|
🇺🇸
45.126.210.72
|
|
[Fri Sep 11 14:53:11.017825 2026] [authz_core:error] [pid 3689056:tid 3689128] [client 45.126.210.72 ...
show more
[Fri Sep 11 14:53:11.017825 2026] [authz_core:error] [pid 3689056:tid 3689128] [client 45.126.210.72:39954] AH01630: client denied by server configuration: /var/www/html/hello.world
[Fri Sep 11 14:53:11.564881 2026] [authz_core:error] [pid 3689056:tid 3689172] [client 45.126.210.72:39954] AH01630: client denied by server configuration: /var/www/html/
[Fri Sep 11 14:53:12.179929 2026] [authz_core:error] [pid 3689056:tid 3689165] [client 45.126.210.72:39954] AH01630: client denied by server configuration: /var/www/html/index.php
[Fri Sep 11 14:53:12.627540 2026] [authz_core:error] [pid 3689056:tid 3689159] [client 45.126.210.72:39954] AH01630: client denied by server configuration: /var/www/html/test.hello
[Fri Sep 11 14:53:13.076238 2026] [authz_core:error] [pid 3689056:tid 3689127] [client 45.126.210.72:39954] AH01630: client denied by server configuration: /var/www/html/index.php
...
show less
|
Brute-Force
|
|
🇧🇪
35.240.91.104
|
|
[Fri Sep 11 14:45:28.722737 2026] [security2:error] [pid 3689056:tid 3689155] [client 35.240.91.104: ...
show more
[Fri Sep 11 14:45:28.722737 2026] [security2:error] [pid 3689056:tid 3689155] [client 35.240.91.104:53316] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "www.spacecadetgrrl.me"] [uri "/"] [unique_id "aqQF-OQYqeMn262Zih1Q8wAAAE8"]
[Fri Sep 11 14:45:29.083764 2026] [security2:error] [pid 3689056:tid 3689135] [client 35.240.91.104:57654] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "www.spacecadetgrrl.me"] [uri "/"] [unique_id "aqQF-eQYqeMn262Zih1Q9AAAAEU"]
[Fri Sep 11 14:45:29.4
...
show less
|
Web App Attack
|
|
🇫🇷
185.177.72.66
|
|
[Fri Sep 11 14:22:08.547766 2026] [security2:error] [pid 3689055:tid 3689101] [remote 185.177.72.66: ...
show more
[Fri Sep 11 14:22:08.547766 2026] [security2:error] [pid 3689055:tid 3689101] [remote 185.177.72.66:20430] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "spacecadetgrrl.me"] [uri "/info.php.bak"] [unique_id "aqQAgIP_4tJiCZiN3jEmDwAADBg"]
...
show less
|
Web App Attack
|
|
🇺🇿
87.192.253.110
|
|
[Fri Sep 11 14:05:27.914915 2026] [authz_core:error] [pid 3689055:tid 3689150] [client 87.192.253.11 ...
show more
[Fri Sep 11 14:05:27.914915 2026] [authz_core:error] [pid 3689055:tid 3689150] [client 87.192.253.110:43526] AH01630: client denied by server configuration: /var/www/html/hello.world
[Fri Sep 11 14:05:28.054717 2026] [authz_core:error] [pid 3689055:tid 3689148] [client 87.192.253.110:43526] AH01630: client denied by server configuration: /var/www/html/
[Fri Sep 11 14:05:28.180601 2026] [authz_core:error] [pid 3689055:tid 3689145] [client 87.192.253.110:43526] AH01630: client denied by server configuration: /var/www/html/index.php
[Fri Sep 11 14:05:28.054717 2026] [authz_core:error] [pid 3689055:tid 3689148] [client 87.192.253.110:43526] AH01630: client denied by server configuration: /var/www/html/
...
show less
|
Brute-Force
|
|
🇳🇱
195.178.110.22
|
|
[Fri Sep 11 12:29:11.309762 2026] [authz_core:error] [pid 3689055:tid 3689166] [client 195.178.110.2 ...
show more
[Fri Sep 11 12:29:11.309762 2026] [authz_core:error] [pid 3689055:tid 3689166] [client 195.178.110.22:50866] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/baikal/html/
...
show less
|
Brute-Force
|
|
🇳🇱
195.178.110.137
|
|
[Fri Sep 11 12:20:32.702590 2026] [security2:error] [pid 3689056:tid 3689130] [client 195.178.110.13 ...
show more
[Fri Sep 11 12:20:32.702590 2026] [security2:error] [pid 3689056:tid 3689130] [client 195.178.110.137:59568] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "funcoland.spacecadetgrrl.me"] [uri "/"] [unique_id "aqPkAOQYqeMn262Zih1PXAAAAEI"]
[Fri Sep 11 12:20:36.892591 2026] [security2:error] [pid 3689056:tid 3689152] [client 195.178.110.137:59580] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "funcoland.spacecadetgrrl.me"] [uri "/"] [unique_id "aqPkBOQYqeMn262Zih1PXQAAAE0"]
[Fri S
...
show less
|
Web App Attack
|
|
🇮🇹
34.154.147.229
|
|
[Fri Sep 11 11:47:51.332917 2026] [security2:error] [pid 3689056:tid 3689127] [client 34.154.147.229 ...
show more
[Fri Sep 11 11:47:51.332917 2026] [security2:error] [pid 3689056:tid 3689127] [client 34.154.147.229:58352] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "analytics.spacecadetgrrl.me"] [uri "/"] [unique_id "aqPcV-QYqeMn262Zih1PAgAAAEA"]
[Fri Sep 11 11:47:52.014938 2026] [security2:error] [pid 3689055:tid 3689144] [client 34.154.147.229:58360] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "analytics.spacecadetgrrl.me"] [uri "/"] [unique_id "aqPcWIP_4tJiCZiN3jElTQAAAAc"]
[Fri Sep
...
show less
|
Web App Attack
|
|
🇺🇸
35.255.153.115
|
|
[Fri Sep 11 11:40:33.175771 2026] [security2:error] [pid 3689056:tid 3689130] [client 35.255.153.115 ...
show more
[Fri Sep 11 11:40:33.175771 2026] [security2:error] [pid 3689056:tid 3689130] [client 35.255.153.115:40432] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "www.webkitten.net"] [uri "/"] [unique_id "aqPaoeQYqeMn262Zih1O8wAAAEI"]
[Fri Sep 11 11:40:33.700674 2026] [security2:error] [pid 3689056:tid 3689155] [client 35.255.153.115:40436] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "www.webkitten.net"] [uri "/"] [unique_id "aqPaoeQYqeMn262Zih1O9AAAAE8"]
[Fri Sep 11 11:40:34.176980
...
show less
|
Web App Attack
|
|
🇮🇪
104.28.232.40
|
|
[Fri Sep 11 11:12:25.890846 2026] [authz_core:error] [pid 3689056:tid 3689170] [client 104.28.232.40 ...
show more
[Fri Sep 11 11:12:25.890846 2026] [authz_core:error] [pid 3689056:tid 3689170] [client 104.28.232.40:65144] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/webkitten-net/web/.aws, referer: https://www.google.com/search?q=www.webkitten.net
[Fri Sep 11 11:12:30.857668 2026] [authz_core:error] [pid 3689056:tid 3689155] [client 104.28.232.40:65143] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/webkitten-net/web/.env, referer: https://www.google.com/search?q=www.webkitten.net
[Fri Sep 11 11:12:30.861285 2026] [authz_core:error] [pid 3689056:tid 3689165] [client 104.28.232.40:65135] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/webkitten-net/web/.env.local, referer: https://www.google.com/search?q=www.webkitten.net
[Fri Sep 11 11:12:30.866296 2026] [authz_core:error] [pid 3689055:tid 3689177] [client 104.28.232.40:65150] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/
...
show less
|
Brute-Force
|
|
🇫🇮
193.32.204.199
|
|
[Fri Sep 11 11:06:40.480367 2026] [authz_core:error] [pid 3689056:tid 3689127] [client 193.32.204.19 ...
show more
[Fri Sep 11 11:06:40.480367 2026] [authz_core:error] [pid 3689056:tid 3689127] [client 193.32.204.199:50188] AH01630: client denied by server configuration: /var/www/html/
[Fri Sep 11 11:06:40.508375 2026] [authz_core:error] [pid 3689056:tid 3689137] [client 193.32.204.199:50184] AH01630: client denied by server configuration: /var/www/html/
[Fri Sep 11 11:06:46.748832 2026] [authz_core:error] [pid 3689055:tid 3689174] [client 193.32.204.199:60834] AH01630: client denied by server configuration: /var/www/html/
[Fri Sep 11 11:06:52.915856 2026] [authz_core:error] [pid 3689055:tid 3689144] [client 193.32.204.199:32984] AH01630: client denied by server configuration: /var/www/html/
[Fri Sep 11 11:07:08.079466 2026] [authz_core:error] [pid 3689055:tid 3689157] [client 193.32.204.199:38810] AH01630: client denied by server configuration: /var/www/html/
...
show less
|
Brute-Force
|
|
🇨🇳
110.179.80.168
|
|
[Fri Sep 11 10:15:01.096297 2026] [security2:error] [pid 3689055:tid 3689156] [client 110.179.80.168 ...
show more
[Fri Sep 11 10:15:01.096297 2026] [security2:error] [pid 3689055:tid 3689156] [client 110.179.80.168:57808] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "183"] [id "9000110"] [msg "get tae fuck go scanner"] [tag "custom/go-http-client-recon"] [hostname "analytics.spacecadetgrrl.me"] [uri "/"] [unique_id "aqPGlYP_4tJiCZiN3jEkcAAAAA0"]
...
show less
|
Bad Web Bot
|
|
🇳🇱
185.213.175.37
|
|
[Fri Sep 11 09:57:11.081921 2026] [security2:error] [pid 3689056:tid 3689159] [client 185.213.175.37 ...
show more
[Fri Sep 11 09:57:11.081921 2026] [security2:error] [pid 3689056:tid 3689159] [client 185.213.175.37:60552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "spacecadetgrrl.me"] [uri "/.env"] [unique_id "aqPCZ-QYqeMn262Zih1NnAAAAFE"]
[Fri Sep 11 09:57:11.315265 2026] [security2:error] [pid 3689056:tid 3689132] [client 185.213.175.37:60552] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"
...
show less
|
Web App Attack
|
|
🇧🇬
108.165.233.209
|
|
[Fri Sep 11 07:15:42.906353 2026] [authz_core:error] [pid 3689055:tid 3689129] [client 108.165.233.2 ...
show more
[Fri Sep 11 07:15:42.906353 2026] [authz_core:error] [pid 3689055:tid 3689129] [client 108.165.233.209:52282] AH01630: client denied by server configuration: /var/www/html/hello.world
[Fri Sep 11 07:15:42.987489 2026] [authz_core:error] [pid 3689055:tid 3689171] [client 108.165.233.209:52282] AH01630: client denied by server configuration: /var/www/html/
[Fri Sep 11 07:15:43.064443 2026] [authz_core:error] [pid 3689055:tid 3689131] [client 108.165.233.209:52282] AH01630: client denied by server configuration: /var/www/html/index.php
[Fri Sep 11 07:15:43.133094 2026] [authz_core:error] [pid 3689055:tid 3689134] [client 108.165.233.209:52282] AH01630: client denied by server configuration: /var/www/html/test.hello
[Fri Sep 11 07:15:43.246348 2026] [authz_core:error] [pid 3689055:tid 3689174] [client 108.165.233.209:52282] AH01630: client denied by server configuration: /var/www/html/index.php
...
show less
|
Brute-Force
|
|
🇫🇮
62.238.58.32
|
|
[Fri Sep 11 06:35:25.577854 2026] [authz_core:error] [pid 3689056:tid 3689139] [client 62.238.58.32: ...
show more
[Fri Sep 11 06:35:25.577854 2026] [authz_core:error] [pid 3689056:tid 3689139] [client 62.238.58.32:33700] AH01630: client denied by server configuration: /var/www/html/hello.world
[Fri Sep 11 06:35:25.584465 2026] [authz_core:error] [pid 3689056:tid 3689146] [client 62.238.58.32:33700] AH01630: client denied by server configuration: /var/www/html/
[Fri Sep 11 06:35:25.591957 2026] [authz_core:error] [pid 3689056:tid 3689135] [client 62.238.58.32:33700] AH01630: client denied by server configuration: /var/www/html/index.php
[Fri Sep 11 06:35:25.595365 2026] [authz_core:error] [pid 3689056:tid 3689167] [client 62.238.58.32:33700] AH01630: client denied by server configuration: /var/www/html/test.hello
[Fri Sep 11 06:35:25.600620 2026] [authz_core:error] [pid 3689056:tid 3689127] [client 62.238.58.32:33700] AH01630: client denied by server configuration: /var/www/html/index.php
...
show less
|
Brute-Force
|
|
🇺🇸
216.180.246.118
|
|
[Fri Sep 11 06:28:35.012416 2026] [authz_core:error] [pid 3689055:tid 3689145] [client 216.180.246.1 ...
show more
[Fri Sep 11 06:28:35.012416 2026] [authz_core:error] [pid 3689055:tid 3689145] [client 216.180.246.118:21201] AH01630: client denied by server configuration: /var/www/html/
[Fri Sep 11 06:30:19.906844 2026] [authz_core:error] [pid 3689055:tid 3689166] [client 216.180.246.118:22002] AH01630: client denied by server configuration: /var/www/html/
[Fri Sep 11 06:30:24.250298 2026] [authz_core:error] [pid 3689055:tid 3689156] [client 216.180.246.118:22002] AH01630: client denied by server configuration: /var/www/html/manage
[Fri Sep 11 06:30:28.436004 2026] [authz_core:error] [pid 3689055:tid 3689161] [client 216.180.246.118:22002] AH01630: client denied by server configuration: /var/www/html/admin
[Fri Sep 11 06:30:29.915423 2026] [authz_core:error] [pid 3689055:tid 3689173] [client 216.180.246.118:22002] AH01630: client denied by server configuration: /var/www/html/index.html
...
show less
|
Brute-Force
|
|
🇩🇪
213.209.159.223
|
|
[Fri Sep 11 06:15:32.636447 2026] [security2:error] [pid 3689055:tid 3689076] [remote 213.209.159.22 ...
show more
[Fri Sep 11 06:15:32.636447 2026] [security2:error] [pid 3689055:tid 3689076] [remote 213.209.159.223:63081] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "spacecadetgrrl.me"] [uri "/.env"] [unique_id "aqOOdIP_4tJiCZiN3jEimQAACgI"]
[Fri Sep 11 06:15:32.767632 2026] [security2:error] [pid 3689055:tid 3689080] [remote 213.209.159.223:63081] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation
...
show less
|
Web App Attack
|
|
🇺🇸
34.177.120.29
|
|
[Fri Sep 11 06:13:58.368593 2026] [security2:error] [pid 3689056:tid 3689147] [client 34.177.120.29: ...
show more
[Fri Sep 11 06:13:58.368593 2026] [security2:error] [pid 3689056:tid 3689147] [client 34.177.120.29:40410] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "funcoland.spacecadetgrrl.me"] [uri "/"] [unique_id "aqOOFuQYqeMn262Zih1KxgAAAEs"]
[Fri Sep 11 06:13:58.908036 2026] [security2:error] [pid 3689056:tid 3689135] [client 34.177.120.29:40412] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "funcoland.spacecadetgrrl.me"] [uri "/"] [unique_id "aqOOFuQYqeMn262Zih1KxwAAAEU"]
[Fri Sep 1
...
show less
|
Web App Attack
|
|
🇺🇸
34.174.250.221
|
|
[Fri Sep 11 05:04:53.213370 2026] [security2:error] [pid 3689056:tid 3689147] [client 34.174.250.221 ...
show more
[Fri Sep 11 05:04:53.213370 2026] [security2:error] [pid 3689056:tid 3689147] [client 34.174.250.221:57592] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "devilishseraph.net"] [uri "/"] [unique_id "aqN95eQYqeMn262Zih1KKwAAAEs"]
[Fri Sep 11 05:04:53.935894 2026] [security2:error] [pid 3689056:tid 3689163] [client 34.174.250.221:57598] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "devilishseraph.net"] [uri "/"] [unique_id "aqN95eQYqeMn262Zih1KLAAAAFM"]
[Fri Sep 11 05:04:54.73394
...
show less
|
Web App Attack
|
|
🇺🇸
34.182.72.254
|
|
[Fri Sep 11 04:59:47.071894 2026] [security2:error] [pid 3689055:tid 3689142] [client 34.182.72.254: ...
show more
[Fri Sep 11 04:59:47.071894 2026] [security2:error] [pid 3689055:tid 3689142] [client 34.182.72.254:44766] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "integraldata.cc"] [uri "/"] [unique_id "aqN8s4P_4tJiCZiN3jEiBAAAAAY"]
[Fri Sep 11 04:59:47.631496 2026] [security2:error] [pid 3689056:tid 3689165] [client 34.182.72.254:44776] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "integraldata.cc"] [uri "/"] [unique_id "aqN8s-QYqeMn262Zih1KHwAAAFQ"]
[Fri Sep 11 04:59:48.178441 2026]
...
show less
|
Web App Attack
|
|
🇺🇸
34.186.239.95
|
|
[Fri Sep 11 03:43:25.381136 2026] [security2:error] [pid 3689056:tid 3689130] [client 34.186.239.95: ...
show more
[Fri Sep 11 03:43:25.381136 2026] [security2:error] [pid 3689056:tid 3689130] [client 34.186.239.95:52144] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "katy.devilishseraph.net"] [uri "/"] [unique_id "aqNqzeQYqeMn262Zih1JawAAAEI"]
[Fri Sep 11 03:43:26.058981 2026] [security2:error] [pid 3689056:tid 3689163] [client 34.186.239.95:33022] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "katy.devilishseraph.net"] [uri "/"] [unique_id "aqNqzuQYqeMn262Zih1JbAAAAFM"]
[Fri Sep 11 03:43:
...
show less
|
Web App Attack
|
|
🇸🇬
143.198.85.26
|
|
[Fri Sep 11 03:17:01.980441 2026] [security2:error] [pid 3689055:tid 3689160] [client 143.198.85.26: ...
show more
[Fri Sep 11 03:17:01.980441 2026] [security2:error] [pid 3689055:tid 3689160] [client 143.198.85.26:56877] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "spacecadetgrrl.me"] [uri "/images/images/cache.php"] [unique_id "aqNknYP_4tJiCZiN3jEhkAAAAA8"], referer: www.google.com
[Fri Sep 11 03:17:04.340382 2026] [security2:error] [pid 3689056:tid 3689149] [client 143.198.85.26:56906] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWA
...
show less
|
Web App Attack
|
|
🇭🇰
152.32.133.206
|
|
[Fri Sep 11 01:49:40.255676 2026] [authz_core:error] [pid 3689055:tid 3689145] [client 152.32.133.20 ...
show more
[Fri Sep 11 01:49:40.255676 2026] [authz_core:error] [pid 3689055:tid 3689145] [client 152.32.133.206:2276] AH01630: client denied by server configuration: /var/www/html/version
[Fri Sep 11 01:49:40.682918 2026] [authz_core:error] [pid 3689055:tid 3689150] [client 152.32.133.206:2566] AH01630: client denied by server configuration: /var/www/html/
[Fri Sep 11 01:49:41.103575 2026] [authz_core:error] [pid 3689055:tid 3689157] [client 152.32.133.206:2784] AH01630: client denied by server configuration: /var/www/html/
[Fri Sep 11 01:49:41.525304 2026] [authz_core:error] [pid 3689055:tid 3689153] [client 152.32.133.206:3000] AH01630: client denied by server configuration: /var/www/html/v1
[Fri Sep 11 01:49:41.950954 2026] [authz_core:error] [pid 3689056:tid 3689162] [client 152.32.133.206:3256] AH01630: client denied by server configuration: /var/www/html/
...
show less
|
Brute-Force
|
|
🇭🇰
34.92.178.203
|
|
[Thu Sep 10 23:41:47.934739 2026] [authz_core:error] [pid 3044602:tid 3044715] [client 34.92.178.203 ...
show more
[Thu Sep 10 23:41:47.934739 2026] [authz_core:error] [pid 3044602:tid 3044715] [client 34.92.178.203:44196] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/katy.devilishseraph.net/web/.python_history
[Thu Sep 10 23:41:47.934873 2026] [authz_core:error] [pid 3044602:tid 3044699] [client 34.92.178.203:44358] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/katy.devilishseraph.net/web/.profile
[Thu Sep 10 23:41:47.946569 2026] [authz_core:error] [pid 3044602:tid 3044716] [client 34.92.178.203:44352] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/katy.devilishseraph.net/web/.continue
[Thu Sep 10 23:41:47.954494 2026] [authz_core:error] [pid 3054415:tid 3054455] [client 34.92.178.203:44208] AH01630: client denied by server configuration: /mnt/HC_Volume_105148208/vhosts/katy.devilishseraph.net/web/.mcp.json
[Thu Sep 10 23:41:47.956288 2026] [authz_core:error] [pid 3054415:tid 3054461] [client 34.9
...
show less
|
Brute-Force
|
|
🇧🇷
35.198.45.137
|
|
[Thu Sep 10 23:32:49.525892 2026] [security2:error] [pid 3044601:tid 3044684] [client 35.198.45.137: ...
show more
[Thu Sep 10 23:32:49.525892 2026] [security2:error] [pid 3044601:tid 3044684] [client 35.198.45.137:60074] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "www.devilishseraph.net"] [uri "/"] [unique_id "aqMwEfmwzdH3E0Sl7RFPpgAAAI0"]
[Thu Sep 10 23:32:50.345700 2026] [security2:error] [pid 3054415:tid 3054445] [client 35.198.45.137:60084] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "www.devilishseraph.net"] [uri "/"] [unique_id "aqMwEuMZBY4AVXhZ0xZMggAAAEI"]
[Thu Sep 10 23:32:51
...
show less
|
Web App Attack
|
|
🇨🇦
34.19.210.104
|
|
[Thu Sep 10 22:34:17.940785 2026] [security2:error] [pid 3054415:tid 3054456] [client 34.19.210.104: ...
show more
[Thu Sep 10 22:34:17.940785 2026] [security2:error] [pid 3054415:tid 3054456] [client 34.19.210.104:47658] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "katy.devilishseraph.net"] [uri "/"] [unique_id "aqMiWeMZBY4AVXhZ0xZMUQAAAE0"]
[Thu Sep 10 22:34:18.397259 2026] [security2:error] [pid 3044602:tid 3044717] [client 34.19.210.104:47664] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/mnt/HC_Volume_105148208/crs/crs-custom.conf"] [line "166"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "katy.devilishseraph.net"] [uri "/"] [unique_id "aqMiWsv1RDabrTKlzrOUrQAAABI"]
[Thu Sep 10 22:34:
...
show less
|
Web App Attack
|