🇺🇸
172.180.64.72
30 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:exploit-hnap; uri:/owa/auth/x.js HTTP/1.1;
Bad Web Bot
🇵🇱
194.180.49.41
30 Oct 2026
[2026-10-30 15:20:58.979316] [authz_core:error] [pid 1669861:tid 135062175585984] [client 194.180.49 ...
show more
[2026-10-30 15:20:58.979316] [authz_core:error] [pid 1669861:tid 135062175585984] [client 194.180.49.41:2332] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-30 15:20:59.046256] [authz_core:error] [pid 1669862:tid 135062225942208] [client 194.180.49.41:2346] AH01630: client denied by server configuration: /var/www/*/.env , error_notes:config-files , URI:'/.env'
[2026-10-30 15:20:59.112091] [authz_core:error] [pid 1669861:tid 135061647107776] [client 194.180.49.41:2358] AH01630: client denied by server configuration: /var/www/*/.env.backup , error_notes:backup-files , URI:'/.env.backup'
[2026-10-30 15:20:59.187539] [authz_core:error] [pid 1669862:tid 135062343841472] [client 194.180.49.41:2362] AH01630: client denied by server configuration: /var/www/*/.env.bak , error_notes:backup-files , URI:'/.env.bak'
[2026-10-30 15:20:59.251376] [authz_core:error] [pid 1669861:tid 135062360626880] [client 194.180.49.41:2366] AH01630: client denied by server configura
show less
Web App Attack
Bad Web Bot
🇺🇸
40.124.171.103
30 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/developmentserver/metadatauplo ...
show more
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/developmentserver/metadatauploader HTTP/1.1;
show less
Bad Web Bot
🇹🇼
198.235.24.65
30 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:invalid-method; uri:/xmlrpc.php HTTP/2.0;
show less
Bad Web Bot
🇺🇸
147.185.132.81
30 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:wp-rest:user-enum; uri:/?rest_route=/wp/v2/users HTTP/2.0;
show less
Bad Web Bot
🇧🇪
207.175.194.102
30 Oct 2026
[2026-10-30 14:16:32.104512] [authz_core:error] [pid 1669861:tid 135062503540416] [client 207.175.19 ...
show more
[2026-10-30 14:16:32.104512] [authz_core:error] [pid 1669861:tid 135062503540416] [client 207.175.194.102:0] AH01630: client denied by server configuration: /var/www/*/.env , error_notes:config-files , URI:'/.env'
[2026-10-30 14:16:32.109211] [authz_core:error] [pid 1669862:tid 135062411065024] [client 207.175.194.102:0] AH01630: client denied by server configuration: /var/www/*/.claude , error_notes:config-files , URI:'/.claude/settings.json'
[2026-10-30 14:16:32.110513] [authz_core:error] [pid 1669862:tid 135062411065024] [client 207.175.194.102:0] AH01630: client denied by server configuration: /var/www/*/.amplifyrc , error_notes:dot-files , URI:'/.amplifyrc'
[2026-10-30 14:16:32.109211] [authz_core:error] [pid 1669862:tid 135062411065024] [client 207.175.194.102:0] AH01630: client denied by server configuration: /var/www/*/.claude , error_notes:config-files , URI:'/.claude/settings.json'
[2026-10-30 14:16:32.110513] [authz_core:error] [pid 1669862:tid 135062411065024] [client 207.175.194.102:0] AH01630: c
show less
Web App Attack
Bad Web Bot
🇺🇸
205.210.31.33
30 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/wp-json/ HTTP/2.0;
show less
Bad Web Bot
🇹🇼
198.235.24.124
30 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:wp-json-user-enum; uri:/wp-json/wp/v2/users HTTP/2.0;
show less
Bad Web Bot
🇺🇸
20.169.55.167
30 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/hudson HTTP/1.1;
Bad Web Bot
🇺🇸
216.25.90.21
30 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/ HTTP/2.0;
show less
Bad Web Bot
🇮🇩
103.46.186.148
30 Oct 2026
[2026-10-30 11:23:50.275990] [core:error] [pid 1669861:tid 135062310270656] [client 103.46.186.148:4 ...
show more
[2026-10-30 11:23:50.275990] [core:error] [pid 1669861:tid 135062310270656] [client 103.46.186.148:48388] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) , URI:'/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh'
show less
Web App Attack
Bad Web Bot
🇧🇪
34.79.59.9
30 Oct 2026
[2026-10-30 10:47:30.139586] [authz_core:error] [pid 1669862:tid 135062478337728] [client 34.79.59.9 ...
show more
[2026-10-30 10:47:30.139586] [authz_core:error] [pid 1669862:tid 135062478337728] [client 34.79.59.9:0] AH01630: client denied by server configuration: /var/www/*/.env-example , error_notes:dot-files , URI:'/.env-example'
[2026-10-30 10:47:30.141529] [authz_core:error] [pid 1669862:tid 135062469928640] [client 34.79.59.9:0] AH01630: client denied by server configuration: /var/www/*/.amplifyrc , error_notes:dot-files , URI:'/.amplifyrc'
[2026-10-30 10:47:30.149378] [authz_core:error] [pid 1669862:tid 135062461519552] [client 34.79.59.9:0] AH01630: client denied by server configuration: /var/www/*/.aws , error_notes:config-files , URI:'/.aws/config'
[2026-10-30 10:47:30.151390] [authz_core:error] [pid 1669862:tid 135062453110464] [client 34.79.59.9:0] AH01630: client denied by server configuration: /var/www/*/.env-sample , error_notes:dot-files , URI:'/.env-sample'
[2026-10-30 10:47:30.152627] [authz_core:error] [pid 1669862:tid 135062444701376] [client 34.79.59.9:0] AH01630: client denied by server configurati
show less
Web App Attack
Bad Web Bot
🇺🇸
20.84.91.51
30 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/*/Powershell HTTP/1.1;
Bad Web Bot
🇷🇴
72.5.43.55
30 Oct 2026
[2026-10-30 10:16:57.698716] [authz_core:error] [pid 1669862:tid 135062183978688] [client 72.5.43.55 ...
show more
[2026-10-30 10:16:57.698716] [authz_core:error] [pid 1669862:tid 135062183978688] [client 72.5.43.55:58340] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-30 10:16:57.708678] [authz_core:error] [pid 1669861:tid 135061655500480] [client 72.5.43.55:58368] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-30 10:16:57.708678] [authz_core:error] [pid 1669861:tid 135061655500480] [client 72.5.43.55:58368] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-30 10:17:00.713353] [authz_core:error] [pid 1669861:tid 135061630322368] [client 72.5.43.55:58406] AH01630: client denied by server configuration: /var/www/*/abc6 , error_notes:wrong-host , URI:'/abc6'
[2026-10-30 10:17:00.713353] [authz_core:error] [pid 1669861:tid 135061630322368] [client 72.5.43.55:58406] AH01630: client denied by server configuration: /var/www/*/abc6 , error_notes:wrong-host , URI:'
show less
Web App Attack
Bad Web Bot
🇺🇸
216.180.246.22
30 Oct 2026
[2026-10-30 07:46:18.945030] [authz_core:error] [pid 1669861:tid 135062343841472] [client 216.180.24 ...
show more
[2026-10-30 07:46:18.945030] [authz_core:error] [pid 1669861:tid 135062343841472] [client 216.180.246.22:21369] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-10-30 07:47:37.344509] [authz_core:error] [pid 1669862:tid 135062225942208] [client 216.180.246.22:21369] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-10-30 07:48:25.596095] [authz_core:error] [pid 1669861:tid 135062360626880] [client 216.180.246.22:21369] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-10-30 07:49:56.635197] [authz_core:error] [pid 1669862:tid 135062310270656] [client 216.180.246.22:18170] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-10-30 07:49:56.956892] [authz_core:error] [pid 1669862:tid 135062335448768] [client 216.180.246.22:18170] AH01630: client denied by server configuration: /var/www/html/manage , e
show less
Web App Attack
Bad Web Bot
🇺🇸
40.124.186.136
30 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/actuator/health HTTP/1.1;
Bad Web Bot
🇵🇱
45.138.12.48
30 Oct 2026
[2026-10-30 07:01:21.661414] [authz_core:error] [pid 1669861:tid 135062579074752] [client 45.138.12. ...
show more
[2026-10-30 07:01:21.661414] [authz_core:error] [pid 1669861:tid 135062579074752] [client 45.138.12.48:0] AH01630: client denied by server configuration: /var/www/*/_next, referer https://www.*/_next/static/ , error_notes:nextjs-path , URI:'/_next/static/'
[2026-10-30 07:01:21.902956] [authz_core:error] [pid 1669862:tid 135062495147712] [client 45.138.12.48:0] AH01630: client denied by server configuration: /var/www/*/_next, referer https://www.*/_next/static/chunks/_buildManifest.js , error_notes:nextjs-path , URI:'/_next/static/chunks/_buildManifest.js'
[2026-10-30 07:01:21.902956] [authz_core:error] [pid 1669862:tid 135062495147712] [client 45.138.12.48:0] AH01630: client denied by server configuration: /var/www/*/_next, referer https://www.*/_next/static/chunks/_buildManifest.js , error_notes:nextjs-path , URI:'/_next/static/chunks/_buildManifest.js'
show less
Web App Attack
Bad Web Bot
🇹🇼
198.235.24.88
30 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:wrong-host; uri:/ HTTP/1.0;
show less
Bad Web Bot
🇺🇸
52.186.171.170
30 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/manager/html HTTP/1.1;
Bad Web Bot
🇺🇸
135.119.91.67
30 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/druid/index.html HTTP/1.1;
Bad Web Bot
🇺🇸
52.165.88.73
30 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:mcp-probe; uri:/mcp HTTP/1.1;
Bad Web Bot
🇩🇪
84.201.4.119
30 Oct 2026
[2026-10-30 05:54:17.095828] [authz_core:error] [pid 1669861:tid 135062553896640] [client 84.201.4.1 ...
show more
[2026-10-30 05:54:17.095828] [authz_core:error] [pid 1669861:tid 135062553896640] [client 84.201.4.119:40640] AH01630: client denied by server configuration: /var/www/*/.env , error_notes:config-files , URI:'/.env'
[2026-10-30 05:54:17.206705] [authz_core:error] [pid 1669861:tid 135062545503936] [client 84.201.4.119:40640] AH01630: client denied by server configuration: /var/www/*/.env.backup , error_notes:backup-files , URI:'/.env.backup'
[2026-10-30 05:54:17.301890] [authz_core:error] [pid 1669861:tid 135062537111232] [client 84.201.4.119:40640] AH01630: client denied by server configuration: /var/www/*/.env.local , error_notes:config-files , URI:'/.env.local'
[2026-10-30 05:54:17.417119] [authz_core:error] [pid 1669861:tid 135062528718528] [client 84.201.4.119:40640] AH01630: client denied by server configuration: /var/www/*/.git , error_notes:config-files , URI:'/.git/config'
[2026-10-30 05:54:17.522713] [authz_core:error] [pid 1669861:tid 135062520325824] [client 84.201.4.119:40640] AH01630: client denie
show less
Web App Attack
Bad Web Bot
🇬🇧
34.39.5.85
30 Oct 2026
[2026-10-30 04:36:15.359042] [authz_core:error] [pid 1669861:tid 135062402655936] [client 34.39.5.85 ...
show more
[2026-10-30 04:36:15.359042] [authz_core:error] [pid 1669861:tid 135062402655936] [client 34.39.5.85:0] AH01630: client denied by server configuration: /var/www/*/.git , error_notes:config-files , URI:'/.git/config'
[2026-10-30 04:36:15.810159] [authz_core:error] [pid 1669861:tid 135062385837760] [client 34.39.5.85:0] AH01630: client denied by server configuration: /var/www/*/.env , error_notes:config-files , URI:'/.env'
[2026-10-30 04:36:15.974117] [authz_core:error] [pid 1669861:tid 135062377428672] [client 34.39.5.85:0] AH01630: client denied by server configuration: /var/www/*/.env.local , error_notes:config-files , URI:'/.env.local'
[2026-10-30 04:36:16.070935] [authz_core:error] [pid 1669861:tid 135062579074752] [client 34.39.5.85:0] AH01630: client denied by server configuration: /var/www/*/.env.production , error_notes:dot-files , URI:'/.env.production'
[2026-10-30 04:36:16.153464] [authz_core:error] [pid 1669861:tid 135062570682048] [client 34.39.5.85:0] AH01630: client denied by server configuration
show less
Web App Attack
Bad Web Bot
🇵🇱
194.180.49.41
30 Oct 2026
[2026-10-30 04:35:51.134179] [authz_core:error] [pid 1669862:tid 135061663893184] [client 194.180.49 ...
show more
[2026-10-30 04:35:51.134179] [authz_core:error] [pid 1669862:tid 135061663893184] [client 194.180.49.41:60166] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-30 04:35:51.210582] [authz_core:error] [pid 1669861:tid 135061638715072] [client 194.180.49.41:60178] AH01630: client denied by server configuration: /var/www/*/.env , error_notes:config-files , URI:'/.env'
[2026-10-30 04:35:51.284760] [authz_core:error] [pid 1669862:tid 135061680678592] [client 194.180.49.41:60190] AH01630: client denied by server configuration: /var/www/*/.env.backup , error_notes:backup-files , URI:'/.env.backup'
[2026-10-30 04:35:51.358358] [authz_core:error] [pid 1669861:tid 135061630322368] [client 194.180.49.41:60204] AH01630: client denied by server configuration: /var/www/*/.env.bak , error_notes:backup-files , URI:'/.env.bak'
[2026-10-30 04:35:51.433061] [authz_core:error] [pid 1669862:tid 135061655500480] [client 194.180.49.41:60206] AH01630: client denied by server conf
show less
Web App Attack
Bad Web Bot
🇷🇴
72.5.43.55
30 Oct 2026
[2026-10-30 04:23:19.089263] [authz_core:error] [pid 1669861:tid 135061672285888] [client 72.5.43.55 ...
show more
[2026-10-30 04:23:19.089263] [authz_core:error] [pid 1669861:tid 135061672285888] [client 72.5.43.55:56510] AH01630: client denied by server configuration: /var/www/html/7f13c0a9d8644f3ca0a563b6b56e49d7 , error_notes:wrong-host , URI:'/7f13c0a9d8644f3ca0a563b6b56e49d7'
[2026-10-30 04:23:19.089498] [authz_core:error] [pid 1669861:tid 135061672285888] [client 72.5.43.55:56522] AH01630: client denied by server configuration: /var/www/html/api , error_notes:wrong-host , URI:'/api/metrics/run'
[2026-10-30 04:23:19.101190] [authz_core:error] [pid 1669862:tid 135062192371392] [client 72.5.43.55:56540] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-10-30 04:23:19.102096] [authz_core:error] [pid 1669861:tid 135061655500480] [client 72.5.43.55:56526] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-10-30 04:23:22.088822] [authz_core:error] [pid 1669861:tid 135061630322368] [client 72.5.43.55:56594] AH01630: c
show less
Web App Attack
Bad Web Bot