979:tid 135062511933120] [client 2600:3c05: ...
show more
[2026-11-01 00:58:25.411247] [authz_core:error] [pid 1573979:tid 135062511933120] [client 2600:3c05::2000:41ff:fe84:c54c:0] AH01630: client denied by server configuration: /var/www/*/wordpress, referer http://*/wordpress , error_notes:non-dirs , URI:'/wordpress'
[2026-11-01 00:58:25.553934] [authz_core:error] [pid 1573979:tid 135062503540416] [client 2600:3c05::2000:41ff:fe84:c54c:0] AH01630: client denied by server configuration: /var/www/*/wp, referer http://*/wp , error_notes:non-dirs , URI:'/wp'
[2026-11-01 00:58:25.553934] [authz_core:error] [pid 1573979:tid 135062503540416] [client 2600:3c05::2000:41ff:fe84:c54c:0] AH01630: client denied by server configuration: /var/www/*/wp, referer http://*/wp , error_notes:non-dirs , URI:'/wp'
[2026-11-01 00:58:25.696213] [authz_core:error] [pid 1573979:tid 135062495147712] [client 2600:3c05::2000:41ff:fe84:c54c:0] AH01630: client denied by server configuration: /var/www/*/home, referer http://*/home , error_notes:non-dirs , URI:'/home'
[2026-11-01 00:58:25.696213]
show less
Web App Attack
Bad Web Bot
🇺🇸
205.210.31.8
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/ HTTP/2.0;
show less
Bad Web Bot
🇵🇱
45.138.12.44
31 Oct 2026
[2026-10-31 23:43:13.273096] [authz_core:error] [pid 3717276:tid 135062520325824] [client 45.138.12. ...
show more
[2026-10-31 23:43:13.273096] [authz_core:error] [pid 3717276:tid 135062520325824] [client 45.138.12.44:0] AH01630: client denied by server configuration: /var/www/*/readme.html , error_notes:license-readme , URI:'/readme.html'
[2026-10-31 23:43:14.959818] [authz_core:error] [pid 3717277:tid 135062495147712] [client 45.138.12.44:0] AH01630: client denied by server configuration: /var/www/*/index.php , error_notes:wp-wp2shell , URI:'/index.php?rest_route=/batch/v1'
[2026-10-31 23:43:14.959818] [authz_core:error] [pid 3717277:tid 135062495147712] [client 45.138.12.44:0] AH01630: client denied by server configuration: /var/www/*/index.php , error_notes:wp-wp2shell , URI:'/index.php?rest_route=/batch/v1'
[2026-10-31 23:43:15.691974] [authz_core:error] [pid 3717276:tid 135062402655936] [client 45.138.12.44:0] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wp-wp2shell , URI:'/?rest_route=/batch/v1'
[2026-10-31 23:43:15.691974] [authz_core:error] [pid 3717276:tid 135062402655936] [client 45
show less
Web App Attack
Bad Web Bot
🇺🇸
40.124.116.159
31 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/ HTTP/1.1;
Bad Web Bot
🇧🇷
205.210.31.129
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/ HTTP/2.0;
show less
Bad Web Bot
🇸🇰
66.56.86.75
31 Oct 2026
2026-10-31T22:19:55.162945+02:00 nova wp(*)[3988794]: Forms SPAM from 66.56.86.75
Web App Attack
🇩🇪
45.86.202.80
31 Oct 2026
2026-10-31T22:18:06.454975+02:00 nova wp(*)[3988794]: Forms SPAM from 45.86.202.80
Web App Attack
🇭🇰
156.225.1.109
31 Oct 2026
[2026-10-31 22:03:54.591570] [authz_core:error] [pid 3717276:tid 135062183978688] [client 156.225.1. ...
show more
[2026-10-31 22:03:54.591570] [authz_core:error] [pid 3717276:tid 135062183978688] [client 156.225.1.109:60024] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-31 22:03:55.776943] [authz_core:error] [pid 3717277:tid 135061613569728] [client 156.225.1.109:33036] AH01630: client denied by server configuration: /var/www/*/raw , error_notes:wrong-host , URI:'/raw'
[2026-10-31 22:03:56.943131] [authz_core:error] [pid 3717276:tid 135062310270656] [client 156.225.1.109:34600] AH01630: client denied by server configuration: /var/www/*/ws , error_notes:wrong-host , URI:'/ws'
[2026-10-31 22:03:58.145375] [authz_core:error] [pid 3717277:tid 135062225942208] [client 156.225.1.109:35856] AH01630: client denied by server configuration: /var/www/*/socket.io , error_notes:wrong-host , URI:'/socket.io/?EIO=4&transport=websocket'
[2026-10-31 22:04:01.884434] [authz_core:error] [pid 3717277:tid 135062394246848] [client 156.225.1.109:39914] AH01630: client denied by server c
show less
Web App Attack
Bad Web Bot
🇺🇸
4.150.187.62
31 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/ HTTP/1.1;
Bad Web Bot
🇧🇷
177.75.236.42
31 Oct 2026
[2026-10-31 21:14:44.556091] [authz_core:error] [pid 3717277:tid 135062125229760] [client 177.75.236 ...
show more
[2026-10-31 21:14:44.556091] [authz_core:error] [pid 3717277:tid 135062125229760] [client 177.75.236.42:45724] AH01630: client denied by server configuration: /var/www/*/app , error_notes:missing-php , URI:'/app/adminer/adminer.php'
[2026-10-31 21:14:44.975056] [authz_core:error] [pid 3717276:tid 135062167193280] [client 177.75.236.42:58660] AH01630: client denied by server configuration: /var/www/html/app , error_notes:wrong-host , URI:'/app/adminer/adminer.php'
[2026-10-31 21:14:45.840163] [authz_core:error] [pid 3717277:tid 135061621962432] [client 177.75.236.42:45744] AH01630: client denied by server configuration: /var/www/*/adminer.php , error_notes:missing-php , URI:'/adminer.php'
[2026-10-31 21:14:46.268589] [authz_core:error] [pid 3717276:tid 135062142015168] [client 177.75.236.42:58686] AH01630: client denied by server configuration: /var/www/html/adminer.php , error_notes:wrong-host , URI:'/adminer.php'
[2026-10-31 21:14:47.111952] [authz_core:error] [pid 3717277:tid 135062352234176] [client 177.75
show less
Web App Attack
Bad Web Bot
🇲🇦
197.147.125.40
31 Oct 2026
[2026-10-31 19:58:34.761938] [authz_core:error] [pid 3717277:tid 135062478337728] [client 197.147.12 ...
show more
[2026-10-31 19:58:34.761938] [authz_core:error] [pid 3717277:tid 135062478337728] [client 197.147.125.40:0] AH01630: client denied by server configuration: /var/www/*/author-sitemap.xml , error_notes:sitemap-user-enum , URI:'/author-sitemap.xml'
[2026-10-31 19:58:38.831113] [authz_core:error] [pid 3717277:tid 135062520325824] [client 197.147.125.40:0] AH01630: client denied by server configuration: /var/www/*/index.php , error_notes:php-path_info , URI:'/index.php/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1'
[2026-10-31 19:58:39.185439] [authz_core:error] [pid 3717277:tid 135062495147712] [client 197.147.125.40:0] AH01630: client denied by server configuration: /var/www/*/index.php , error_notes:wp-rest:user-enum , URI:'/index.php?rest_route=/wp/v2/users&_fields=slug&per_page=100&page=1'
[2026-10-31 19:58:39.558881] [authz_core:error] [pid 3717277:tid 135062469928640] [client 197.147.125.40:0] AH01630: client denied by server configuration: /var/www/*/wp , error_notes:non-dirs , URI:'/wp/wp-json/wp/v
show less
Web App Attack
Bad Web Bot