🇷🇴
2.57.122.202
30 minutes ago
12/Sep/2026:08:14:24.842701Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 2.57.1 ...
show more
12/Sep/2026:08:14:24.842701Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 2.57.122.202] ModSecurity: Warning. Matched phrase "/app/etc/local.xml" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /app/etc/local.xml found within REQUEST_FILENAME: /app/etc/local.xml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "cosmos.dbgroupe.link"] [uri "/app/etc/local.xml"] [unique_id "aqVCIKQ7u_SDooorRpH00gAAAC0"]
12/Sep/2026:08:14:25.075457Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 2.57.122.202] ModSecurity: Warning. Matched phrase "/sites/default/settings.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUE
...
show less
Bad Web Bot
Web App Attack
🇺🇸
35.235.173.125
2 hours ago
12/Sep/2026:06:19:07.829990Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 35.235 ...
show more
12/Sep/2026:06:19:07.829990Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 35.235.173.125] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "366"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [t
...
show less
Bad Web Bot
Web App Attack
🇺🇸
34.26.211.74
3 hours ago
12/Sep/2026:05:29:51.047939Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.26. ...
show more
12/Sep/2026:05:29:51.047939Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.26.211.74] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "366"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag
...
show less
Bad Web Bot
Web App Attack
🇺🇸
34.23.169.36
4 hours ago
12/Sep/2026:04:15:11.922949Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.23. ...
show more
12/Sep/2026:04:15:11.922949Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.23.169.36] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "366"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag
...
show less
Bad Web Bot
Web App Attack
🇺🇸
35.235.174.175
5 hours ago
12/Sep/2026:03:42:53.902451Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 35.235 ...
show more
12/Sep/2026:03:42:53.902451Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 35.235.174.175] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "366"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [t
...
show less
Bad Web Bot
Web App Attack
🇦🇷
149.22.83.51
5 hours ago
12/Sep/2026:03:28:29.486725Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 149.22 ...
show more
12/Sep/2026:03:28:29.486725Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 149.22.83.51] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "cosmos.dbgroupe.link"] [uri "/.env.local"] [unique_id "aqT_HWTroEEKPVju66PznwAAAAI"]
12/Sep/2026:03:28:29.493807Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 149.22.83.51] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"
...
show less
Bad Web Bot
Web App Attack
🇮🇹
34.17.200.252
5 hours ago
12/Sep/2026:02:52:31.121087Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.17. ...
show more
12/Sep/2026:02:52:31.121087Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.17.200.252] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "366"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [ta
...
show less
Bad Web Bot
Web App Attack
🇯🇵
34.84.18.103
6 hours ago
12/Sep/2026:02:38:01.351505Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.84. ...
show more
12/Sep/2026:02:38:01.351505Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.84.18.103] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "366"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag
...
show less
Bad Web Bot
Web App Attack
🇳🇱
45.148.10.140
6 hours ago
12/Sep/2026:01:57:47.673597Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 45.148 ...
show more
12/Sep/2026:01:57:47.673597Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 45.148.10.140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.development.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "cosmos.dbgroupe.link"] [uri "/.env.development.local"] [unique_id "aqTp2yO3gz8yk6cFTcPOZwAAAAE"]
12/Sep/2026:01:58:40.277059Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 45.148.10.140] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .cspro
...
show less
Bad Web Bot
Web App Attack
🇹🇼
35.189.171.84
7 hours ago
12/Sep/2026:00:50:35.899376Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 35.189 ...
show more
12/Sep/2026:00:50:35.899376Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 35.189.171.84] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "366"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [ta
...
show less
Bad Web Bot
Web App Attack
🇿🇦
34.35.178.82
7 hours ago
12/Sep/2026:00:50:32.930935Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.35. ...
show more
12/Sep/2026:00:50:32.930935Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.35.178.82] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "366"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag
...
show less
Bad Web Bot
Web App Attack
🇮🇹
34.17.85.99
9 hours ago
11/Sep/2026:23:38:08.314554Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.17. ...
show more
11/Sep/2026:23:38:08.314554Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.17.85.99] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "366"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag
...
show less
Bad Web Bot
Web App Attack
🇲🇩
62.221.69.84
9 hours ago
11/Sep/2026:22:57:16.578394Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 62.221 ...
show more
11/Sep/2026:22:57:16.578394Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 62.221.69.84] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.202.217"] [severity "WARNING"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.202.217"] [uri "/"] [unique_id "aqS_jOtX46Mj0_13BLWXJAAAAC8"]
11/Sep/2026:22:57:17.187516Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 62.221.69.84] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric I
...
show less
Bad Web Bot
Web App Attack
🇯🇵
34.84.159.1
9 hours ago
11/Sep/2026:22:49:54.688223Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.84. ...
show more
11/Sep/2026:22:49:54.688223Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.84.159.1] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "366"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag
...
show less
Bad Web Bot
Web App Attack
🇳🇱
195.178.110.137
10 hours ago
11/Sep/2026:22:13:08.695353Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 195.17 ...
show more
11/Sep/2026:22:13:08.695353Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 195.178.110.137] ModSecurity: Warning. Pattern match "(?:;|\\\\\\\\{|\\\\\\\\||\\\\\\\\|\\\\\\\\||&|&&|\\\\\\\\n|\\\\\\\\r|\\\\\\\\$\\\\\\\\(|\\\\\\\\$\\\\\\\\(\\\\\\\\(|`|\\\\\\\\${|<\\\\\\\\(|>\\\\\\\\(|\\\\\\\\(\\\\\\\\s*\\\\\\\\))\\\\\\\\s*(?:{|\\\\\\\\s*\\\\\\\\(\\\\\\\\s*|\\\\\\\\w+=(?:[^\\\\\\\\s]*|\\\\\\\\$.*|\\\\\\\\$.*|<.*|>.*|\\\\\\\\'.*\\\\\\\\'|\\\\".*\\\\")\\\\\\\\s+|!\\\\\\\\s*|\\\\\\\\$)*\\\\\\\\s*(?:'|\\\\")*(?:[\\\\\\\\?\\\\\\\\*\\\\\\\\[\\\\\\\\]\\\\\\\\(\\\\\\\\)\\\\\\\\-\\\\\\\\|+\\\\\\\\w'\\\\"\\\\\\\\./\\\\\\\\\\\\\\\\]+/)?[\\\\\\\\\\\\\\\\'\\\\"]*(?:l[\\\\\\\\\\\\\\\\'\\\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "122"] [id "932100"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: & echo EXECOK',{'timeout':5000}).toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT
...
show less
Bad Web Bot
Web App Attack
🇳🇱
94.154.46.245
11 hours ago
11/Sep/2026:21:29:10.466773Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 94.154 ...
show more
11/Sep/2026:21:29:10.466773Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 94.154.46.245] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.202.217"] [severity "WARNING"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.202.217"] [uri "/Gemfile.lock"] [unique_id "aqSq5m4kktbEfVi5SalEbQAAAAE"]
11/Sep/2026:21:29:10.474155Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 94.154.46.245] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header
...
show less
Bad Web Bot
Web App Attack
🇮🇷
185.126.4.51
11 hours ago
11/Sep/2026:21:00:21.908380Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 185.12 ...
show more
11/Sep/2026:21:00:21.908380Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 185.126.4.51] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.202.217:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.202.217"] [uri "/"] [unique_id "aqSkJcfF0kLEdp7F_KRiGQAAAAk"]
11/Sep/2026:21:00:21.908380Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 185.126.4.51] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\\\\\{|\\\\\\\\||\\\\\\\\|\\\\\\\\||&|&&|\\\\\\\\n|\\\\\\\\r|`)\\\\\\\\s*[\\\\\\\\(,@\\\\\\\\'\\\\"\\\\\\\\s]*(?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/|[\\\\\\\\\\\\\\\\'\\\\"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
45.148.10.120
12 hours ago
11/Sep/2026:20:04:57.610400Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 45.148 ...
show more
11/Sep/2026:20:04:57.610400Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 45.148.10.120] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "cosmos.dbgroupe.link"] [uri "/.env"] [unique_id "aqSXKW4kktbEfVi5SalD2AAAAAE"]
11/Sep/2026:20:04:57.610778Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 45.148.10.120] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130
...
show less
Bad Web Bot
Web App Attack
🇵🇾
186.182.105.49
13 hours ago
11/Sep/2026:18:56:49.292051Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 186.18 ...
show more
11/Sep/2026:18:56:49.292051Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 186.182.105.49] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.202.217:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.202.217"] [uri "/hello.world"] [unique_id "aqSHMW4kktbEfVi5SalDZAAAAAE"]
11/Sep/2026:18:56:49.292051Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 186.182.105.49] ModSecurity: Warning. Pattern match "(?i)(?:;|\\\\\\\\{|\\\\\\\\||\\\\\\\\|\\\\\\\\||&|&&|\\\\\\\\n|\\\\\\\\r|`)\\\\\\\\s*[\\\\\\\\(,@\\\\\\\\'\\\\"\\\\\\\\s]*(?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/|[\\\\\\\
...
show less
Bad Web Bot
Web App Attack
🇨🇦
207.162.112.19
16 hours ago
11/Sep/2026:16:15:16.627851Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 207.16 ...
show more
11/Sep/2026:16:15:16.627851Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 207.162.112.19] ModSecurity: Warning. Pattern match "(?:;|\\\\\\\\{|\\\\\\\\||\\\\\\\\|\\\\\\\\||&|&&|\\\\\\\\n|\\\\\\\\r|\\\\\\\\$\\\\\\\\(|\\\\\\\\$\\\\\\\\(\\\\\\\\(|`|\\\\\\\\${|<\\\\\\\\(|>\\\\\\\\(|\\\\\\\\(\\\\\\\\s*\\\\\\\\))\\\\\\\\s*(?:{|\\\\\\\\s*\\\\\\\\(\\\\\\\\s*|\\\\\\\\w+=(?:[^\\\\\\\\s]*|\\\\\\\\$.*|\\\\\\\\$.*|<.*|>.*|\\\\\\\\'.*\\\\\\\\'|\\\\".*\\\\")\\\\\\\\s+|!\\\\\\\\s*|\\\\\\\\$)*\\\\\\\\s*(?:'|\\\\")*(?:[\\\\\\\\?\\\\\\\\*\\\\\\\\[\\\\\\\\]\\\\\\\\(\\\\\\\\)\\\\\\\\-\\\\\\\\|+\\\\\\\\w'\\\\"\\\\\\\\./\\\\\\\\\\\\\\\\]+/)?[\\\\\\\\\\\\\\\\'\\\\"]*(?:l[\\\\\\\\\\\\\\\\'\\\\"]* ..." at ARGS:parts.parts.text. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "122"] [id "932100"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: | head -1\\\\x22 qu'est ce que ca fait r\\\\xc3\\\\xa9ellement found within ARGS:p
...
show less
Bad Web Bot
Web App Attack
🇺🇸
54.234.48.131
16 hours ago
11/Sep/2026:16:00:45.538670Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 54.234 ...
show more
11/Sep/2026:16:00:45.538670Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 54.234.48.131] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "cosmos.dbgroupe.link"] [uri "/.env"] [unique_id "aqRd7XascCKLhhABJm7n_AAAAA4"]
11/Sep/2026:16:00:45.562652Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 54.234.48.131] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Re
...
show less
Bad Web Bot
Web App Attack
🇳🇱
45.148.10.21
17 hours ago
11/Sep/2026:14:45:23.936956Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 45.148 ...
show more
11/Sep/2026:14:45:23.936956Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 45.148.10.21] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.prod.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "cloud.dbgroupe.link"] [uri "/.env.prod.local"] [unique_id "aqRMQycVxCcqdcnjhVVoAQAAAAk"]
11/Sep/2026:14:45:24.036828Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 45.148.10.21] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id
...
show less
Bad Web Bot
Web App Attack
🇩🇪
34.32.105.158
18 hours ago
34.32.105.158 - - [11/Sep/2026:14:40:08 -0400] "GET /app/.env HTTP/1.1" 404 894 "-" "Mozilla/5.0 (Ma ...
show more
34.32.105.158 - - [11/Sep/2026:14:40:08 -0400] "GET /app/.env HTTP/1.1" 404 894 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.105.158 - - [11/Sep/2026:14:40:08 -0400] "GET /apps/.env HTTP/1.1" 404 894 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.105.158 - - [11/Sep/2026:14:40:08 -0400] "GET /api/.env HTTP/1.1" 404 894 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
213.209.159.148
18 hours ago
11/Sep/2026:14:13:30.574227Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 213.20 ...
show more
11/Sep/2026:14:13:30.574227Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 213.209.159.148] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.202.217:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.202.217"] [uri "/.env"] [unique_id "aqREyqWP4DnHwlXALoeTTgAAAAU"]
11/Sep/2026:14:13:30.574227Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 213.209.159.148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access A
...
show less
Bad Web Bot
Web App Attack
🇨🇦
34.19.178.32
19 hours ago
11/Sep/2026:13:28:10.883781Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.19. ...
show more
11/Sep/2026:13:28:10.883781Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.19.178.32] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "366"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag
...
show less
Bad Web Bot
Web App Attack