|
🇺🇸
40.114.65.242
|
|
Fail2Ban on postler.hostmi.at: jail=apache-instablock, failures=1.
[client 40.114.65.242] [realclien ...
show more
Fail2Ban on postler.hostmi.at: jail=apache-instablock, failures=1.
[client 40.114.65.242] [realclient 40.114.65.242] [02/Nov/2026:12:57:36 +0100] [vhost postler.hostmi.at] 403 "GET /.env.old HTTP/1.1"
show less
|
Web App Attack
|
|
🇺🇸
104.211.60.75
|
|
Fail2Ban on postler.hostmi.at: jail=apache-instablock, failures=1.
[client 104.211.60.75] [realclien ...
show more
Fail2Ban on postler.hostmi.at: jail=apache-instablock, failures=1.
[client 104.211.60.75] [realclient 104.211.60.75] [02/Nov/2026:12:57:36 +0100] [vhost postler.hostmi.at] 403 "GET /.env.local HTTP/1.1"
show less
|
Web App Attack
|
|
🇺🇸
172.190.64.193
|
|
Fail2Ban on postler.hostmi.at: jail=apache-instablock, failures=1.
[client 172.190.64.193] [realclie ...
show more
Fail2Ban on postler.hostmi.at: jail=apache-instablock, failures=1.
[client 172.190.64.193] [realclient 172.190.64.193] [02/Nov/2026:12:57:36 +0100] [vhost postler.hostmi.at] 403 "GET /.env HTTP/1.1"
show less
|
Web App Attack
|
|
🇺🇸
172.190.161.125
|
|
Fail2Ban on postler.hostmi.at: jail=apache-instablock, failures=1.
[client 172.190.161.125] [realcli ...
show more
Fail2Ban on postler.hostmi.at: jail=apache-instablock, failures=1.
[client 172.190.161.125] [realclient 172.190.161.125] [02/Nov/2026:12:57:36 +0100] [vhost postler.hostmi.at] 403 "GET /.env.production HTTP/1.1"
show less
|
Web App Attack
|
|
🇺🇸
136.23.89.0
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 136.23.89.0] [realclient 1 ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 136.23.89.0] [realclient 136.23.89.0] [02/Nov/2026:12:32:55 +0100] [vhost aschi.at] 403 "GET /.env.supabase HTTP/2.0"
show less
|
Web App Attack
|
|
🇨🇭
20.203.168.254
|
|
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
177 "-" "-"
[c ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
177 "-" "-"
[client 20.203.168.254] [realclient 20.203.168.254] - - [02/Nov/2026:12:15:29 +0100] [vhost schani.hostmi.at] "GET /go.php HTTP/1.1" 404 177 "-" "-"
[client 20.203.168.254] [realclient 20.203.168.254] - - [02/Nov/2026:12:15:29 +0100] [vhost schani.hostmi.at] "GET /1ac.php HTTP/1.1" 404 177 "-" "-"
[client 20.203.168.254] [realclient 20.203.168.254] - - [02/Nov/2026:12:15:29 +0100] [vhost schani.hostmi.at] "GET /40341.php HTTP/1.1" 404 177 "-" "-"
[client 20.203.168.254] [realclient 20.203.168.254] - - [02/Nov/2026:12:15:29 +0100] [vhost schani.hostmi.at] "GET /aa.php HTTP/1.1" 404 177 "-" "-"
[client 20.203.168.254] [realclient 20.203.168.254] - - [02/Nov/2026:12:15:29 +0100] [vhost schani.hostmi.at] "GET /yich.php HTTP/1.1" 404 177 "-" "-"
[client 20.203.168.254] [realclient 20.203.168.254] - - [02/Nov/2026:12:15:29 +0100] [vhost schani.hostmi.at] "GET /goods.php HTTP/1.1" 404 177 "-" "-"
show less
|
Web App Attack
|
|
🇺🇸
79.127.222.202
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 79.127.222.202] [realclien ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 79.127.222.202] [realclient 79.127.222.202] [02/Nov/2026:12:13:59 +0100] [vhost schani.hostmi.at] 403 "GET /api/.env HTTP/2.0"
show less
|
Web App Attack
|
|
🇺🇸
65.49.1.38
|
|
Fail2Ban on postler.hostmi.at: jail=apache-instablock, failures=1.
[client 65.49.1.38] [realclient 6 ...
show more
Fail2Ban on postler.hostmi.at: jail=apache-instablock, failures=1.
[client 65.49.1.38] [realclient 65.49.1.38] [02/Nov/2026:12:03:15 +0100] [vhost postler.hostmi.at] 403 "GET /.git/config HTTP/1.1"
show less
|
Web App Attack
|
|
🇳🇱
34.178.5.108
|
|
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
1; Nexus 5X Bui ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
[client 34.178.5.108] [realclient 34.178.5.108] - - [02/Nov/2026:11:44:05 +0100] [vhost schani.hostmi.at] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 331 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
[client 34.178.5.108] [realclient 34.178.5.108] - - [02/Nov/2026:11:44:05 +0100] [vhost schani.hostmi.at] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 331 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
[client 34.178.5.108] [realclient 34.178.5.108] - - [02/Nov/2026:11:44:05 +0100] [vhost schani.hostmi.at] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 331 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
show less
|
Web App Attack
|
|
🇸🇬
34.142.196.216
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.142.196.216] [realclien ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.142.196.216] [realclient 34.142.196.216] [02/Nov/2026:11:40:54 +0100] [vhost schani.hostmi.at] 403 "GET /.git/config HTTP/1.1"
show less
|
Web App Attack
|
|
🇭🇰
34.150.76.98
|
|
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
maly_sco ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
maly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 40)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "request.aschi.at"] [uri "/login"] [unique_id "auhj18hxuRzpQBmzMEuf-wAAAFY"]
[Mon Nov 02 11:20:08.168108 2026] [vhost jellybox.aschi.at] [security2:error] [pid 1077:tid 139915127940800] [client 34.150.76.98:45110] [realclient 34.150.76.98:45110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "request.aschi.at"] [uri "/login"] [unique_id "auhj2MhxuRzpQBmzMEuf_QAAAFA"]
show less
|
Web App Attack
|
|
🇺🇸
34.23.5.137
|
|
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
/opt/owa ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "directus.weavernet.at"] [uri "/config.php.bak"] [unique_id "auhdjtluLMRp-19uF0mDDAAADxQ"]
[Mon Nov 02 10:53:18.938351 2026] [vhost schani.hostmi.at] [security2:error] [pid 1076:tid 139916221032128] [client 34.23.5.137:54844] [realclient 34.23.5.137:54844] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "directus.weavernet.at"] [uri "/auth.json"] [unique_id "auhdjtluLMRp-19uF0mDDQAADxg"]
show less
|
Web App Attack
|
|
🇳🇱
34.6.170.212
|
|
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
owasp-cr ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "nagios.aschi.at"] [uri "/configuration.php.bak"] [unique_id "auhckchxuRzpQBmzMEubPwAAWBA"]
[Mon Nov 02 10:49:05.199642 2026] [vhost schani.hostmi.at] [security2:error] [pid 1077:tid 139916221032128] [client 34.6.170.212:52600] [realclient 34.6.170.212:52600] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "nagios.aschi.at"] [uri "/wp-config.php.bak"] [unique_id "auhckchxuRzpQBmzMEubQAAAWBg"]
show less
|
Web App Attack
|
|
🇳🇱
34.90.208.220
|
|
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
"GET /api/uplo ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
"GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 329 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
[client 34.90.208.220] [realclient 34.90.208.220] - - [02/Nov/2026:10:47:01 +0100] [vhost schani.hostmi.at] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 329 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
[client 34.90.208.220] [realclient 34.90.208.220] - - [02/Nov/2026:10:47:01 +0100] [vhost schani.hostmi.at] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 329 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
[client 34.90.208.220] [realclient 34.90.208.220] - - [02/Nov/2026:10:47:01 +0100] [vhost schani.hostmi.at] "GET /resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 329 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
show less
|
Web App Attack
|
|
🇰🇷
34.64.103.163
|
|
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
TX:bloc ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "vw.aschi.at"] [uri "/"] [unique_id "auhX98hxuRzpQBmzMEuWOQAAAEA"]
[Mon Nov 02 10:29:27.529051 2026] [vhost vw.aschi.at] [security2:error] [pid 1077:tid 139915127940800] [client 34.64.103.163:36338] [realclient 34.64.103.163:36338] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 30)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "vw.aschi.at"] [uri "/"] [unique_id "auhX98hxuRzpQBmzMEuWOgAAAFA"]
show less
|
Web App Attack
|
|
🇲🇾
121.121.152.6
|
|
Fail2Ban on postler.hostmi.at: jail=apache-instablock, failures=1.
[client 121.121.152.6] [realclien ...
show more
Fail2Ban on postler.hostmi.at: jail=apache-instablock, failures=1.
[client 121.121.152.6] [realclient 121.121.152.6] [02/Nov/2026:10:22:40 +0100] [vhost postler.hostmi.at] 403 "GET /.env HTTP/1.1"
show less
|
Web App Attack
|
|
🇵🇱
74.248.37.250
|
|
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
TTP/1.1" 404 17 ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
TTP/1.1" 404 177 "-" "-"
[client 74.248.37.250] [realclient 74.248.37.250] - - [02/Nov/2026:10:08:20 +0100] [vhost schani.hostmi.at] "GET /go.php HTTP/1.1" 404 177 "-" "-"
[client 74.248.37.250] [realclient 74.248.37.250] - - [02/Nov/2026:10:08:20 +0100] [vhost schani.hostmi.at] "GET /1ac.php HTTP/1.1" 404 177 "-" "-"
[client 74.248.37.250] [realclient 74.248.37.250] - - [02/Nov/2026:10:08:20 +0100] [vhost schani.hostmi.at] "GET /40341.php HTTP/1.1" 404 177 "-" "-"
[client 74.248.37.250] [realclient 74.248.37.250] - - [02/Nov/2026:10:08:21 +0100] [vhost schani.hostmi.at] "GET /aa.php HTTP/1.1" 404 177 "-" "-"
[client 74.248.37.250] [realclient 74.248.37.250] - - [02/Nov/2026:10:08:22 +0100] [vhost schani.hostmi.at] "GET /yich.php HTTP/1.1" 404 177 "-" "-"
[client 74.248.37.250] [realclient 74.248.37.250] - - [02/Nov/2026:10:08:22 +0100] [vhost schani.hostmi.at] "GET /goods.php HTTP/1.1" 404 177 "-" "-"
show less
|
Web App Attack
|
|
🇸🇬
157.245.192.154
|
|
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
re Excee ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
re Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "weavernet.at"] [uri "/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php"] [unique_id "auhRyNluLMRp-19uF0ltZAAAABI"], referer www.google.com
[Mon Nov 02 10:03:20.317218 2026] [vhost aschi.at] [security2:error] [pid 1077:tid 139915228587712] [client 157.245.192.154:58446] [realclient 157.245.192.154:58446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "weavernet.at"] [uri "/images/images/images/images/images/images/images/images/cache.php"] [unique_id "auhR2MhxuRzpQBmzMEuHeQAAAFU"], referer www.google.com
show less
|
Web App Attack
|
|
🇵🇱
172.64.200.22
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 172.64.200.22] [realclient ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 172.64.200.22] [realclient 172.64.200.22] [02/Nov/2026:09:58:15 +0100] [vhost manager.hostmi.at] 403 "GET /.git/HEAD HTTP/2.0"
show less
|
Web App Attack
|
|
🇵🇱
172.64.200.215
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 172.64.200.215] [realclien ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 172.64.200.215] [realclient 172.64.200.215] [02/Nov/2026:09:58:15 +0100] [vhost manager.hostmi.at] 403 "GET /.git/config HTTP/2.0"
show less
|
Web App Attack
|
|
🇺🇸
184.105.139.68
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 184.105.139.68] [realclien ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 184.105.139.68] [realclient 184.105.139.68] [02/Nov/2026:09:27:02 +0100] [vhost schani.hostmi.at] 403 "GET /.git/config HTTP/1.1"
show less
|
Web App Attack
|
|
🇬🇧
138.68.144.227
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 138.68.144.227] [realclien ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 138.68.144.227] [realclient 138.68.144.227] [02/Nov/2026:09:17:59 +0100] [vhost searx.aschi.at] 403 "GET /.env HTTP/1.1"
show less
|
Web App Attack
|
|
🇯🇵
34.84.212.251
|
|
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
ing_inbo ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
ing_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "searx.aschi.at"] [uri "/"] [unique_id "auhGZshxuRzpQBmzMEuAqgAAAEI"]
[Mon Nov 02 09:14:30.981929 2026] [vhost searx.aschi.at] [security2:error] [pid 1077:tid 139915648026304] [client 34.84.212.251:39532] [realclient 34.84.212.251:39532] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 30)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "searx.aschi.at"] [uri "/"] [unique_id "auhGZshxuRzpQBmzMEuAqwAAAEo"]
show less
|
Web App Attack
|
|
🇧🇪
34.78.55.231
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.78.55.231] [realclient ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.78.55.231] [realclient 34.78.55.231] [02/Nov/2026:08:49:16 +0100] [vhost ha.aschi.at] 403 "GET /.git/config HTTP/1.1"
show less
|
Web App Attack
|
|
🇧🇪
207.175.27.97
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 207.175.27.97] [realclient ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 207.175.27.97] [realclient 207.175.27.97] [02/Nov/2026:08:29:49 +0100] [vhost hvm.hostmi.at] 403 "GET /.git/config HTTP/1.1"
show less
|
Web App Attack
|