This IP address has been reported a total of
44
times from
42 distinct
sources.
20.150.148.140 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SatAug2213:47:01.4359322026][security2:error][pid2418279:tid2418406][client20.150.148.140:0]ModSecu ...
show more[SatAug2213:47:01.4359322026][security2:error][pid2418279:tid2418406][client20.150.148.140:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"server8.4host.ch\"][uri\"/.env.local\"][unique_id\"aomMNclXGao8ThAhdRUC7QAAARA\"]
show less
(mod_security) mod_security (id:210492) triggered by 20.150.148.140 (US/United States/-): 5 in the l ...
show more(mod_security) mod_security (id:210492) triggered by 20.150.148.140 (US/United States/-): 5 in the last 300 secs (CF_ENABLE)
show less
2026-08-22T00:50:29.668028+00:00 gotosocial caddy[74004]: {"level":"info","ts":1787359829.667919,"lo ...
show more2026-08-22T00:50:29.668028+00:00 gotosocial caddy[74004]: {"level":"info","ts":1787359829.667919,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"20.150.148.140","remote_port":"64048","client_ip":"20.150.148.140","proto":"HTTP/1.1","method":"GET","host":"142.132.177.172","uri":"/.env","headers":{"Connection":["Close"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"]}},"bytes_read":0,"user_id":"","duration":0.000138669,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://142.132.177.172/.env"],"Content-Type":[]}}
...
show less
(mod_security) mod_security (id:949110) triggered by 20.150.148.140 (US/United States/-): 3 in the l ...
show more(mod_security) mod_security (id:949110) triggered by 20.150.148.140 (US/United States/-): 3 in the last 3600 secs; ID: LUC
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-sensitive-files
alert_id: 4633
events: 5
crea ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-sensitive-files
alert_id: 4633
events: 5
created_at: 2026-08-21T21:21:23Z
message: Ip 20.150.148.140 performed 'crowdsecurity/http-sensitive-files' (5 events over 4.792477024s) at 2026-08-21 21:21:22.842982668 +0000 UTC
target_uri: ["/.env","/.env.local","/.env.development","/.env.staging","/.env.test"]
method: ["GET"]
status: ["404","301"]
user_agent: ["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"]
show less