|
🇨🇦
34.19.167.161
|
|
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
hostmi.at] "GET ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
hostmi.at] "GET /config/custom-environment-variables.json HTTP/2.0" 404 331 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
[client 34.19.167.161] [realclient 34.19.167.161] - - [01/Nov/2026:10:38:51 +0100] [vhost schani.hostmi.at] "GET /next.config.mjs HTTP/2.0" 404 331 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
[client 34.19.167.161] [realclient 34.19.167.161] - - [01/Nov/2026:10:38:51 +0100] [vhost schani.hostmi.at] "GET /nuxt.config.js HTTP/2.0" 404 331 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
[client 34.19.167.161] [realclient 34.19.167.161] - - [01/Nov/2026:10:38:51 +0100] [vhost schani.hostmi.at] "GET /admin/_payload.json HTTP/2.0" 404 331 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
show less
|
Web App Attack
|
|
🇧🇪
35.205.208.193
|
|
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
nfig HTTP/2.0" ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
nfig HTTP/2.0" 404 326 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36"
[client 35.205.208.193] [realclient 35.205.208.193] - - [01/Nov/2026:10:37:14 +0100] [vhost schani.hostmi.at] "GET /.vercel/project.json HTTP/2.0" 404 326 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
[client 35.205.208.193] [realclient 35.205.208.193] - - [01/Nov/2026:10:37:14 +0100] [vhost schani.hostmi.at] "GET /api/auth/session HTTP/2.0" 404 326 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
[client 35.205.208.193] [realclient 35.205.208.193] - - [01/Nov/2026:10:37:14 +0100] [vhost schani.hostmi.at] "POST /api/graphql HTTP/2.0" 404 326 "https://at.aschi.at" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
show less
|
Web App Attack
|
|
🇩🇪
34.185.152.112
|
|
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
.js HTTP/2.0" 4 ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
.js HTTP/2.0" 404 332 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
[client 34.185.152.112] [realclient 34.185.152.112] - - [01/Nov/2026:10:35:36 +0100] [vhost schani.hostmi.at] "GET /.vercel/project.json HTTP/2.0" 404 332 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
[client 34.185.152.112] [realclient 34.185.152.112] - - [01/Nov/2026:10:35:36 +0100] [vhost schani.hostmi.at] "GET /.output/server/index.mjs HTTP/2.0" 404 332 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
[client 34.185.152.112] [realclient 34.185.152.112] - - [01/Nov/2026:10:35:36 +0100] [vhost schani.hostmi.at] "GET /.next/required-server-files.json HTTP/2.0" 404 332 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
show less
|
Web App Attack
|
|
🇳🇱
34.90.208.220
|
|
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
asp-crs/ ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
asp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "setup.weavernet.at"] [uri "/compose.yaml"] [unique_id "aucHfHtVn7XZDYJMjiC1MwAAixU"]
[Sun Nov 01 10:33:48.912802 2026] [vhost schani.hostmi.at] [security2:error] [pid 404692:tid 140326005216960] [client 34.90.208.220:40520] [realclient 34.90.208.220:40520] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "setup.weavernet.at"] [uri "/docker-compose.yaml"] [unique_id "aucHfHtVn7XZDYJMjiC1NgAAixQ"]
show less
|
Web App Attack
|
|
🇩🇪
35.198.165.147
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 35.198.165.147] [realclien ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 35.198.165.147] [realclient 35.198.165.147] [01/Nov/2026:10:31:45 +0100] [vhost schani.hostmi.at] 403 "GET /.env.secret HTTP/2.0"
show less
|
Web App Attack
|
|
🇺🇸
34.23.5.137
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.23.5.137] [realclient 3 ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.23.5.137] [realclient 34.23.5.137] [01/Nov/2026:10:29:55 +0100] [vhost schani.hostmi.at] 403 "GET /files../.env HTTP/2.0"
show less
|
Web App Attack
|
|
🇳🇱
34.6.170.212
|
|
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
26:56 +0100] [v ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
26:56 +0100] [vhost schani.hostmi.at] "GET /api/auth/session HTTP/2.0" 404 327 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
[client 34.6.170.212] [realclient 34.6.170.212] - - [01/Nov/2026:10:26:56 +0100] [vhost schani.hostmi.at] "GET /api/config HTTP/2.0" 404 327 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
[client 34.6.170.212] [realclient 34.6.170.212] - - [01/Nov/2026:10:26:56 +0100] [vhost schani.hostmi.at] "POST /graphql HTTP/2.0" 404 327 "https://llm.aschi.at" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
[client 34.6.170.212] [realclient 34.6.170.212] - - [01/Nov/2026:10:26:56 +0100] [vhost schani.hostmi.at] "GET /.output/nitro.json HTTP/2.0" 404 327 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
show less
|
Web App Attack
|
|
🇨🇦
34.19.222.118
|
|
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
mi.at] "GET /we ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
mi.at] "GET /webhooks HTTP/2.0" 404 325 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
[client 34.19.222.118] [realclient 34.19.222.118] - - [01/Nov/2026:10:23:46 +0100] [vhost schani.hostmi.at] "GET /serviceAccountKey.json HTTP/2.0" 404 325 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
[client 34.19.222.118] [realclient 34.19.222.118] - - [01/Nov/2026:10:23:46 +0100] [vhost schani.hostmi.at] "GET /docs HTTP/2.0" 404 325 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
[client 34.19.222.118] [realclient 34.19.222.118] - - [01/Nov/2026:10:23:46 +0100] [vhost schani.hostmi.at] "GET /firebase-service-account.json HTTP/2.0" 404 325 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
show less
|
Web App Attack
|
|
🇳🇱
94.102.49.125
|
|
Fail2Ban on postler.hostmi.at: jail=apache-instablock, failures=1.
[client 94.102.49.125] [realclien ...
show more
Fail2Ban on postler.hostmi.at: jail=apache-instablock, failures=1.
[client 94.102.49.125] [realclient 94.102.49.125] [01/Nov/2026:10:06:00 +0100] [vhost postler.hostmi.at] 403 "GET /admin/config.php HTTP/1.1"
show less
|
Web App Attack
|
|
🇫🇮
34.88.92.46
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.88.92.46] [realclient 3 ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.88.92.46] [realclient 34.88.92.46] [01/Nov/2026:10:05:57 +0100] [vhost aschi.at] 403 "GET /.git/config HTTP/1.1"
show less
|
Web App Attack
|
|
🇳🇱
34.141.244.235
|
|
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
pt/owasp ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
pt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "weavernet.at"] [uri "/api/proc/self/environ"] [unique_id "aub763tVn7XZDYJMjiCnPAAAiw4"]
[Sun Nov 01 09:44:27.682536 2026] [vhost aschi.at] [security2:error] [pid 404692:tid 140326063965888] [client 34.141.244.235:58792] [realclient 34.141.244.235:58792] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "weavernet.at"] [uri "/api/proc/self/environ"] [unique_id "aub763tVn7XZDYJMjiCnPQAAiw0"]
show less
|
Web App Attack
|
|
🇩🇪
35.246.133.76
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 35.246.133.76] [realclient ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 35.246.133.76] [realclient 35.246.133.76] [01/Nov/2026:09:31:40 +0100] [vhost schani.hostmi.at] 403 "GET /media../.env HTTP/2.0"
show less
|
Web App Attack
|
|
🇧🇷
34.39.226.200
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.39.226.200] [realclient ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.39.226.200] [realclient 34.39.226.200] [01/Nov/2026:09:29:36 +0100] [vhost schani.hostmi.at] 403 "GET /.env.staging.local HTTP/2.0"
show less
|
Web App Attack
|
|
🇲🇩
176.123.4.188
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 176.123.4.188] [realclient ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 176.123.4.188] [realclient 176.123.4.188] [01/Nov/2026:09:25:32 +0100] [vhost jellybox.aschi.at] 403 "GET /.git/config HTTP/2.0"
show less
|
Web App Attack
|
|
🇺🇸
34.169.225.83
|
|
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
g_inboun ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
g_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "hass.aschi.at"] [uri "/"] [unique_id "aub2yLw4H9HqK6r_sE_vtwAAAAo"]
[Sun Nov 01 09:22:32.969846 2026] [vhost schani.hostmi.at] [security2:error] [pid 360578:tid 140324567512768] [client 34.169.225.83:43478] [realclient 34.169.225.83:43478] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "hass.aschi.at"] [uri "/"] [unique_id "aub2yLw4H9HqK6r_sE_vuAAAABM"]
show less
|
Web App Attack
|
|
🇯🇵
35.200.107.237
|
|
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
s 5X Build/MMB2 ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
s 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
[client 35.200.107.237] [realclient 35.200.107.237] - - [01/Nov/2026:08:33:25 +0100] [vhost schani.hostmi.at] "GET /_payload.json HTTP/2.0" 404 335 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
[client 35.200.107.237] [realclient 35.200.107.237] - - [01/Nov/2026:08:33:25 +0100] [vhost schani.hostmi.at] "GET /config/local.json HTTP/2.0" 404 335 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
[client 35.200.107.237] [realclient 35.200.107.237] - - [01/Nov/2026:08:33:25 +0100] [vhost schani.hostmi.at] "GET /config/custom-environment-variables.json HTTP/2.0" 404 335 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
show less
|
Web App Attack
|
|
🇧🇪
34.77.173.196
|
|
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
t/owasp- ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
t/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "weavernet.at"] [uri "/.docker/config.json"] [unique_id "aubqplDw78jW8Na8OTTDAAAAWAs"]
[Sun Nov 01 08:30:46.498383 2026] [vhost aschi.at] [security2:error] [pid 360579:tid 140326080751296] [client 34.77.173.196:60028] [realclient 34.77.173.196:60028] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "weavernet.at"] [uri "/.claude/settings.local.json"] [unique_id "aubqplDw78jW8Na8OTTDCAAAWAs"]
show less
|
Web App Attack
|
|
🇧🇪
35.205.67.156
|
|
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
ocal.json HTTP/ ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
ocal.json HTTP/2.0" 404 336 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
[client 35.205.67.156] [realclient 35.205.67.156] - - [01/Nov/2026:08:30:38 +0100] [vhost schani.hostmi.at] "GET /nuxt.config.js HTTP/2.0" 404 336 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
[client 35.205.67.156] [realclient 35.205.67.156] - - [01/Nov/2026:08:30:38 +0100] [vhost schani.hostmi.at] "POST /graphql HTTP/2.0" 404 336 "https://sysadmin.weavernet.at" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
[client 35.205.67.156] [realclient 35.205.67.156] - - [01/Nov/2026:08:30:38 +0100] [vhost schani.hostmi.at] "GET /dashboard/_payload.json HTTP/2.0" 404 336 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])"
show less
|
Web App Attack
|
|
🇩🇪
35.246.201.248
|
|
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
/rules/R ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "sandbox.weavernet.at"] [uri "/supabase/config.toml"] [unique_id "aubpOHtVn7XZDYJMjiCN3AAAjQU"]
[Sun Nov 01 08:24:40.706197 2026] [vhost schani.hostmi.at] [security2:error] [pid 404692:tid 140325988431552] [client 35.246.201.248:43754] [realclient 35.246.201.248:43754] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "sandbox.weavernet.at"] [uri "/netlify.toml"] [unique_id "aubpOHtVn7XZDYJMjiCN4QAAjRY"]
show less
|
Web App Attack
|
|
🇺🇸
66.228.34.203
|
|
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
d_anomal ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
d_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "schani.hostmi.at"] [uri "/sdk"] [unique_id "auboabw4H9HqK6r_sE_rjAAAAAU"]
[Sun Nov 01 08:21:14.660858 2026] [vhost schani.hostmi.at] [security2:error] [pid 404692:tid 140325297317568] [client 66.228.34.203:61784] [realclient 66.228.34.203:61784] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "schani.hostmi.at"] [uri "/"] [unique_id "auboantVn7XZDYJMjiCNAQAAAI0"]
show less
|
Web App Attack
|
|
🇺🇸
4.154.139.59
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 4.154.139.59] [realclient ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 4.154.139.59] [realclient 4.154.139.59] [01/Nov/2026:08:18:16 +0100] [vhost schani.hostmi.at] 403 "GET /.env HTTP/1.1"
show less
|
Web App Attack
|
|
🇧🇪
23.251.135.142
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 23.251.135.142] [realclien ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 23.251.135.142] [realclient 23.251.135.142] [01/Nov/2026:07:29:06 +0100] [vhost linkhub.aschi.at] 403 "GET /.aws/.env HTTP/2.0"
show less
|
Web App Attack
|
|
🇺🇸
35.252.91.228
|
|
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
und_anom ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
und_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.weavernet.at"] [uri "/"] [unique_id "aubY7lDw78jW8Na8OTS87QAAAEo"]
[Sun Nov 01 07:15:10.723852 2026] [vhost schani.hostmi.at] [security2:error] [pid 360579:tid 140325809010368] [client 35.252.91.228:38570] [realclient 35.252.91.228:38570] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 30)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.weavernet.at"] [uri "/"] [unique_id "aubY7lDw78jW8Na8OTS87gAAAEk"]
show less
|
Web App Attack
|
|
🇧🇪
207.175.85.46
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 207.175.85.46] [realclient ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 207.175.85.46] [realclient 207.175.85.46] [01/Nov/2026:07:09:48 +0100] [vhost ha.aschi.at] 403 "GET /.env.anthropic HTTP/2.0"
show less
|
Web App Attack
|
|
🇺🇸
34.70.39.109
|
|
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
e "/opt/ ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
e "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 40)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "tautulli.aschi.at"] [uri "/auth/logout"] [unique_id "aubORntVn7XZDYJMjiBvVwAAAJY"]
[Sun Nov 01 06:29:42.585542 2026] [vhost jellybox.aschi.at] [security2:error] [pid 404692:tid 140325574145728] [client 34.70.39.109:33404] [realclient 34.70.39.109:33404] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "tautulli.aschi.at"] [uri "/auth/logout"] [unique_id "aubORntVn7XZDYJMjiBvWAAAAIU"]
show less
|
Web App Attack
|