🇧🇷
205.210.31.129
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/ HTTP/2.0;
show less
Bad Web Bot
🇸🇰
66.56.86.75
31 Oct 2026
2026-10-31T22:19:55.162945+02:00 nova wp(*)[3988794]: Forms SPAM from 66.56.86.75
Web App Attack
🇩🇪
45.86.202.80
31 Oct 2026
2026-10-31T22:18:06.454975+02:00 nova wp(*)[3988794]: Forms SPAM from 45.86.202.80
Web App Attack
🇭🇰
156.225.1.109
31 Oct 2026
[2026-10-31 22:03:54.591570] [authz_core:error] [pid 3717276:tid 135062183978688] [client 156.225.1. ...
show more
[2026-10-31 22:03:54.591570] [authz_core:error] [pid 3717276:tid 135062183978688] [client 156.225.1.109:60024] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-31 22:03:55.776943] [authz_core:error] [pid 3717277:tid 135061613569728] [client 156.225.1.109:33036] AH01630: client denied by server configuration: /var/www/*/raw , error_notes:wrong-host , URI:'/raw'
[2026-10-31 22:03:56.943131] [authz_core:error] [pid 3717276:tid 135062310270656] [client 156.225.1.109:34600] AH01630: client denied by server configuration: /var/www/*/ws , error_notes:wrong-host , URI:'/ws'
[2026-10-31 22:03:58.145375] [authz_core:error] [pid 3717277:tid 135062225942208] [client 156.225.1.109:35856] AH01630: client denied by server configuration: /var/www/*/socket.io , error_notes:wrong-host , URI:'/socket.io/?EIO=4&transport=websocket'
[2026-10-31 22:04:01.884434] [authz_core:error] [pid 3717277:tid 135062394246848] [client 156.225.1.109:39914] AH01630: client denied by server c
show less
Web App Attack
Bad Web Bot
🇺🇸
4.150.187.62
31 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/ HTTP/1.1;
Bad Web Bot
🇧🇷
177.75.236.42
31 Oct 2026
[2026-10-31 21:14:44.556091] [authz_core:error] [pid 3717277:tid 135062125229760] [client 177.75.236 ...
show more
[2026-10-31 21:14:44.556091] [authz_core:error] [pid 3717277:tid 135062125229760] [client 177.75.236.42:45724] AH01630: client denied by server configuration: /var/www/*/app , error_notes:missing-php , URI:'/app/adminer/adminer.php'
[2026-10-31 21:14:44.975056] [authz_core:error] [pid 3717276:tid 135062167193280] [client 177.75.236.42:58660] AH01630: client denied by server configuration: /var/www/html/app , error_notes:wrong-host , URI:'/app/adminer/adminer.php'
[2026-10-31 21:14:45.840163] [authz_core:error] [pid 3717277:tid 135061621962432] [client 177.75.236.42:45744] AH01630: client denied by server configuration: /var/www/*/adminer.php , error_notes:missing-php , URI:'/adminer.php'
[2026-10-31 21:14:46.268589] [authz_core:error] [pid 3717276:tid 135062142015168] [client 177.75.236.42:58686] AH01630: client denied by server configuration: /var/www/html/adminer.php , error_notes:wrong-host , URI:'/adminer.php'
[2026-10-31 21:14:47.111952] [authz_core:error] [pid 3717277:tid 135062352234176] [client 177.75
show less
Web App Attack
Bad Web Bot
🇲🇦
197.147.125.40
31 Oct 2026
[2026-10-31 19:58:34.761938] [authz_core:error] [pid 3717277:tid 135062478337728] [client 197.147.12 ...
show more
[2026-10-31 19:58:34.761938] [authz_core:error] [pid 3717277:tid 135062478337728] [client 197.147.125.40:0] AH01630: client denied by server configuration: /var/www/*/author-sitemap.xml , error_notes:sitemap-user-enum , URI:'/author-sitemap.xml'
[2026-10-31 19:58:38.831113] [authz_core:error] [pid 3717277:tid 135062520325824] [client 197.147.125.40:0] AH01630: client denied by server configuration: /var/www/*/index.php , error_notes:php-path_info , URI:'/index.php/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1'
[2026-10-31 19:58:39.185439] [authz_core:error] [pid 3717277:tid 135062495147712] [client 197.147.125.40:0] AH01630: client denied by server configuration: /var/www/*/index.php , error_notes:wp-rest:user-enum , URI:'/index.php?rest_route=/wp/v2/users&_fields=slug&per_page=100&page=1'
[2026-10-31 19:58:39.558881] [authz_core:error] [pid 3717277:tid 135062469928640] [client 197.147.125.40:0] AH01630: client denied by server configuration: /var/www/*/wp , error_notes:non-dirs , URI:'/wp/wp-json/wp/v
show less
Web App Attack
Bad Web Bot
🇵🇹
81.193.226.86
31 Oct 2026
[2026-10-31 19:58:44.724217] [authz_core:error] [pid 3717276:tid 135062486746816] [client 81.193.226 ...
show more
[2026-10-31 19:58:44.724217] [authz_core:error] [pid 3717276:tid 135062486746816] [client 81.193.226.86:0] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wp-rest:user-enum , URI:'/?rest_route=/wp/v2/users&_fields=slug&per_page=100&page=1'
[2026-10-31 19:58:44.831456] [authz_core:error] [pid 3717276:tid 135062453110464] [client 81.193.226.86:0] AH01630: client denied by server configuration: /var/www/*/index.php , error_notes:wp-rest:user-enum , URI:'/index.php?rest_route=/wp/v2/users&_fields=slug&per_page=100&page=1'
[2026-10-31 19:58:44.972884] [authz_core:error] [pid 3717276:tid 135062436292288] [client 81.193.226.86:0] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wp-rest:user-enum , URI:'/?rest_route=%2Fwp%2Fv2%2Fusers&_fields=slug&per_page=100&page=1'
[2026-10-31 19:58:45.100168] [authz_core:error] [pid 3717276:tid 135062461519552] [client 81.193.226.86:0] AH01630: client denied by server configuration: /var/www/*/index.php , error_notes:wp-rest:user
show less
Web App Attack
Bad Web Bot
🇺🇸
216.25.90.126
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:wrong-host; uri:/ HTTP/1.1;
show less
Bad Web Bot
🇺🇸
2600:3c05:0:2000:41ff:fe84:c54c:0
31 Oct 2026
[2026-10-31 19:16:54.485493] [authz_core:error] [pid 3717277:tid 135062427883200] [client 2600:3c05: ...
show more
[2026-10-31 19:16:54.485493] [authz_core:error] [pid 3717277:tid 135062427883200] [client 2600:3c05::2000:41ff:fe84:c54c:0] AH01630: client denied by server configuration: /var/www/*/old, referer http://*/old , error_notes:non-dirs , URI:'/old'
[2026-10-31 19:16:54.634546] [authz_core:error] [pid 3717277:tid 135062419474112] [client 2600:3c05::2000:41ff:fe84:c54c:0] AH01630: client denied by server configuration: /var/www/*/wordpress, referer http://*/wordpress , error_notes:non-dirs , URI:'/wordpress'
[2026-10-31 19:16:54.892302] [authz_core:error] [pid 3717277:tid 135062553896640] [client 2600:3c05::2000:41ff:fe84:c54c:0] AH01630: client denied by server configuration: /var/www/*/bk, referer http://*/bk , error_notes:non-dirs , URI:'/bk'
[2026-10-31 19:16:55.319447] [authz_core:error] [pid 3717277:tid 135062503540416] [client 2600:3c05::2000:41ff:fe84:c54c:0] AH01630: client denied by server configuration: /var/www/*/new, referer http://*/new , error_notes:non-dirs , URI:'/new'
[2026-10-31 19:16:55.632862]
show less
Web App Attack
Bad Web Bot
🇹🇼
198.235.24.18
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/ HTTP/2.0;
show less
Bad Web Bot
🇳🇱
188.166.47.49
31 Oct 2026
[2026-10-31 18:35:39.333435] [authz_core:error] [pid 3717277:tid 135062545503936] [client 188.166.47 ...
show more
[2026-10-31 18:35:39.333435] [authz_core:error] [pid 3717277:tid 135062545503936] [client 188.166.47.49:60178] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-31 18:35:42.356624] [authz_core:error] [pid 3717277:tid 135062528718528] [client 188.166.47.49:60262] AH01630: client denied by server configuration: /var/www/*/robots.txt , error_notes:wrong-host , URI:'/robots.txt'
[2026-10-31 18:35:42.358511] [authz_core:error] [pid 3717277:tid 135062520325824] [client 188.166.47.49:60264] AH01630: client denied by server configuration: /var/www/*/.well-known/security.txt , error_notes:wrong-host , URI:'/.well-known/security.txt'
[2026-10-31 18:35:42.378048] [authz_core:error] [pid 3717276:tid 135062469928640] [client 188.166.47.49:60252] AH01630: client denied by server configuration: /var/www/*/favicon.ico , error_notes:wrong-host , URI:'/favicon.ico'
[2026-10-31 18:35:42.520311] [authz_core:error] [pid 3717276:tid 135062427883200] [client 188.166.47.49:60282]
show less
Web App Attack
Bad Web Bot
🇳🇱
134.209.202.203
31 Oct 2026
[2026-10-31 18:35:39.135289] [authz_core:error] [pid 3717276:tid 135062200764096] [client 134.209.20 ...
show more
[2026-10-31 18:35:39.135289] [authz_core:error] [pid 3717276:tid 135062200764096] [client 134.209.202.203:48632] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-10-31 18:35:39.458139] [authz_core:error] [pid 3717277:tid 135062352234176] [client 134.209.202.203:48648] AH01630: client denied by server configuration: /var/www/html/favicon.ico , error_notes:wrong-host , URI:'/favicon.ico'
[2026-10-31 18:35:39.667899] [authz_core:error] [pid 3717277:tid 135062343841472] [client 134.209.202.203:48652] AH01630: client denied by server configuration: /var/www/html/robots.txt , error_notes:wrong-host , URI:'/robots.txt'
[2026-10-31 18:35:39.668008] [authz_core:error] [pid 3717277:tid 135062192371392] [client 134.209.202.203:48668] AH01630: client denied by server configuration: /var/www/html/.well-known , error_notes:wrong-host , URI:'/.well-known/security.txt'
[2026-10-31 18:35:39.991683] [authz_core:error] [pid 3717277:tid 135062116837056] [client 134.209.202.2
show less
Web App Attack
Bad Web Bot
🇧🇷
205.210.31.233
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:wrong-host; uri:/ HTTP/1.1;
show less
Bad Web Bot
🇺🇸
20.51.250.231
31 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:exploit-hnap; uri:/owa/auth/x.js HTTP/1.1;
Bad Web Bot
🇫🇮
147.185.133.39
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/ HTTP/2.0;
show less
Bad Web Bot
🇧🇪
198.235.24.181
31 Oct 2026
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs ...
show more
f2b:apache-badbots; UA:'Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity'; note:-; uri:/ HTTP/2.0;
show less
Bad Web Bot
🇳🇱
176.65.149.236
31 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/ HTTP/1.1;
Bad Web Bot
🇪🇸
172.233.120.230
31 Oct 2026
[2026-10-31 16:51:21.540709] [authz_core:error] [pid 3717277:tid 135062158800576] [client 172.233.12 ...
show more
[2026-10-31 16:51:21.540709] [authz_core:error] [pid 3717277:tid 135062158800576] [client 172.233.120.230:7088] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-10-31 16:51:27.647562] [authz_core:error] [pid 3717276:tid 135062133622464] [client 172.233.120.230:37526] AH01630: client denied by server configuration: /var/www/*/ , error_notes:unsupported-protocol , URI:'/'
[2026-10-31 16:51:27.647562] [authz_core:error] [pid 3717276:tid 135062133622464] [client 172.233.120.230:37526] AH01630: client denied by server configuration: /var/www/*/ , error_notes:unsupported-protocol , URI:'/'
[2026-10-31 16:54:24.767106] [authz_core:error] [pid 3717276:tid 135062116837056] [client 172.233.120.230:11268] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-10-31 16:54:24.767347] [authz_core:error] [pid 3717276:tid 135062116837056] [client 172.233.120.230:11282] AH01630: client denied by server configuration: /var/w
show less
Web App Attack
Bad Web Bot
🇺🇸
40.124.187.55
31 Oct 2026
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/developmentserver/metadatauplo ...
show more
f2b:apache-badbots; UA:'Mozilla/5.0 zgrab/0.x'; note:wrong-host; uri:/developmentserver/metadatauploader HTTP/1.1;
show less
Bad Web Bot
🇧🇷
45.140.193.140
31 Oct 2026
[2026-10-31 16:19:18.950545] [core:error] [pid 3717276:tid 135062225942208] [client 45.140.193.140:4 ...
show more
[2026-10-31 16:19:18.950545] [core:error] [pid 3717276:tid 135062225942208] [client 45.140.193.140:48134] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) , URI:'/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh'
[2026-10-31 16:19:21.568283] [core:error] [pid 3717277:tid 135062335448768] [client 45.140.193.140:35468] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) , URI:'/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh'
[2026-10-31 16:19:21.568283] [core:error] [pid 3717277:tid 135062335448768] [client 45.140.193.140:35468] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) , URI:'/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%
show less
Web App Attack
Bad Web Bot
🇫🇷
62.210.142.179
31 Oct 2026
[2026-10-31 16:08:45.404152] [authz_core:error] [pid 3717277:tid 135061621962432] [client 62.210.142 ...
show more
[2026-10-31 16:08:45.404152] [authz_core:error] [pid 3717277:tid 135061621962432] [client 62.210.142.179:35448] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-31 16:08:45.420740] [authz_core:error] [pid 3717277:tid 135062360626880] [client 62.210.142.179:35448] AH01630: client denied by server configuration: /var/www/*/manage , error_notes:wrong-host , URI:'/manage/account/login'
[2026-10-31 16:08:45.420740] [authz_core:error] [pid 3717277:tid 135062360626880] [client 62.210.142.179:35448] AH01630: client denied by server configuration: /var/www/*/manage , error_notes:wrong-host , URI:'/manage/account/login'
[2026-10-31 16:08:45.433327] [authz_core:error] [pid 3717277:tid 135062352234176] [client 62.210.142.179:35448] AH01630: client denied by server configuration: /var/www/*/admin , error_notes:login-probing , URI:'/admin/index.html'
[2026-10-31 16:08:45.433327] [authz_core:error] [pid 3717277:tid 135062352234176] [client 62.210.142.179:35448] AH01630:
show less
Web App Attack
Bad Web Bot
🇨🇦
192.53.123.167
31 Oct 2026
[2026-10-31 16:03:53.529766] [authz_core:error] [pid 3717277:tid 135062310270656] [client 192.53.123 ...
show more
[2026-10-31 16:03:53.529766] [authz_core:error] [pid 3717277:tid 135062310270656] [client 192.53.123.167:46862] AH01630: client denied by server configuration: /var/www/*/robots.txt , error_notes:wrong-host , URI:'/robots.txt'
[2026-10-31 16:04:08.361842] [authz_core:error] [pid 3717276:tid 135062158800576] [client 192.53.123.167:55132] AH01630: client denied by server configuration: /var/www/*/+CSCOE+ , error_notes:wrong-host , URI:'/+CSCOE+/logon.html'
[2026-10-31 16:04:21.759774] [authz_core:error] [pid 3717277:tid 135062175585984] [client 192.53.123.167:49054] AH01630: client denied by server configuration: /var/www/*/+CSCOT+ , error_notes:wrong-host , URI:'/+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2BCSCOE%2B/portal_inc.lua'
[2026-10-31 16:04:34.439681] [authz_core:error] [pid 3717276:tid 135062225942208] [client 192.53.123.167:37526] AH01630: client denied by server configuration: /var/www/*/.env , error_notes:config-files , URI:'/.env'
[2026-10-31 16:04:52.347
show less
Web App Attack
Bad Web Bot
🇺🇸
170.187.147.89
31 Oct 2026
[2026-10-31 15:45:14.056811] [authz_core:error] [pid 3717276:tid 135062301877952] [client 170.187.14 ...
show more
[2026-10-31 15:45:14.056811] [authz_core:error] [pid 3717276:tid 135062301877952] [client 170.187.147.89:34406] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-31 15:45:14.494738] [authz_core:error] [pid 3717277:tid 135062200764096] [client 170.187.147.89:34414] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-31 15:45:14.836495] [authz_core:error] [pid 3717276:tid 135062343841472] [client 170.187.147.89:34430] AH01630: client denied by server configuration: /var/www/*/dana-na , error_notes:wrong-host , URI:'/dana-na'
[2026-10-31 15:45:14.951849] [authz_core:error] [pid 3717276:tid 135062352234176] [client 170.187.147.89:34430] AH01630: client denied by server configuration: /var/www/*/global-protect , error_notes:wrong-host , URI:'/global-protect/prelogin.esp?tmp=tmp&clientVer=4100&clientos=Windows'
[2026-10-31 15:45:15.069492] [authz_core:error] [pid 3717276:tid 135062142015168] [client 170.187.147
show less
Web App Attack
Bad Web Bot
🇺🇸
45.56.75.18
31 Oct 2026
[2026-10-31 15:44:10.946337] [authz_core:error] [pid 3717277:tid 135062436292288] [client 45.56.75.1 ...
show more
[2026-10-31 15:44:10.946337] [authz_core:error] [pid 3717277:tid 135062436292288] [client 45.56.75.18:49252] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-31 15:44:11.321743] [authz_core:error] [pid 3717276:tid 135062444701376] [client 45.56.75.18:49256] AH01630: client denied by server configuration: /var/www/*/auth.html , error_notes:wrong-host , URI:'/auth.html'
[2026-10-31 15:44:11.718913] [authz_core:error] [pid 3717277:tid 135062427883200] [client 45.56.75.18:49268] AH01630: client denied by server configuration: /var/www/*/auth1.html , error_notes:wrong-host , URI:'/auth1.html'
[2026-10-31 15:44:12.118858] [authz_core:error] [pid 3717276:tid 135062511933120] [client 45.56.75.18:49270] AH01630: client denied by server configuration: /var/www/*/sslvpnLogin.html , error_notes:wrong-host , URI:'/sslvpnLogin.html'
[2026-10-31 15:44:12.524391] [authz_core:error] [pid 3717277:tid 135062419474112] [client 45.56.75.18:49274] AH01630: client denied by ser
show less
Web App Attack
Bad Web Bot