|
🇫🇷
185.177.72.24
|
|
[Mon Sep 07 17:42:05.602541 2026] [security2:error] [pid 1385998:tid 1386017] [remote 185.177.72.24: ...
show more
[Mon Sep 07 17:42:05.602541 2026] [security2:error] [pid 1385998:tid 1386017] [remote 185.177.72.24:7990] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.spacecadetgrrl.me"] [uri "/certificates/private.pem"] [unique_id "ap7pXfA0Xt_oEOlfMZTq1gAAQRE"]
[Mon Sep 07 17:42:05.646230 2026] [security2:error] [pid 1385998:tid 1386016] [remote 185.177.72.24:7990] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.29.0"] [tag "
...
show less
|
Web App Attack
|
|
🇫🇷
185.177.72.49
|
|
[Mon Sep 07 17:24:07.567014 2026] [security2:error] [pid 1385998:tid 1386007] [remote 185.177.72.49: ...
show more
[Mon Sep 07 17:24:07.567014 2026] [security2:error] [pid 1385998:tid 1386007] [remote 185.177.72.49:35592] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.spacecadetgrrl.me"] [uri "/app/mailjet.env"] [unique_id "ap7lJ_A0Xt_oEOlfMZTqvAAARAc"]
[Mon Sep 07 17:24:07.611080 2026] [security2:error] [pid 1385998:tid 1386009] [remote 185.177.72.49:35592] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly
...
show less
|
Web App Attack
|
|
🇺🇸
71.6.199.23
|
|
[Mon Sep 07 17:14:21.969611 2026] [authz_core:error] [pid 1182813:tid 1182884] [client 71.6.199.23:4 ...
show more
[Mon Sep 07 17:14:21.969611 2026] [authz_core:error] [pid 1182813:tid 1182884] [client 71.6.199.23:46532] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 17:14:37.311509 2026] [authz_core:error] [pid 1385998:tid 1386039] [client 71.6.199.23:47372] AH01630: client denied by server configuration: /var/www/html/robots.txt
[Mon Sep 07 17:14:38.897726 2026] [authz_core:error] [pid 1182813:tid 1182914] [client 71.6.199.23:47388] AH01630: client denied by server configuration: /var/www/html/sitemap.xml
[Mon Sep 07 17:14:39.634698 2026] [authz_core:error] [pid 1385944:tid 1385982] [client 71.6.199.23:47396] AH01630: client denied by server configuration: /var/www/html/.well-known
[Mon Sep 07 17:14:40.667494 2026] [authz_core:error] [pid 1385944:tid 1385994] [client 71.6.199.23:47400] AH01630: client denied by server configuration: /var/www/html/favicon.ico
...
show less
|
Brute-Force
|
|
🇺🇸
152.32.235.85
|
|
[Mon Sep 07 17:08:28.831429 2026] [authz_core:error] [pid 1385944:tid 1385985] [client 152.32.235.85 ...
show more
[Mon Sep 07 17:08:28.831429 2026] [authz_core:error] [pid 1385944:tid 1385985] [client 152.32.235.85:14268] AH01630: client denied by server configuration: /var/www/html/version
[Mon Sep 07 17:08:29.205409 2026] [authz_core:error] [pid 1385998:tid 1386029] [client 152.32.235.85:14448] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 17:08:29.599812 2026] [authz_core:error] [pid 1385944:tid 1385983] [client 152.32.235.85:14648] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 17:08:29.980760 2026] [authz_core:error] [pid 1182813:tid 1182893] [client 152.32.235.85:14846] AH01630: client denied by server configuration: /var/www/html/v1
[Mon Sep 07 17:08:30.381366 2026] [authz_core:error] [pid 1385944:tid 1385981] [client 152.32.235.85:15002] AH01630: client denied by server configuration: /var/www/html/
...
show less
|
Brute-Force
|
|
🇺🇸
52.54.130.64
|
|
[Mon Sep 07 15:07:31.759390 2026] [security2:error] [pid 1182813:tid 1182888] [client 52.54.130.64:3 ...
show more
[Mon Sep 07 15:07:31.759390 2026] [security2:error] [pid 1182813:tid 1182888] [client 52.54.130.64:36924] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:next-action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "newburycomics.spacecadetgrrl.me"] [uri "/"] [unique_id "ap7FI4T3PfpFYyHaSffLrgAAAMg"], referer: https://newburycomics.spacecadetgrrl.me/
[Mon Sep 07 15:07:32.135061 2026] [security2:error] [pid 1385944:tid 1385974] [client 52.54.130.64:36930] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:next-action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "newburycomics.spacecadetgrrl.me"] [uri
...
show less
|
Web App Attack
|
|
🇸🇬
134.185.86.112
|
|
[Mon Sep 07 13:06:31.880900 2026] [security2:error] [pid 1385944:tid 1385992] [client 134.185.86.112 ...
show more
[Mon Sep 07 13:06:31.880900 2026] [security2:error] [pid 1385944:tid 1385992] [client 134.185.86.112:49481] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "spacecadetgrrl.me"] [uri "/wp-login.php"] [unique_id "ap6ox2tZI87kYAeFddkS_AAAABQ"], referer: https://spacecadetgrrl.me/wp-login.php
[Mon Sep 07 13:06:39.450857 2026] [security2:error] [pid 1182813:tid 1182884] [client 134.185.86.112:57903] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score:
...
show less
|
Web App Attack
|
|
🇯🇵
34.104.141.148
|
|
[Mon Sep 07 12:51:54.861749 2026] [authz_core:error] [pid 1385944:tid 1385988] [client 34.104.141.14 ...
show more
[Mon Sep 07 12:51:54.861749 2026] [authz_core:error] [pid 1385944:tid 1385988] [client 34.104.141.148:53862] AH01630: client denied by server configuration: proxy:http://127.0.0.1:3001/
[Mon Sep 07 12:52:01.369817 2026] [authz_core:error] [pid 1385998:tid 1386037] [client 34.104.141.148:21512] AH01630: client denied by server configuration: proxy:http://127.0.0.1:3001/
[Mon Sep 07 12:52:01.370889 2026] [authz_core:error] [pid 1385944:tid 1385987] [client 34.104.141.148:21580] AH01630: client denied by server configuration: proxy:http://127.0.0.1:3001/@fs/etc/passwd
[Mon Sep 07 12:52:01.373282 2026] [authz_core:error] [pid 1385944:tid 1385994] [client 34.104.141.148:21640] AH01630: client denied by server configuration: proxy:http://127.0.0.1:3001/@fs/.env.development
[Mon Sep 07 12:52:01.376018 2026] [authz_core:error] [pid 1182813:tid 1182881] [client 34.104.141.148:21696] AH01630: client denied by server configuration: proxy:http://127.0.0.1:3001/@fs/home/ec2-user/.aws/credentials
...
show less
|
Brute-Force
|
|
🇺🇸
34.72.6.200
|
|
[Mon Sep 07 10:37:09.896825 2026] [security2:error] [pid 1385944:tid 1385986] [client 34.72.6.200:51 ...
show more
[Mon Sep 07 10:37:09.896825 2026] [security2:error] [pid 1385944:tid 1385986] [client 34.72.6.200:51314] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "spacecadetgrrl.me"] [uri "/"] [unique_id "ap6FxWtZI87kYAeFddkQEwAAAA4"]
[Mon Sep 07 10:37:10.441643 2026] [security2:error] [pid 1385998:tid 1386031] [client 34.72.6.200:51330] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "spacecadetgrrl.me"] [uri "/"] [unique_id "ap6FxvA0Xt_oEOlfMZToswAAAEU"]
[Mon Sep 07 10:37:11.062162 2026]
...
show less
|
Web App Attack
|
|
🇺🇸
34.182.169.242
|
|
[Mon Sep 07 09:49:43.058121 2026] [security2:error] [pid 1182813:tid 1182889] [client 34.182.169.242 ...
show more
[Mon Sep 07 09:49:43.058121 2026] [security2:error] [pid 1182813:tid 1182889] [client 34.182.169.242:43026] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "integraldata.cc"] [uri "/"] [unique_id "ap56p4T3PfpFYyHaSffJPgAAAMk"]
[Mon Sep 07 09:49:43.593578 2026] [security2:error] [pid 1182813:tid 1182899] [client 34.182.169.242:43034] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "integraldata.cc"] [uri "/"] [unique_id "ap56p4T3PfpFYyHaSffJPwAAAM4"]
[Mon Sep 07 09:49:44.238744 2026
...
show less
|
Web App Attack
|
|
🇸🇬
161.118.218.217
|
|
[Mon Sep 07 09:06:46.460909 2026] [authz_core:error] [pid 1182813:tid 1182873] [client 161.118.218.2 ...
show more
[Mon Sep 07 09:06:46.460909 2026] [authz_core:error] [pid 1182813:tid 1182873] [client 161.118.218.217:57968] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 09:06:48.019387 2026] [authz_core:error] [pid 1182813:tid 1182905] [client 161.118.218.217:57968] AH01630: client denied by server configuration: /var/www/html/.env
[Mon Sep 07 09:06:48.442196 2026] [authz_core:error] [pid 1385998:tid 1386046] [client 161.118.218.217:57996] AH01630: client denied by server configuration: /var/www/html/.env.local
[Mon Sep 07 09:06:48.924914 2026] [authz_core:error] [pid 1182813:tid 1182893] [client 161.118.218.217:57972] AH01630: client denied by server configuration: /var/www/html/.env.bak
[Mon Sep 07 09:06:50.624209 2026] [authz_core:error] [pid 1385944:tid 1385978] [client 161.118.218.217:58012] AH01630: client denied by server configuration: /var/www/html/.DS_Store
...
show less
|
Brute-Force
|
|
🇸🇬
134.185.92.74
|
|
[Mon Sep 07 09:06:27.791362 2026] [authz_core:error] [pid 1182813:tid 1182902] [client 134.185.92.74 ...
show more
[Mon Sep 07 09:06:27.791362 2026] [authz_core:error] [pid 1182813:tid 1182902] [client 134.185.92.74:25190] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 09:06:28.372943 2026] [authz_core:error] [pid 1182813:tid 1182896] [client 134.185.92.74:25190] AH01630: client denied by server configuration: /var/www/html/.env.production
[Mon Sep 07 09:06:28.659897 2026] [authz_core:error] [pid 1385944:tid 1385991] [client 134.185.92.74:25232] AH01630: client denied by server configuration: /var/www/html/.env.local
[Mon Sep 07 09:06:28.758837 2026] [authz_core:error] [pid 1385944:tid 1385996] [client 134.185.92.74:25222] AH01630: client denied by server configuration: /var/www/html/.env.example
[Mon Sep 07 09:06:28.829331 2026] [authz_core:error] [pid 1385944:tid 1385975] [client 134.185.92.74:25208] AH01630: client denied by server configuration: /var/www/html/.env.bak
...
show less
|
Brute-Force
|
|
🇭🇰
152.32.215.244
|
|
[Mon Sep 07 08:55:02.220944 2026] [security2:error] [pid 1385998:tid 1386045] [client 152.32.215.244 ...
show more
[Mon Sep 07 08:55:02.220944 2026] [security2:error] [pid 1385998:tid 1386045] [client 152.32.215.244:60892] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "183"] [id "9000110"] [msg "get tae fuck go scanner"] [tag "custom/go-http-client-recon"] [hostname "integraldata.cc"] [uri "/favicon.ico"] [unique_id "ap5t1vA0Xt_oEOlfMZToTgAAAFM"]
...
show less
|
Bad Web Bot
|
|
🇭🇰
101.36.108.191
|
|
[Mon Sep 07 08:54:44.281992 2026] [security2:error] [pid 1385998:tid 1386039] [client 101.36.108.191 ...
show more
[Mon Sep 07 08:54:44.281992 2026] [security2:error] [pid 1385998:tid 1386039] [client 101.36.108.191:54654] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "183"] [id "9000110"] [msg "get tae fuck go scanner"] [tag "custom/go-http-client-recon"] [hostname "integraldata.cc"] [uri "/favicon.ico"] [unique_id "ap5txPA0Xt_oEOlfMZToTAAAAE0"]
...
show less
|
Bad Web Bot
|
|
🇩🇪
165.227.143.220
|
|
[Mon Sep 07 08:37:43.535172 2026] [security2:error] [pid 1385998:tid 1386034] [client 165.227.143.22 ...
show more
[Mon Sep 07 08:37:43.535172 2026] [security2:error] [pid 1385998:tid 1386034] [client 165.227.143.220:11228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "183"] [id "9000110"] [msg "get tae fuck go scanner"] [tag "custom/go-http-client-recon"] [hostname "77.42.82.236"] [uri "/v2/_catalog"] [unique_id "ap5px_A0Xt_oEOlfMZToPQAAAEg"]
...
show less
|
Bad Web Bot
|
|
🇺🇸
34.106.42.92
|
|
[Mon Sep 07 08:33:40.839980 2026] [authz_core:error] [pid 1385944:tid 1385995] [client 34.106.42.92: ...
show more
[Mon Sep 07 08:33:40.839980 2026] [authz_core:error] [pid 1385944:tid 1385995] [client 34.106.42.92:38076] AH01630: client denied by server configuration: /var/www/html/.env.old
[Mon Sep 07 08:33:40.840559 2026] [authz_core:error] [pid 1385944:tid 1385991] [client 34.106.42.92:38034] AH01630: client denied by server configuration: /var/www/html/.env.production
[Mon Sep 07 08:33:40.842423 2026] [authz_core:error] [pid 1182813:tid 1182886] [client 34.106.42.92:38028] AH01630: client denied by server configuration: /var/www/html/.env
[Mon Sep 07 08:33:40.843744 2026] [authz_core:error] [pid 1182813:tid 1182879] [client 34.106.42.92:38072] AH01630: client denied by server configuration: /var/www/html/.env.bak
[Mon Sep 07 08:33:40.846440 2026] [authz_core:error] [pid 1182813:tid 1182881] [client 34.106.42.92:38100] AH01630: client denied by server configuration: /var/www/html/.env.example
...
show less
|
Brute-Force
|
|
🇰🇷
34.158.193.39
|
|
[Mon Sep 07 08:33:34.561406 2026] [authz_core:error] [pid 1182812:tid 1182913] [client 34.158.193.39 ...
show more
[Mon Sep 07 08:33:34.561406 2026] [authz_core:error] [pid 1182812:tid 1182913] [client 34.158.193.39:54350] AH01630: client denied by server configuration: /var/www/html/dump.sql
[Mon Sep 07 08:33:34.561501 2026] [authz_core:error] [pid 1182813:tid 1182896] [client 34.158.193.39:54346] AH01630: client denied by server configuration: /var/www/html/backup.sql
[Mon Sep 07 08:33:34.563853 2026] [authz_core:error] [pid 1182813:tid 1182907] [client 34.158.193.39:54332] AH01630: client denied by server configuration: /var/www/html/backup.tar.gz
[Mon Sep 07 08:33:34.567693 2026] [authz_core:error] [pid 1182812:tid 1182870] [client 34.158.193.39:54316] AH01630: client denied by server configuration: /var/www/html/backup.zip
[Mon Sep 07 08:33:34.570249 2026] [authz_core:error] [pid 1385944:tid 1385988] [client 34.158.193.39:54356] AH01630: client denied by server configuration: /var/www/html/db.sql
...
show less
|
Brute-Force
|
|
🇺🇸
35.253.180.94
|
|
[Mon Sep 07 08:33:32.652547 2026] [authz_core:error] [pid 1182812:tid 1182871] [client 35.253.180.94 ...
show more
[Mon Sep 07 08:33:32.652547 2026] [authz_core:error] [pid 1182812:tid 1182871] [client 35.253.180.94:45718] AH01630: client denied by server configuration: /var/www/html/.env.local
[Mon Sep 07 08:33:32.655452 2026] [authz_core:error] [pid 1182812:tid 1182913] [client 35.253.180.94:45724] AH01630: client denied by server configuration: /var/www/html/.env.production
[Mon Sep 07 08:33:32.656177 2026] [authz_core:error] [pid 1385944:tid 1385988] [client 35.253.180.94:45754] AH01630: client denied by server configuration: /var/www/html/.env.bak
[Mon Sep 07 08:33:32.659109 2026] [authz_core:error] [pid 1182812:tid 1182870] [client 35.253.180.94:45780] AH01630: client denied by server configuration: /var/www/html/.env.dev
[Mon Sep 07 08:33:32.661412 2026] [authz_core:error] [pid 1182812:tid 1182880] [client 35.253.180.94:45704] AH01630: client denied by server configuration: /var/www/html/.env
...
show less
|
Brute-Force
|
|
🇺🇸
35.199.33.210
|
|
[Mon Sep 07 08:33:24.753870 2026] [authz_core:error] [pid 1182812:tid 1182874] [client 35.199.33.210 ...
show more
[Mon Sep 07 08:33:24.753870 2026] [authz_core:error] [pid 1182812:tid 1182874] [client 35.199.33.210:55668] AH01630: client denied by server configuration: /var/www/html/backup.tar
[Mon Sep 07 08:33:24.753891 2026] [authz_core:error] [pid 1182813:tid 1182879] [client 35.199.33.210:55640] AH01630: client denied by server configuration: /var/www/html/backup.sql
[Mon Sep 07 08:33:24.756083 2026] [authz_core:error] [pid 1182812:tid 1182887] [client 35.199.33.210:55624] AH01630: client denied by server configuration: /var/www/html/backup.zip
[Mon Sep 07 08:33:24.756762 2026] [authz_core:error] [pid 1182813:tid 1182893] [client 35.199.33.210:55644] AH01630: client denied by server configuration: /var/www/html/dump.sql
[Mon Sep 07 08:33:24.762390 2026] [authz_core:error] [pid 1182812:tid 1182898] [client 35.199.33.210:55698] AH01630: client denied by server configuration: /var/www/html/www.zip
...
show less
|
Brute-Force
|
|
🇺🇸
54.196.13.51
|
|
[Mon Sep 07 08:27:08.054588 2026] [security2:error] [pid 1182812:tid 1182870] [client 54.196.13.51:3 ...
show more
[Mon Sep 07 08:27:08.054588 2026] [security2:error] [pid 1182812:tid 1182870] [client 54.196.13.51:3212] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:next-action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "newburycomics.spacecadetgrrl.me"] [uri "/"] [unique_id "ap5nTHQ4UFx8ProKr6LsXwAAAII"], referer: https://newburycomics.spacecadetgrrl.me/
[Mon Sep 07 08:27:08.694469 2026] [security2:error] [pid 1182812:tid 1182898] [client 54.196.13.51:3214] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:next-action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "newburycomics.spacecadetgrrl.me"] [uri "/
...
show less
|
Web App Attack
|
|
🇨🇱
34.176.4.222
|
|
[Mon Sep 07 08:17:25.041855 2026] [security2:error] [pid 1182812:tid 1182887] [client 34.176.4.222:5 ...
show more
[Mon Sep 07 08:17:25.041855 2026] [security2:error] [pid 1182812:tid 1182887] [client 34.176.4.222:57320] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "funcoland.spacecadetgrrl.me"] [uri "/"] [unique_id "ap5lBXQ4UFx8ProKr6LsVAAAAIs"]
[Mon Sep 07 08:17:25.810880 2026] [security2:error] [pid 1182812:tid 1182874] [client 34.176.4.222:48942] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "funcoland.spacecadetgrrl.me"] [uri "/"] [unique_id "ap5lBXQ4UFx8ProKr6LsVQAAAIU"]
[Mon Sep 07
...
show less
|
Web App Attack
|
|
🇧🇷
35.247.222.205
|
|
[Mon Sep 07 08:01:03.523348 2026] [security2:error] [pid 1182813:tid 1182889] [client 35.247.222.205 ...
show more
[Mon Sep 07 08:01:03.523348 2026] [security2:error] [pid 1182813:tid 1182889] [client 35.247.222.205:36964] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "www.spacecadetgrrl.me"] [uri "/"] [unique_id "ap5hL4T3PfpFYyHaSffHpAAAAMk"]
[Mon Sep 07 08:01:04.302385 2026] [security2:error] [pid 1182813:tid 1182923] [client 35.247.222.205:32986] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "www.spacecadetgrrl.me"] [uri "/"] [unique_id "ap5hMIT3PfpFYyHaSffHpQAAANg"]
[Mon Sep 07 08:01:05
...
show less
|
Web App Attack
|
|
🇳🇱
157.157.221.34
|
|
[Mon Sep 07 07:02:22.278945 2026] [authz_core:error] [pid 1182812:tid 1182885] [client 157.157.221.3 ...
show more
[Mon Sep 07 07:02:22.278945 2026] [authz_core:error] [pid 1182812:tid 1182885] [client 157.157.221.34:56394] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 07:02:28.383957 2026] [authz_core:error] [pid 1182813:tid 1182879] [client 157.157.221.34:56438] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 07:02:29.788556 2026] [authz_core:error] [pid 1182813:tid 1182905] [client 157.157.221.34:34962] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 07:02:44.517401 2026] [authz_core:error] [pid 1182813:tid 1182877] [client 157.157.221.34:53300] AH01630: client denied by server configuration: /var/www/html/.env
[Mon Sep 07 07:02:58.748608 2026] [authz_core:error] [pid 1182813:tid 1182873] [client 157.157.221.34:40956] AH01630: client denied by server configuration: /var/www/html/.hg
...
show less
|
Brute-Force
|
|
🇺🇸
216.180.246.148
|
|
[Mon Sep 07 06:34:19.601032 2026] [authz_core:error] [pid 1182813:tid 1182896] [client 216.180.246.1 ...
show more
[Mon Sep 07 06:34:19.601032 2026] [authz_core:error] [pid 1182813:tid 1182896] [client 216.180.246.148:21620] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 06:35:33.351863 2026] [authz_core:error] [pid 1182813:tid 1182897] [client 216.180.246.148:21620] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 06:36:25.725899 2026] [authz_core:error] [pid 1182812:tid 1182874] [client 216.180.246.148:21620] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 06:37:52.680726 2026] [authz_core:error] [pid 1182813:tid 1182914] [client 216.180.246.148:21620] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 06:38:37.155828 2026] [authz_core:error] [pid 1182813:tid 1182873] [client 216.180.246.148:33448] AH01630: client denied by server configuration: /var/www/html/
...
show less
|
Brute-Force
|
|
🇺🇸
54.146.159.153
|
|
[Mon Sep 07 06:29:26.791180 2026] [security2:error] [pid 1182812:tid 1182882] [client 54.146.159.153 ...
show more
[Mon Sep 07 06:29:26.791180 2026] [security2:error] [pid 1182812:tid 1182882] [client 54.146.159.153:27570] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:next-action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "www.webkitten.net"] [uri "/"] [unique_id "ap5LtnQ4UFx8ProKr6LrzQAAAIk"], referer: https://www.webkitten.net/
[Mon Sep 07 06:29:27.169334 2026] [security2:error] [pid 1182813:tid 1182884] [client 54.146.159.153:27580] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:next-action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "www.webkitten.net"] [uri "/"] [unique_id "ap5Lt4T3PfpFYyHaSffGt
...
show less
|
Web App Attack
|
|
🇧🇪
207.175.186.189
|
|
[Mon Sep 07 06:19:28.862282 2026] [authz_core:error] [pid 1182813:tid 1182873] [client 207.175.186.1 ...
show more
[Mon Sep 07 06:19:28.862282 2026] [authz_core:error] [pid 1182813:tid 1182873] [client 207.175.186.189:13430] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 06:19:29.022829 2026] [authz_core:error] [pid 1182812:tid 1182890] [client 207.175.186.189:13444] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 06:19:29.177397 2026] [authz_core:error] [pid 1182813:tid 1182899] [client 207.175.186.189:13452] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 06:19:29.335838 2026] [authz_core:error] [pid 1182813:tid 1182893] [client 207.175.186.189:13464] AH01630: client denied by server configuration: /var/www/html/
[Mon Sep 07 06:19:29.546327 2026] [authz_core:error] [pid 1182812:tid 1182898] [client 207.175.186.189:13470] AH01630: client denied by server configuration: /var/www/html/
...
show less
|
Brute-Force
|