🇺🇸
216.25.90.126
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:wrong-host; uri:/ HTTP/1.1;
show less
Bad Web Bot
🇺🇸
2600:3c05:0:2000:41ff:fe84:c54c:0
31 Oct 2026
[2026-10-31 19:16:54.485493] [authz_core:error] [pid 3717277:tid 135062427883200] [client 2600:3c05: ...
show more
[2026-10-31 19:16:54.485493] [authz_core:error] [pid 3717277:tid 135062427883200] [client 2600:3c05::2000:41ff:fe84:c54c:0] AH01630: client denied by server configuration: /var/www/*/old, referer http://*/old , error_notes:non-dirs , URI:'/old'
[2026-10-31 19:16:54.634546] [authz_core:error] [pid 3717277:tid 135062419474112] [client 2600:3c05::2000:41ff:fe84:c54c:0] AH01630: client denied by server configuration: /var/www/*/wordpress, referer http://*/wordpress , error_notes:non-dirs , URI:'/wordpress'
[2026-10-31 19:16:54.892302] [authz_core:error] [pid 3717277:tid 135062553896640] [client 2600:3c05::2000:41ff:fe84:c54c:0] AH01630: client denied by server configuration: /var/www/*/bk, referer http://*/bk , error_notes:non-dirs , URI:'/bk'
[2026-10-31 19:16:55.319447] [authz_core:error] [pid 3717277:tid 135062503540416] [client 2600:3c05::2000:41ff:fe84:c54c:0] AH01630: client denied by server configuration: /var/www/*/new, referer http://*/new , error_notes:non-dirs , URI:'/new'
[2026-10-31 19:16:55.632862]
show less
Web App Attack
Bad Web Bot
🇹🇼
198.235.24.18
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/ HTTP/2.0;
show less
Bad Web Bot
🇳🇱
188.166.47.49
31 Oct 2026
[2026-10-31 18:35:39.333435] [authz_core:error] [pid 3717277:tid 135062545503936] [client 188.166.47 ...
show more
[2026-10-31 18:35:39.333435] [authz_core:error] [pid 3717277:tid 135062545503936] [client 188.166.47.49:60178] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-31 18:35:42.356624] [authz_core:error] [pid 3717277:tid 135062528718528] [client 188.166.47.49:60262] AH01630: client denied by server configuration: /var/www/*/robots.txt , error_notes:wrong-host , URI:'/robots.txt'
[2026-10-31 18:35:42.358511] [authz_core:error] [pid 3717277:tid 135062520325824] [client 188.166.47.49:60264] AH01630: client denied by server configuration: /var/www/*/.well-known/security.txt , error_notes:wrong-host , URI:'/.well-known/security.txt'
[2026-10-31 18:35:42.378048] [authz_core:error] [pid 3717276:tid 135062469928640] [client 188.166.47.49:60252] AH01630: client denied by server configuration: /var/www/*/favicon.ico , error_notes:wrong-host , URI:'/favicon.ico'
[2026-10-31 18:35:42.520311] [authz_core:error] [pid 3717276:tid 135062427883200] [client 188.166.47.49:60282]
show less
Web App Attack
Bad Web Bot
🇳🇱
134.209.202.203
31 Oct 2026
[2026-10-31 18:35:39.135289] [authz_core:error] [pid 3717276:tid 135062200764096] [client 134.209.20 ...
show more
[2026-10-31 18:35:39.135289] [authz_core:error] [pid 3717276:tid 135062200764096] [client 134.209.202.203:48632] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-10-31 18:35:39.458139] [authz_core:error] [pid 3717277:tid 135062352234176] [client 134.209.202.203:48648] AH01630: client denied by server configuration: /var/www/html/favicon.ico , error_notes:wrong-host , URI:'/favicon.ico'
[2026-10-31 18:35:39.667899] [authz_core:error] [pid 3717277:tid 135062343841472] [client 134.209.202.203:48652] AH01630: client denied by server configuration: /var/www/html/robots.txt , error_notes:wrong-host , URI:'/robots.txt'
[2026-10-31 18:35:39.668008] [authz_core:error] [pid 3717277:tid 135062192371392] [client 134.209.202.203:48668] AH01630: client denied by server configuration: /var/www/html/.well-known , error_notes:wrong-host , URI:'/.well-known/security.txt'
[2026-10-31 18:35:39.991683] [authz_core:error] [pid 3717277:tid 135062116837056] [client 134.209.202.2
show less
Web App Attack
Bad Web Bot
🇧🇷
205.210.31.233
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:wrong-host; uri:/ HTTP/1.1;
show less
Bad Web Bot
🇺🇸
20.51.250.231
31 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:exploit-hnap; uri:/owa/auth/x.js HTTP/1.1;
Bad Web Bot
🇫🇮
147.185.133.39
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/ HTTP/2.0;
show less
Bad Web Bot
🇧🇪
198.235.24.181
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/ HTTP/2.0;
show less
Bad Web Bot
🇳🇱
176.65.149.236
31 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/ HTTP/1.1;
Bad Web Bot
🇪🇸
172.233.120.230
31 Oct 2026
[2026-10-31 16:51:21.540709] [authz_core:error] [pid 3717277:tid 135062158800576] [client 172.233.12 ...
show more
[2026-10-31 16:51:21.540709] [authz_core:error] [pid 3717277:tid 135062158800576] [client 172.233.120.230:7088] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-10-31 16:51:27.647562] [authz_core:error] [pid 3717276:tid 135062133622464] [client 172.233.120.230:37526] AH01630: client denied by server configuration: /var/www/*/ , error_notes:unsupported-protocol , URI:'/'
[2026-10-31 16:51:27.647562] [authz_core:error] [pid 3717276:tid 135062133622464] [client 172.233.120.230:37526] AH01630: client denied by server configuration: /var/www/*/ , error_notes:unsupported-protocol , URI:'/'
[2026-10-31 16:54:24.767106] [authz_core:error] [pid 3717276:tid 135062116837056] [client 172.233.120.230:11268] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-10-31 16:54:24.767347] [authz_core:error] [pid 3717276:tid 135062116837056] [client 172.233.120.230:11282] AH01630: client denied by server configuration: /var/w
show less
Web App Attack
Bad Web Bot
🇺🇸
40.124.187.55
31 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/developmentserver/metadatauplo ...
show more
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/developmentserver/metadatauploader HTTP/1.1;
show less
Bad Web Bot
🇧🇷
45.140.193.140
31 Oct 2026
[2026-10-31 16:19:18.950545] [core:error] [pid 3717276:tid 135062225942208] [client 45.140.193.140:4 ...
show more
[2026-10-31 16:19:18.950545] [core:error] [pid 3717276:tid 135062225942208] [client 45.140.193.140:48134] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) , URI:'/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh'
[2026-10-31 16:19:21.568283] [core:error] [pid 3717277:tid 135062335448768] [client 45.140.193.140:35468] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) , URI:'/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh'
[2026-10-31 16:19:21.568283] [core:error] [pid 3717277:tid 135062335448768] [client 45.140.193.140:35468] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) , URI:'/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%
show less
Web App Attack
Bad Web Bot
🇫🇷
62.210.142.179
31 Oct 2026
[2026-10-31 16:08:45.404152] [authz_core:error] [pid 3717277:tid 135061621962432] [client 62.210.142 ...
show more
[2026-10-31 16:08:45.404152] [authz_core:error] [pid 3717277:tid 135061621962432] [client 62.210.142.179:35448] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-31 16:08:45.420740] [authz_core:error] [pid 3717277:tid 135062360626880] [client 62.210.142.179:35448] AH01630: client denied by server configuration: /var/www/*/manage , error_notes:wrong-host , URI:'/manage/account/login'
[2026-10-31 16:08:45.420740] [authz_core:error] [pid 3717277:tid 135062360626880] [client 62.210.142.179:35448] AH01630: client denied by server configuration: /var/www/*/manage , error_notes:wrong-host , URI:'/manage/account/login'
[2026-10-31 16:08:45.433327] [authz_core:error] [pid 3717277:tid 135062352234176] [client 62.210.142.179:35448] AH01630: client denied by server configuration: /var/www/*/admin , error_notes:login-probing , URI:'/admin/index.html'
[2026-10-31 16:08:45.433327] [authz_core:error] [pid 3717277:tid 135062352234176] [client 62.210.142.179:35448] AH01630:
show less
Web App Attack
Bad Web Bot
🇨🇦
192.53.123.167
31 Oct 2026
[2026-10-31 16:03:53.529766] [authz_core:error] [pid 3717277:tid 135062310270656] [client 192.53.123 ...
show more
[2026-10-31 16:03:53.529766] [authz_core:error] [pid 3717277:tid 135062310270656] [client 192.53.123.167:46862] AH01630: client denied by server configuration: /var/www/*/robots.txt , error_notes:wrong-host , URI:'/robots.txt'
[2026-10-31 16:04:08.361842] [authz_core:error] [pid 3717276:tid 135062158800576] [client 192.53.123.167:55132] AH01630: client denied by server configuration: /var/www/*/+CSCOE+ , error_notes:wrong-host , URI:'/+CSCOE+/logon.html'
[2026-10-31 16:04:21.759774] [authz_core:error] [pid 3717277:tid 135062175585984] [client 192.53.123.167:49054] AH01630: client denied by server configuration: /var/www/*/+CSCOT+ , error_notes:wrong-host , URI:'/+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2BCSCOE%2B/portal_inc.lua'
[2026-10-31 16:04:34.439681] [authz_core:error] [pid 3717276:tid 135062225942208] [client 192.53.123.167:37526] AH01630: client denied by server configuration: /var/www/*/.env , error_notes:config-files , URI:'/.env'
[2026-10-31 16:04:52.347
show less
Web App Attack
Bad Web Bot
🇺🇸
170.187.147.89
31 Oct 2026
[2026-10-31 15:45:14.056811] [authz_core:error] [pid 3717276:tid 135062301877952] [client 170.187.14 ...
show more
[2026-10-31 15:45:14.056811] [authz_core:error] [pid 3717276:tid 135062301877952] [client 170.187.147.89:34406] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-31 15:45:14.494738] [authz_core:error] [pid 3717277:tid 135062200764096] [client 170.187.147.89:34414] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-31 15:45:14.836495] [authz_core:error] [pid 3717276:tid 135062343841472] [client 170.187.147.89:34430] AH01630: client denied by server configuration: /var/www/*/dana-na , error_notes:wrong-host , URI:'/dana-na'
[2026-10-31 15:45:14.951849] [authz_core:error] [pid 3717276:tid 135062352234176] [client 170.187.147.89:34430] AH01630: client denied by server configuration: /var/www/*/global-protect , error_notes:wrong-host , URI:'/global-protect/prelogin.esp?tmp=tmp&clientVer=4100&clientos=Windows'
[2026-10-31 15:45:15.069492] [authz_core:error] [pid 3717276:tid 135062142015168] [client 170.187.147
show less
Web App Attack
Bad Web Bot
🇺🇸
45.56.75.18
31 Oct 2026
[2026-10-31 15:44:10.946337] [authz_core:error] [pid 3717277:tid 135062436292288] [client 45.56.75.1 ...
show more
[2026-10-31 15:44:10.946337] [authz_core:error] [pid 3717277:tid 135062436292288] [client 45.56.75.18:49252] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-31 15:44:11.321743] [authz_core:error] [pid 3717276:tid 135062444701376] [client 45.56.75.18:49256] AH01630: client denied by server configuration: /var/www/*/auth.html , error_notes:wrong-host , URI:'/auth.html'
[2026-10-31 15:44:11.718913] [authz_core:error] [pid 3717277:tid 135062427883200] [client 45.56.75.18:49268] AH01630: client denied by server configuration: /var/www/*/auth1.html , error_notes:wrong-host , URI:'/auth1.html'
[2026-10-31 15:44:12.118858] [authz_core:error] [pid 3717276:tid 135062511933120] [client 45.56.75.18:49270] AH01630: client denied by server configuration: /var/www/*/sslvpnLogin.html , error_notes:wrong-host , URI:'/sslvpnLogin.html'
[2026-10-31 15:44:12.524391] [authz_core:error] [pid 3717277:tid 135062419474112] [client 45.56.75.18:49274] AH01630: client denied by ser
show less
Web App Attack
Bad Web Bot
🇺🇸
20.51.189.99
31 Oct 2026
[2026-10-31 14:02:26.173270] [authz_core:error] [pid 3717277:tid 135062183978688] [client 20.51.189. ...
show more
[2026-10-31 14:02:26.173270] [authz_core:error] [pid 3717277:tid 135062183978688] [client 20.51.189.99:50107] AH01630: client denied by server configuration: /var/www/html/fh_336861_a25f18.txt , error_notes:wrong-host , URI:'/fh_336861_a25f18.txt'
[2026-10-31 14:02:26.261332] [authz_core:error] [pid 3717277:tid 135061613569728] [client 20.51.189.99:50107] AH01630: client denied by server configuration: /var/www/html/.env , error_notes:wrong-host , URI:'/.env'
[2026-10-31 14:02:26.264755] [authz_core:error] [pid 3717276:tid 135062225942208] [client 20.51.189.99:50149] AH01630: client denied by server configuration: /var/www/*/fh_765862_1678b0.txt , error_notes:wrong-host , URI:'/fh_765862_1678b0.txt'
[2026-10-31 14:02:26.350154] [authz_core:error] [pid 3717277:tid 135061621962432] [client 20.51.189.99:50107] AH01630: client denied by server configuration: /var/www/html/.env.local , error_notes:wrong-host , URI:'/.env.local'
[2026-10-31 14:02:26.351356] [authz_core:error] [pid 3717276:tid 135062217549504] [clie
show less
Web App Attack
Bad Web Bot
🇺🇸
132.196.59.85
31 Oct 2026
[2026-10-31 13:57:08.111914] [authz_core:error] [pid 3717277:tid 135062318663360] [client 132.196.59 ...
show more
[2026-10-31 13:57:08.111914] [authz_core:error] [pid 3717277:tid 135062318663360] [client 132.196.59.85:33165] AH01630: client denied by server configuration: /var/www/html/wp-content , error_notes:wrong-host , URI:'/wp-content/plugins/hellopress/wp_filemanager.php'
[2026-10-31 13:57:08.221905] [authz_core:error] [pid 3717277:tid 135062335448768] [client 132.196.59.85:33165] AH01630: client denied by server configuration: /var/www/html/this_is_a_new_hello_world.php , error_notes:wrong-host , URI:'/this_is_a_new_hello_world.php'
[2026-10-31 13:57:08.331969] [authz_core:error] [pid 3717277:tid 135062310270656] [client 132.196.59.85:33165] AH01630: client denied by server configuration: /var/www/html/3PJcpMFsD8B.php , error_notes:wrong-host , URI:'/3PJcpMFsD8B.php'
[2026-10-31 13:57:08.221905] [authz_core:error] [pid 3717277:tid 135062335448768] [client 132.196.59.85:33165] AH01630: client denied by server configuration: /var/www/html/this_is_a_new_hello_world.php , error_notes:wrong-host , URI:'/this_is_a_new_h
show less
Web App Attack
Bad Web Bot
🇺🇸
40.67.178.181
31 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/developmentserver/metadatauplo ...
show more
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/developmentserver/metadatauploader HTTP/1.1;
show less
Bad Web Bot
🇧🇷
205.210.31.150
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/ HTTP/2.0;
show less
Bad Web Bot
🇳🇱
93.123.109.214
31 Oct 2026
[2026-10-31 12:43:27.407040] [authz_core:error] [pid 3717276:tid 135062360626880] [client 93.123.109 ...
show more
[2026-10-31 12:43:27.407040] [authz_core:error] [pid 3717276:tid 135062360626880] [client 93.123.109.214:46140] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-10-31 12:43:59.130623] [authz_core:error] [pid 3717277:tid 135062116837056] [client 93.123.109.214:33418] AH01630: client denied by server configuration: /var/www/html/robots.txt , error_notes:wrong-host , URI:'/robots.txt'
[2026-10-31 12:43:59.130623] [authz_core:error] [pid 3717277:tid 135062116837056] [client 93.123.109.214:33418] AH01630: client denied by server configuration: /var/www/html/robots.txt , error_notes:wrong-host , URI:'/robots.txt'
[2026-10-31 12:44:22.167255] [authz_core:error] [pid 3717276:tid 135062335448768] [client 93.123.109.214:54734] AH01630: client denied by server configuration: /var/www/html/.git , error_notes:wrong-host , URI:'/.git/HEAD'
[2026-10-31 12:44:22.167669] [authz_core:error] [pid 3717276:tid 135062192371392] [client 93.123.109.214:54742] AH01630: client den
show less
Web App Attack
Bad Web Bot
🇫🇮
147.185.133.249
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/ HTTP/2.0;
show less
Bad Web Bot
🇳🇱
195.178.110.104
31 Oct 2026
[2026-10-31 12:07:50.678534] [authz_core:error] [pid 3717276:tid 135062411065024] [client 195.178.11 ...
show more
[2026-10-31 12:07:50.678534] [authz_core:error] [pid 3717276:tid 135062411065024] [client 195.178.110.104:0] AH01630: client denied by server configuration: /var/www/*/login , error_notes:login-probing , URI:'/login'
[2026-10-31 12:07:50.798319] [authz_core:error] [pid 3717276:tid 135062419474112] [client 195.178.110.104:0] AH01630: client denied by server configuration: /var/www/*/login , error_notes:login-probing , URI:'/login/livewire/update'
[2026-10-31 12:07:51.586352] [authz_core:error] [pid 3717277:tid 135062385837760] [client 195.178.110.104:0] AH01630: client denied by server configuration: /var/www/*/login , error_notes:login-probing , URI:'/login'
[2026-10-31 12:07:51.750105] [authz_core:error] [pid 3717277:tid 135062478337728] [client 195.178.110.104:0] AH01630: client denied by server configuration: /var/www/*/register , error_notes:login-probing , URI:'/register'
[2026-10-31 12:07:54.197645] [authz_core:error] [pid 3717277:tid 135062553896640] [client 195.178.110.104:0] AH01630: client denied by
show less
Web App Attack
Bad Web Bot
🇧🇪
198.235.24.186
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/ HTTP/2.0;
show less
Bad Web Bot