|
🇮🇩
208.76.40.215
|
|
[Thu Oct 29 18:20:48.135119 2026] [security2:error] [pid 634779:tid 634779] [client 208.76.40.215:39 ...
show more
[Thu Oct 29 18:20:48.135119 2026] [security2:error] [pid 634779:tid 634779] [client 208.76.40.215:39894] [client 208.76.40.215] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/.aws/credentials"] [unique_id "auOOgADYI_CJzEfLwh2NxAAAAAE"]
[Thu Oct 29 18:20:49.779143 2026] [security2:error] [pid 634779:tid 634779] [client 208.76.40.215:39894] [client 208.76.40.215] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"]
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
2001:1c00:5:b400:d1b0:fc00:b90:fdfe
|
|
[Thu Oct 29 17:51:45.973090 2026] [security2:error] [pid 583990:tid 583990] [client 2001:1c00:5:b400 ...
show more
[Thu Oct 29 17:51:45.973090 2026] [security2:error] [pid 583990:tid 583990] [client 2001:1c00:5:b400:d1b0:fc00:b90:fdfe:61495] [client 2001:1c00:5:b400:d1b0:fc00:b90:fdfe] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/wpad.dat"] [unique_id "auOHsZvXgF51_pr10PIVCAAAABY"]
[Thu Oct 29 17:51:45.974123 2026] [security2:error] [pid 584001:tid 584001] [client 2001:1c00:5:b400:d1b0:fc00:b90:fdfe:61494] [client 2001:1c00:5:b400:d1b0:fc00:b90:fdfe] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [l
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
2001:1c00:5:b400:51f7:7afa:8f30:aaf3
|
|
[Thu Oct 29 17:10:16.694110 2026] [security2:error] [pid 583990:tid 583990] [client 2001:1c00:5:b400 ...
show more
[Thu Oct 29 17:10:16.694110 2026] [security2:error] [pid 583990:tid 583990] [client 2001:1c00:5:b400:51f7:7afa:8f30:aaf3:8095] [client 2001:1c00:5:b400:51f7:7afa:8f30:aaf3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/wpad.dat"] [unique_id "auN9-JvXgF51_pr10PIT7AAAABY"]
[Thu Oct 29 17:10:16.694271 2026] [security2:error] [pid 583991:tid 583991] [client 2001:1c00:5:b400:51f7:7afa:8f30:aaf3:8096] [client 2001:1c00:5:b400:51f7:7afa:8f30:aaf3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"]
...
show less
|
Hacking
Web App Attack
|
|
🇱🇹
77.90.185.122
|
|
[Thu Oct 29 16:40:26.153421 2026] [security2:error] [pid 530984:tid 530984] [client 77.90.185.122:0] ...
show more
[Thu Oct 29 16:40:26.153421 2026] [security2:error] [pid 530984:tid 530984] [client 77.90.185.122:0] [client 77.90.185.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.env"] [unique_id "auN2-l5R6U4E8nZsLG1ypAAAAAI"]
[Thu Oct 29 16:40:26.842562 2026] [security2:error] [pid 497791:tid 497791] [client 77.90.185.122:0] [client 77.90.185.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "C
...
show less
|
Hacking
Web App Attack
|
|
🇮🇩
103.46.186.148
|
|
[Thu Oct 29 15:50:41.554580 2026] [security2:error] [pid 530984:tid 530984] [client 103.46.186.148:6 ...
show more
[Thu Oct 29 15:50:41.554580 2026] [security2:error] [pid 530984:tid 530984] [client 103.46.186.148:60820] [client 103.46.186.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "auNrUV5R6U4E8nZsLG1yjQAAAAI"]
[Thu Oct 29 15:50:41.895031 2026] [security2:error] [pid 530984:tid 530984] [client 103.46.186.148:60820] [client 103.46.186.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity
...
show less
|
Hacking
Web App Attack
|
|
🇨🇭
185.191.236.38
|
|
[Thu Oct 29 12:41:52.134479 2026] [security2:error] [pid 187942:tid 187942] [client 185.191.236.38:3 ...
show more
[Thu Oct 29 12:41:52.134479 2026] [security2:error] [pid 187942:tid 187942] [client 185.191.236.38:30796] [client 185.191.236.38] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/robots.txt"] [unique_id "auM_EPHbhEsHe2dqFA_mCgAAAAA"]
[Thu Oct 29 12:41:56.272586 2026] [security2:error] [pid 340345:tid 340345] [client 185.191.236.38:30808] [client 185.191.236.38] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [i
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
100.54.194.69
|
|
[Thu Oct 29 13:26:41.561603 2026] [security2:error] [pid 428369:tid 428369] [client 100.54.194.69:54 ...
show more
[Thu Oct 29 13:26:41.561603 2026] [security2:error] [pid 428369:tid 428369] [client 100.54.194.69:54986] [client 100.54.194.69] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "auNJkQ4BFpEgBEypvZIasAAAAAw"], referer: https://fambus.nl/
[Thu Oct 29 13:26:42.477771 2026] [security2:error] [pid 430045:tid 430045] [client 100.54.194.69:54990] [client 100.54.194.69] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Tota
...
show less
|
Hacking
Web App Attack
|
|
🇧🇪
34.52.182.92
|
|
[Thu Oct 29 11:28:51.646621 2026] [security2:error] [pid 311333:tid 311333] [client 34.52.182.92:256 ...
show more
[Thu Oct 29 11:28:51.646621 2026] [security2:error] [pid 311333:tid 311333] [client 34.52.182.92:25628] [client 34.52.182.92] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "auMt8ykQf0vid3JkZfnGfgAAABA"]
[Thu Oct 29 11:28:51.854585 2026] [security2:error] [pid 187942:tid 187942] [client 34.52.182.92:25644] [client 34.52.182.92] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "
...
show less
|
Hacking
Web App Attack
|
|
🇲🇶
188.115.127.167
|
|
[Thu Oct 29 10:10:22.218921 2026] [security2:error] [pid 198794:tid 198794] [client 188.115.127.167: ...
show more
[Thu Oct 29 10:10:22.218921 2026] [security2:error] [pid 198794:tid 198794] [client 188.115.127.167:0] [client 188.115.127.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/blogs/pop-slots"] [unique_id "auMbjiqPzfaZB4m1CPre6wAAAAc"]
[Thu Oct 29 10:10:24.641493 2026] [security2:error] [pid 187944:tid 187944] [client 188.115.127.167:0] [client 188.115.127.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Scor
...
show less
|
Hacking
Web App Attack
|
|
🇫🇷
185.177.72.205
|
|
[Thu Oct 29 09:55:47.426120 2026] [security2:error] [pid 198794:tid 198794] [client 185.177.72.205:4 ...
show more
[Thu Oct 29 09:55:47.426120 2026] [security2:error] [pid 198794:tid 198794] [client 185.177.72.205:43156] [client 185.177.72.205] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "linux.fambus.nl"] [uri "/.git/config"] [unique_id "auMYIyqPzfaZB4m1CPrekgAAAAc"]
[Thu Oct 29 09:55:47.446923 2026] [security2:error] [pid 198794:tid 198794] [client 185.177.72.205:43156] [client 185.177.72.205] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score:
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
91.148.244.131
|
|
[Thu Oct 29 09:17:12.931457 2026] [security2:error] [pid 208979:tid 208979] [client 91.148.244.131:5 ...
show more
[Thu Oct 29 09:17:12.931457 2026] [security2:error] [pid 208979:tid 208979] [client 91.148.244.131:50122] [client 91.148.244.131] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/.git/HEAD"] [unique_id "auMPGHnBucFQ_f-l_qcXmQAAAAQ"]
[Thu Oct 29 09:17:12.936048 2026] [security2:error] [pid 187942:tid 187942] [client 91.148.244.131:50130] [client 91.148.244.131] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [se
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
66.132.172.39
|
|
[Thu Oct 29 09:03:07.339682 2026] [security2:error] [pid 214040:tid 214040] [client 66.132.172.39:55 ...
show more
[Thu Oct 29 09:03:07.339682 2026] [security2:error] [pid 214040:tid 214040] [client 66.132.172.39:55228] [client 66.132.172.39] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "auMLy1Ebrym3QTogrTXWxwAAAAo"]
[Thu Oct 29 09:03:10.323289 2026] [security2:error] [pid 187942:tid 187942] [client 66.132.172.39:55650] [client 66.132.172.39] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [m
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
199.165.159.137
|
|
[Thu Oct 29 07:57:01.383336 2026] [security2:error] [pid 187944:tid 187944] [client 199.165.159.137: ...
show more
[Thu Oct 29 07:57:01.383336 2026] [security2:error] [pid 187944:tid 187944] [client 199.165.159.137:29858] [client 199.165.159.137] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "auL8TdSg7nUxJCGV5kcX4QAAAAM"]
[Thu Oct 29 08:28:33.743329 2026] [security2:error] [pid 4064238:tid 4064238] [client 199.165.159.137:23940] [client 199.165.159.137] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "9
...
show less
|
Hacking
Web App Attack
|
|
🇵🇱
45.138.12.188
|
|
[Thu Oct 29 07:05:13.353327 2026] [security2:error] [pid 4064241:tid 4064241] [client 45.138.12.188: ...
show more
[Thu Oct 29 07:05:13.353327 2026] [security2:error] [pid 4064241:tid 4064241] [client 45.138.12.188:0] [client 45.138.12.188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.fambus.nl"] [uri "/"] [unique_id "auLwKZeurb8Y9aTbvr2QMgAAABU"]
[Thu Oct 29 07:38:45.689434 2026] [security2:error] [pid 187942:tid 187942] [client 45.138.12.188:35580] [client 45.138.12.188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRI
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
2001:1c00:5:b400:51f7:7afa:8f30:aaf3
|
|
[Thu Oct 29 07:40:13.007913 2026] [security2:error] [pid 167884:tid 167884] [client 2001:1c00:5:b400 ...
show more
[Thu Oct 29 07:40:13.007913 2026] [security2:error] [pid 167884:tid 167884] [client 2001:1c00:5:b400:51f7:7afa:8f30:aaf3:2372] [client 2001:1c00:5:b400:51f7:7afa:8f30:aaf3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/wpad.dat"] [unique_id "auL4XeLt2DjYc1Gj06lGHwAAAAU"]
[Thu Oct 29 07:40:16.962857 2026] [security2:error] [pid 4064238:tid 4064238] [client 2001:1c00:5:b400:51f7:7afa:8f30:aaf3:7348] [client 2001:1c00:5:b400:51f7:7afa:8f30:aaf3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"
...
show less
|
Hacking
Web App Attack
|
|
🇦🇲
176.32.193.16
|
|
[Thu Oct 29 06:03:35.295605 2026] [security2:error] [pid 4064237:tid 4064237] [client 176.32.193.16: ...
show more
[Thu Oct 29 06:03:35.295605 2026] [security2:error] [pid 4064237:tid 4064237] [client 176.32.193.16:35326] [client 176.32.193.16] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/aaa9"] [unique_id "auLht6D4aY-bWJjPreSCAgAAABE"]
[Thu Oct 29 06:03:35.770068 2026] [security2:error] [pid 4064241:tid 4064241] [client 176.32.193.16:35334] [client 176.32.193.16] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id
...
show less
|
Hacking
Web App Attack
|
|
🇧🇷
35.198.10.30
|
|
[Thu Oct 29 05:27:46.037082 2026] [security2:error] [pid 4064235:tid 4064235] [client 35.198.10.30:0 ...
show more
[Thu Oct 29 05:27:46.037082 2026] [security2:error] [pid 4064235:tid 4064235] [client 35.198.10.30:0] [client 35.198.10.30] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.fambus.nl"] [uri "/.git/config"] [unique_id "auLZUnnYM6j2KucOAuPuyQAAAA8"]
[Thu Oct 29 05:27:47.247538 2026] [security2:error] [pid 4064236:tid 4064236] [client 35.198.10.30:0] [client 35.198.10.30] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity
...
show less
|
Hacking
Web App Attack
|
|
🇵🇱
194.180.49.41
|
|
[Thu Oct 29 05:17:01.051924 2026] [security2:error] [pid 4064238:tid 4064238] [client 194.180.49.41: ...
show more
[Thu Oct 29 05:17:01.051924 2026] [security2:error] [pid 4064238:tid 4064238] [client 194.180.49.41:46514] [client 194.180.49.41] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "auLWze6Xcdua1NE29_2yGAAAABI"]
[Thu Oct 29 05:17:01.246938 2026] [security2:error] [pid 4064235:tid 4064235] [client 194.180.49.41:46526] [client 194.180.49.41] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"
...
show less
|
Hacking
Web App Attack
|
|
🇶🇦
34.18.17.73
|
|
[Thu Oct 29 03:54:34.429675 2026] [security2:error] [pid 4064236:tid 4064236] [client 34.18.17.73:56 ...
show more
[Thu Oct 29 03:54:34.429675 2026] [security2:error] [pid 4064236:tid 4064236] [client 34.18.17.73:56914] [client 34.18.17.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.fambus.nl"] [uri "/"] [unique_id "auLDetSg9zYt4Po4kXL_qwAAABA"]
[Thu Oct 29 03:54:34.540993 2026] [security2:error] [pid 4064236:tid 4064236] [client 34.18.17.73:56914] [client 34.18.17.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRIT
...
show less
|
Hacking
Web App Attack
|
|
🇵🇱
34.158.224.25
|
|
[Thu Oct 29 03:53:06.390972 2026] [security2:error] [pid 4064238:tid 4064238] [client 34.158.224.25: ...
show more
[Thu Oct 29 03:53:06.390972 2026] [security2:error] [pid 4064238:tid 4064238] [client 34.158.224.25:60134] [client 34.158.224.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "auLDIu6Xcdua1NE29_2vzAAAABI"]
[Thu Oct 29 03:53:06.445628 2026] [security2:error] [pid 4064238:tid 4064238] [client 34.158.224.25:60134] [client 34.158.224.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "C
...
show less
|
Hacking
Web App Attack
|
|
🇵🇱
45.138.12.6
|
|
[Thu Oct 29 02:41:14.808211 2026] [security2:error] [pid 3933803:tid 3933803] [client 45.138.12.6:0] ...
show more
[Thu Oct 29 02:41:14.808211 2026] [security2:error] [pid 3933803:tid 3933803] [client 45.138.12.6:0] [client 45.138.12.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.fambus.nl"] [uri "/.git/config"] [unique_id "auKySqlcLaM1ynZURuMAigAAAAY"]
[Thu Oct 29 02:41:14.985761 2026] [security2:error] [pid 3919261:tid 3919261] [client 45.138.12.6:0] [client 45.138.12.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "C
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
85.239.245.1
|
|
[Thu Oct 29 01:23:57.501517 2026] [security2:error] [pid 3933804:tid 3933804] [client 85.239.245.1:5 ...
show more
[Thu Oct 29 01:23:57.501517 2026] [security2:error] [pid 3933804:tid 3933804] [client 85.239.245.1:57483] [client 85.239.245.1] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/.env"] [unique_id "auKgLXXnCbQ1WYMJd6gFWgAAAAc"]
[Thu Oct 29 01:23:57.551950 2026] [security2:error] [pid 3921336:tid 3921336] [client 85.239.245.1:57605] [client 85.239.245.1] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "C
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
66.132.172.35
|
|
[Wed Oct 28 23:47:32.369294 2026] [security2:error] [pid 3753561:tid 3753561] [client 66.132.172.35: ...
show more
[Wed Oct 28 23:47:32.369294 2026] [security2:error] [pid 3753561:tid 3753561] [client 66.132.172.35:29208] [client 66.132.172.35] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "auKJlC5geCP1obZtySqB5QAAAAA"]
[Wed Oct 28 23:47:40.881520 2026] [security2:error] [pid 3752239:tid 3752239] [client 66.132.172.35:15262] [client 66.132.172.35] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"
...
show less
|
Hacking
Web App Attack
|
|
🇫🇷
185.177.72.9
|
|
[Wed Oct 28 21:34:24.897360 2026] [security2:error] [pid 3691297:tid 3691297] [client 185.177.72.9:2 ...
show more
[Wed Oct 28 21:34:24.897360 2026] [security2:error] [pid 3691297:tid 3691297] [client 185.177.72.9:21668] [client 185.177.72.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/.git/config"] [unique_id "auJqYGP2BjsqpCmt8oP2NAAAABI"]
[Wed Oct 28 21:34:24.923805 2026] [security2:error] [pid 3691297:tid 3691297] [client 185.177.72.9:21668] [client 185.177.72.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [seve
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
34.12.190.141
|
|
[Wed Oct 28 21:03:43.140614 2026] [security2:error] [pid 3722011:tid 3722011] [client 34.12.190.141: ...
show more
[Wed Oct 28 21:03:43.140614 2026] [security2:error] [pid 3722011:tid 3722011] [client 34.12.190.141:0] [client 34.12.190.141] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/ads.txt"] [unique_id "auJjL7DYPEJMEwQdI8knlQAAAAE"]
[Wed Oct 28 21:03:43.646845 2026] [security2:error] [pid 3752239:tid 3752239] [client 34.12.190.141:0] [client 34.12.190.141] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [seve
...
show less
|
Hacking
Web App Attack
|