|
🇳🇱
2001:1c00:5:b400:c5b:19f1:9e18:8498
|
|
[Sat Oct 24 06:30:00.438493 2026] [security2:error] [pid 2419886:tid 2419886] [client 2001:1c00:5:b4 ...
show more
[Sat Oct 24 06:30:00.438493 2026] [security2:error] [pid 2419886:tid 2419886] [client 2001:1c00:5:b400:c5b:19f1:9e18:8498:2207] [client 2001:1c00:5:b400:c5b:19f1:9e18:8498] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/wpad.dat"] [unique_id "atxQaKeuI78YVflHOLmGDQAAAAo"]
[Sat Oct 24 06:30:00.439124 2026] [security2:error] [pid 2428026:tid 2428026] [client 2001:1c00:5:b400:c5b:19f1:9e18:8498:2208] [client 2001:1c00:5:b400:c5b:19f1:9e18:8498] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"]
...
show less
|
Hacking
Web App Attack
|
|
🇧🇪
34.77.42.158
|
|
[Sat Oct 24 04:30:13.884530 2026] [security2:error] [pid 2419886:tid 2419886] [client 34.77.42.158:4 ...
show more
[Sat Oct 24 04:30:13.884530 2026] [security2:error] [pid 2419886:tid 2419886] [client 34.77.42.158:4664] [client 34.77.42.158] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "atw0VaeuI78YVflHOLmDwAAAAAo"]
[Sat Oct 24 04:30:18.461102 2026] [security2:error] [pid 2419888:tid 2419888] [client 34.77.42.158:22068] [client 34.77.42.158] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [ms
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
107.150.103.151
|
|
[Sat Oct 24 04:19:45.801657 2026] [security2:error] [pid 2408619:tid 2408619] [client 107.150.103.15 ...
show more
[Sat Oct 24 04:19:45.801657 2026] [security2:error] [pid 2408619:tid 2408619] [client 107.150.103.151:40002] [client 107.150.103.151] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "atwx4aL1lIwNwh9HQ0xpyAAAABE"]
[Sat Oct 24 04:19:45.802508 2026] [security2:error] [pid 2408619:tid 2408619] [client 107.150.103.151:40002] [client 107.150.103.151] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"]
...
show less
|
Hacking
Web App Attack
|
|
🇿🇦
34.35.41.234
|
|
[Sat Oct 24 03:42:40.649018 2026] [security2:error] [pid 2280245:tid 2280245] [client 34.35.41.234:0 ...
show more
[Sat Oct 24 03:42:40.649018 2026] [security2:error] [pid 2280245:tid 2280245] [client 34.35.41.234:0] [client 34.35.41.234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.git/config"] [unique_id "atwpMLfkTsVUhuRR0Aq07gAAAA8"]
[Sat Oct 24 03:42:42.221235 2026] [security2:error] [pid 2280372:tid 2280372] [client 34.35.41.234:0] [client 34.35.41.234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [seve
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
66.132.195.123
|
|
[Sat Oct 24 03:13:52.398003 2026] [security2:error] [pid 2280245:tid 2280245] [client 66.132.195.123 ...
show more
[Sat Oct 24 03:13:52.398003 2026] [security2:error] [pid 2280245:tid 2280245] [client 66.132.195.123:13770] [client 66.132.195.123] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "atwicLfkTsVUhuRR0Aq0jwAAAA8"]
[Sat Oct 24 03:14:01.370092 2026] [security2:error] [pid 2360546:tid 2360546] [client 66.132.195.123:22340] [client 66.132.195.123] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
107.150.105.241
|
|
[Sat Oct 24 01:58:16.479693 2026] [security2:error] [pid 2280370:tid 2280370] [client 107.150.105.24 ...
show more
[Sat Oct 24 01:58:16.479693 2026] [security2:error] [pid 2280370:tid 2280370] [client 107.150.105.241:36330] [client 107.150.105.241] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "atwQuJMdYuhQHDHClTMyeQAAAFg"], referer: http://94.209.38.171:80
[Sat Oct 24 01:58:20.326254 2026] [security2:error] [pid 2280289:tid 2280289] [client 107.150.105.241:36332] [client 107.150.105.241] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Scor
...
show less
|
Hacking
Web App Attack
|
|
🇧🇪
34.79.59.9
|
|
[Sat Oct 24 01:09:47.564984 2026] [security2:error] [pid 2255708:tid 2255708] [client 34.79.59.9:0] ...
show more
[Sat Oct 24 01:09:47.564984 2026] [security2:error] [pid 2255708:tid 2255708] [client 34.79.59.9:0] [client 34.79.59.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.env"] [unique_id "atwFWwOdGUOtPU5bZqAOsgAAAAA"]
[Sat Oct 24 01:09:47.567218 2026] [security2:error] [pid 2258017:tid 2258017] [client 34.79.59.9:0] [client 34.79.59.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"
...
show less
|
Hacking
Web App Attack
|
|
🇩🇪
34.32.71.231
|
|
[Fri Oct 23 22:56:38.878288 2026] [security2:error] [pid 2184061:tid 2184061] [client 34.32.71.231:5 ...
show more
[Fri Oct 23 22:56:38.878288 2026] [security2:error] [pid 2184061:tid 2184061] [client 34.32.71.231:58626] [client 34.32.71.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "onderdelen.fambus.nl"] [uri "/"] [unique_id "atvmJnycp1FWqudCajNcIAAAAAY"]
[Fri Oct 23 22:56:39.023615 2026] [security2:error] [pid 2184061:tid 2184061] [client 34.32.71.231:58626] [client 34.32.71.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [seve
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
143.244.168.161
|
|
[Fri Oct 23 22:26:25.730772 2026] [security2:error] [pid 2107366:tid 2107366] [client 143.244.168.16 ...
show more
[Fri Oct 23 22:26:25.730772 2026] [security2:error] [pid 2107366:tid 2107366] [client 143.244.168.161:56562] [client 143.244.168.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "onderdelen.fambus.nl"] [uri "/.DS_Store"] [unique_id "atvfEf5OZr2CD4jYjOlE7gAAAJM"]
[Fri Oct 23 22:26:26.885059 2026] [security2:error] [pid 2117438:tid 2117438] [client 143.244.168.161:56566] [client 143.244.168.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (To
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
87.121.84.174
|
|
[Fri Oct 23 21:08:08.966273 2026] [security2:error] [pid 2085717:tid 2085717] [client 87.121.84.174: ...
show more
[Fri Oct 23 21:08:08.966273 2026] [security2:error] [pid 2085717:tid 2085717] [client 87.121.84.174:0] [client 87.121.84.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/backup/.git/reconx-0570cd21a2c3"] [unique_id "atvMuD3ZC6rgwm84Gt5-WQAAAAs"]
[Fri Oct 23 21:08:08.971003 2026] [security2:error] [pid 1838414:tid 1838414] [client 87.121.84.174:0] [client 87.121.84.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded
...
show less
|
Hacking
Web App Attack
|
|
🇫🇷
212.47.78.233
|
|
[Fri Oct 23 19:45:53.483988 2026] [security2:error] [pid 1838414:tid 1838414] [client 212.47.78.233: ...
show more
[Fri Oct 23 19:45:53.483988 2026] [security2:error] [pid 1838414:tid 1838414] [client 212.47.78.233:57314] [client 212.47.78.233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "atu5cTL4Fur-wub9sdSu8QAAAAU"]
[Fri Oct 23 19:45:53.522610 2026] [security2:error] [pid 1838414:tid 1838414] [client 212.47.78.233:57314] [client 212.47.78.233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity
...
show less
|
Hacking
Web App Attack
|
|
🇩🇪
34.185.248.206
|
|
[Fri Oct 23 19:08:34.094390 2026] [security2:error] [pid 1834049:tid 1834049] [client 34.185.248.206 ...
show more
[Fri Oct 23 19:08:34.094390 2026] [security2:error] [pid 1834049:tid 1834049] [client 34.185.248.206:37476] [client 34.185.248.206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.fambus.nl"] [uri "/"] [unique_id "atuwslNWiM97kscr3xLpNgAAAAI"]
[Fri Oct 23 19:08:34.163132 2026] [security2:error] [pid 1834049:tid 1834049] [client 34.185.248.206:37476] [client 34.185.248.206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [se
...
show less
|
Hacking
Web App Attack
|
|
🇵🇱
45.138.12.51
|
|
[Fri Oct 23 17:57:22.956762 2026] [security2:error] [pid 1833197:tid 1833197] [client 45.138.12.51:4 ...
show more
[Fri Oct 23 17:57:22.956762 2026] [security2:error] [pid 1833197:tid 1833197] [client 45.138.12.51:44942] [client 45.138.12.51] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "atugAmme9-VsMMNJ_p5btAAAAAY"]
[Fri Oct 23 17:57:23.151520 2026] [security2:error] [pid 1833199:tid 1833199] [client 45.138.12.51:44948] [client 45.138.12.51] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [m
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
66.132.172.136
|
|
[Fri Oct 23 17:48:48.177447 2026] [security2:error] [pid 1842347:tid 1842347] [client 66.132.172.136 ...
show more
[Fri Oct 23 17:48:48.177447 2026] [security2:error] [pid 1842347:tid 1842347] [client 66.132.172.136:59972] [client 66.132.172.136] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "atueAN6warUyeZ2NbG4pDgAAAAo"]
[Fri Oct 23 17:49:17.435753 2026] [security2:error] [pid 1833195:tid 1833195] [client 66.132.172.136:38476] [client 66.132.172.136] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920
...
show less
|
Hacking
Web App Attack
|
|
🇬🇧
2a02:6b6f:e40a:3200:fd3b:6c91:9ef1:98f5
|
|
[Fri Oct 23 17:38:40.110177 2026] [security2:error] [pid 1838414:tid 1838414] [client 2a02:6b6f:e40a ...
show more
[Fri Oct 23 17:38:40.110177 2026] [security2:error] [pid 1838414:tid 1838414] [client 2a02:6b6f:e40a:3200:fd3b:6c91:9ef1:98f5:0] [client 2a02:6b6f:e40a:3200:fd3b:6c91:9ef1:98f5] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/free-chips/pop-slots"] [unique_id "atuboDL4Fur-wub9sdSsfQAAAAU"], referer: https://www.google.com/
[Fri Oct 23 17:38:40.305280 2026] [security2:error] [pid 1948074:tid 1948074] [client 2a02:6b6f:e40a:3200:fd3b:6c91:9ef1:98f5:0] [client 2a02:6b6f:e40a:3200:fd3b:6c91:9ef1:98f5] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/sha
...
show less
|
Hacking
Web App Attack
|
|
🇵🇱
45.138.12.16
|
|
[Fri Oct 23 16:02:33.578469 2026] [security2:error] [pid 1833195:tid 1833195] [client 45.138.12.16:4 ...
show more
[Fri Oct 23 16:02:33.578469 2026] [security2:error] [pid 1833195:tid 1833195] [client 45.138.12.16:42004] [client 45.138.12.16] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/.git/config"] [unique_id "atuFGatSxtTi8uBgBHQJjwAAAAA"]
[Fri Oct 23 16:02:33.579170 2026] [security2:error] [pid 1833195:tid 1833195] [client 45.138.12.16:42004] [client 45.138.12.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"]
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
2001:1c00:5:b400:c51f:dbac:3065:ae8
|
|
[Fri Oct 23 14:27:10.341984 2026] [security2:error] [pid 1650336:tid 1650336] [client 2001:1c00:5:b4 ...
show more
[Fri Oct 23 14:27:10.341984 2026] [security2:error] [pid 1650336:tid 1650336] [client 2001:1c00:5:b400:c51f:dbac:3065:ae8:3738] [client 2001:1c00:5:b400:c51f:dbac:3065:ae8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/wpad.dat"] [unique_id "attuvhoGvbzRJAHLugwq4gAAAAU"]
[Fri Oct 23 14:27:14.127664 2026] [security2:error] [pid 1646801:tid 1646801] [client 2001:1c00:5:b400:c51f:dbac:3065:ae8:13911] [client 2001:1c00:5:b400:c51f:dbac:3065:ae8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"]
...
show less
|
Hacking
Web App Attack
|
|
🇧🇪
104.155.42.83
|
|
[Fri Oct 23 12:46:36.677368 2026] [security2:error] [pid 1650336:tid 1650336] [client 104.155.42.83: ...
show more
[Fri Oct 23 12:46:36.677368 2026] [security2:error] [pid 1650336:tid 1650336] [client 104.155.42.83:17734] [client 104.155.42.83] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "attXLBoGvbzRJAHLugwpIQAAAAU"]
[Fri Oct 23 12:46:36.882522 2026] [security2:error] [pid 1646801:tid 1646801] [client 104.155.42.83:17746] [client 104.155.42.83] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
207.90.244.14
|
|
[Fri Oct 23 12:40:45.378619 2026] [security2:error] [pid 1646801:tid 1646801] [client 207.90.244.14: ...
show more
[Fri Oct 23 12:40:45.378619 2026] [security2:error] [pid 1646801:tid 1646801] [client 207.90.244.14:38984] [client 207.90.244.14] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "attVzS19twIGBHlvYqJbEQAAAAY"]
[Fri Oct 23 12:40:49.948213 2026] [security2:error] [pid 1657454:tid 1657454] [client 207.90.244.14:34584] [client 207.90.244.14] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"
...
show less
|
Hacking
Web App Attack
|
|
🇱🇹
77.90.185.20
|
|
[Fri Oct 23 11:59:13.436118 2026] [security2:error] [pid 1650336:tid 1650336] [client 77.90.185.20:2 ...
show more
[Fri Oct 23 11:59:13.436118 2026] [security2:error] [pid 1650336:tid 1650336] [client 77.90.185.20:29834] [client 77.90.185.20] ModSecurity: Access denied with code 400 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/etc/modsecurity/modsecurity.conf"] [line "81"] [id "200003"] [msg "Multipart request body failed strict validation: PE 0, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM 0, IQ 0, IP 0, IH 0, FL 0"] [hostname "94.209.38.171"] [uri "/index.php"] [unique_id "attL7RoGvbzRJAHLugwnnQAAAAU"]
[Fri Oct 23 11:59:14.633679 2026] [security2:error] [pid 1657455:tid 1657455] [client 77.90.185.20:24384] [client 77.90.185.20] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"]
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
64.62.156.152
|
|
[Fri Oct 23 10:20:20.706368 2026] [security2:error] [pid 1629520:tid 1629520] [client 64.62.156.152: ...
show more
[Fri Oct 23 10:20:20.706368 2026] [security2:error] [pid 1629520:tid 1629520] [client 64.62.156.152:35028] [client 64.62.156.152] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "ats05GOpN_aBQISeglo_NwAAAAA"]
[Fri Oct 23 10:45:26.651256 2026] [security2:error] [pid 1657455:tid 1657455] [client 64.62.156.152:34334] [client 64.62.156.152] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"
...
show less
|
Hacking
Web App Attack
|
|
🇨🇦
35.203.30.118
|
|
[Fri Oct 23 08:58:36.693410 2026] [security2:error] [pid 1519425:tid 1519425] [client 35.203.30.118: ...
show more
[Fri Oct 23 08:58:36.693410 2026] [security2:error] [pid 1519425:tid 1519425] [client 35.203.30.118:38720] [client 35.203.30.118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "atshvM-dT7jKIAADDnzucgAAAAQ"]
[Fri Oct 23 08:58:37.598610 2026] [security2:error] [pid 1519354:tid 1519354] [client 35.203.30.118:38774] [client 35.203.30.118] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "C
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
2001:1c00:5:b400:c51f:dbac:3065:ae8
|
|
[Fri Oct 23 06:39:35.745398 2026] [security2:error] [pid 1258985:tid 1258985] [client 2001:1c00:5:b4 ...
show more
[Fri Oct 23 06:39:35.745398 2026] [security2:error] [pid 1258985:tid 1258985] [client 2001:1c00:5:b400:c51f:dbac:3065:ae8:2687] [client 2001:1c00:5:b400:c51f:dbac:3065:ae8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/wpad.dat"] [unique_id "atsBJ-QVqjLKuQqK5HHiPQAAAAM"]
[Fri Oct 23 06:39:43.596140 2026] [security2:error] [pid 1259037:tid 1259037] [client 2001:1c00:5:b400:c51f:dbac:3065:ae8:2793] [client 2001:1c00:5:b400:c51f:dbac:3065:ae8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"]
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
5.188.86.234
|
|
[Fri Oct 23 05:32:44.198381 2026] [security2:error] [pid 1259026:tid 1259026] [client 5.188.86.234:4 ...
show more
[Fri Oct 23 05:32:44.198381 2026] [security2:error] [pid 1259026:tid 1259026] [client 5.188.86.234:44278] [client 5.188.86.234] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "atrxfFgp0W8dP7SfSy-d3QAAABs"]
[Fri Oct 23 05:32:49.645502 2026] [security2:error] [pid 1259037:tid 1259037] [client 5.188.86.234:36344] [client 5.188.86.234] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [m
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
2001:1c00:5:b400:e4e2:11fc:820d:c8b7
|
|
[Fri Oct 23 04:39:59.106967 2026] [security2:error] [pid 1258983:tid 1258983] [client 2001:1c00:5:b4 ...
show more
[Fri Oct 23 04:39:59.106967 2026] [security2:error] [pid 1258983:tid 1258983] [client 2001:1c00:5:b400:e4e2:11fc:820d:c8b7:60470] [client 2001:1c00:5:b400:e4e2:11fc:820d:c8b7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/wpad.dat"] [unique_id "atrlH-CkWh9JlB9nbzANTgAAAAE"]
[Fri Oct 23 04:39:59.367558 2026] [security2:error] [pid 1150990:tid 1150990] [client 2001:1c00:5:b400:e4e2:11fc:820d:c8b7:57475] [client 2001:1c00:5:b400:e4e2:11fc:820d:c8b7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.c
...
show less
|
Hacking
Web App Attack
|