|
🇹🇼
104.199.238.252
|
|
[Mon Nov 02 13:16:03.732435 2026] [security2:error] [pid 917396:tid 917396] [client 104.199.238.252: ...
show more
[Mon Nov 02 13:16:03.732435 2026] [security2:error] [pid 917396:tid 917396] [client 104.199.238.252:53754] [client 104.199.238.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "tipmap.fambus.nl"] [uri "/Dockerfile"] [unique_id "auiNE-nCo_qxoUTwWYg7zQAAAAs"]
[Mon Nov 02 13:16:03.929449 2026] [security2:error] [pid 924798:tid 924798] [client 104.199.238.252:53770] [client 104.199.238.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Sco
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
104.196.217.20
|
|
[Mon Nov 02 12:55:10.099077 2026] [security2:error] [pid 912182:tid 912182] [client 104.196.217.20:0 ...
show more
[Mon Nov 02 12:55:10.099077 2026] [security2:error] [pid 912182:tid 912182] [client 104.196.217.20:0] [client 104.196.217.20] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.fambus.nl"] [uri "/laravel../.env"] [unique_id "auiILn5pMj4j9CUuwurV5QAAAAY"]
[Mon Nov 02 12:55:10.100426 2026] [security2:error] [pid 917396:tid 917396] [client 104.196.217.20:0] [client 104.196.217.20] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [s
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
66.132.195.125
|
|
[Mon Nov 02 12:51:28.155962 2026] [security2:error] [pid 896953:tid 896953] [client 66.132.195.125:3 ...
show more
[Mon Nov 02 12:51:28.155962 2026] [security2:error] [pid 896953:tid 896953] [client 66.132.195.125:31188] [client 66.132.195.125] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "auiHUPaP-VZ5zbtjN7Jp7AAAAAg"]
[Mon Nov 02 12:51:33.787006 2026] [security2:error] [pid 917393:tid 917393] [client 66.132.195.125:8462] [client 66.132.195.125] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"]
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
47.251.42.6
|
|
[Mon Nov 02 11:36:37.359598 2026] [security2:error] [pid 853814:tid 853814] [client 47.251.42.6:5894 ...
show more
[Mon Nov 02 11:36:37.359598 2026] [security2:error] [pid 853814:tid 853814] [client 47.251.42.6:58948] [client 47.251.42.6] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "auh1xWmprtpO8IVKTLhZsAAAAAY"]
[Mon Nov 02 11:36:37.522098 2026] [security2:error] [pid 853814:tid 853814] [client 47.251.42.6:58948] [client 47.251.42.6] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host
...
show less
|
Hacking
Web App Attack
|
|
🇵🇱
45.138.12.6
|
|
[Mon Nov 02 11:07:48.991855 2026] [security2:error] [pid 831718:tid 831718] [client 45.138.12.6:0] [ ...
show more
[Mon Nov 02 11:07:48.991855 2026] [security2:error] [pid 831718:tid 831718] [client 45.138.12.6:0] [client 45.138.12.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.git/config"] [unique_id "auhvBLlgBv-jIV-YfcRAyQAAAAg"]
[Mon Nov 02 11:07:49.199307 2026] [security2:error] [pid 831715:tid 831715] [client 45.138.12.6:0] [client 45.138.12.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "C
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
104.198.245.106
|
|
[Mon Nov 02 10:22:47.152923 2026] [security2:error] [pid 812756:tid 812756] [client 104.198.245.106: ...
show more
[Mon Nov 02 10:22:47.152923 2026] [security2:error] [pid 812756:tid 812756] [client 104.198.245.106:39196] [client 104.198.245.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "guacamole.fambus.nl"] [uri "/.env.supabase"] [unique_id "auhkd3buKma_-pIcAFqbKAAAAAE"]
[Mon Nov 02 10:22:47.173113 2026] [security2:error] [pid 770417:tid 770417] [client 104.198.245.106:44082] [client 104.198.245.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Tot
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
136.111.201.139
|
|
[Mon Nov 02 10:19:32.868363 2026] [security2:error] [pid 739302:tid 739302] [client 136.111.201.139: ...
show more
[Mon Nov 02 10:19:32.868363 2026] [security2:error] [pid 739302:tid 739302] [client 136.111.201.139:58406] [client 136.111.201.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "xmltv.fambus.nl"] [uri "/..../..../..../..../.env"] [unique_id "auhjtKwZ-yBVlctx9gci4AAAAAk"]
[Mon Nov 02 10:19:32.885217 2026] [security2:error] [pid 765988:tid 765988] [client 136.111.201.139:58422] [client 136.111.201.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceed
...
show less
|
Hacking
Web App Attack
|
|
🇩🇪
35.198.144.98
|
|
[Mon Nov 02 10:18:56.310115 2026] [security2:error] [pid 739294:tid 739294] [client 35.198.144.98:46 ...
show more
[Mon Nov 02 10:18:56.310115 2026] [security2:error] [pid 739294:tid 739294] [client 35.198.144.98:46122] [client 35.198.144.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "auhjkCJy4Nuhk3WqjAnmywAAAAQ"]
[Mon Nov 02 10:18:56.334871 2026] [security2:error] [pid 739294:tid 739294] [client 35.198.144.98:46122] [client 35.198.144.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITI
...
show less
|
Hacking
Web App Attack
|
|
🇭🇰
34.150.28.102
|
|
[Mon Nov 02 09:20:04.131674 2026] [security2:error] [pid 728624:tid 728624] [client 34.150.28.102:0] ...
show more
[Mon Nov 02 09:20:04.131674 2026] [security2:error] [pid 728624:tid 728624] [client 34.150.28.102:0] [client 34.150.28.102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.git/config"] [unique_id "auhVxOJy9QYZWnrcesveDwAAABE"]
[Mon Nov 02 09:20:06.038551 2026] [security2:error] [pid 739307:tid 739307] [client 34.150.28.102:0] [client 34.150.28.102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [seve
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
35.243.179.90
|
|
[Mon Nov 02 09:15:02.618022 2026] [security2:error] [pid 739306:tid 739306] [client 35.243.179.90:0] ...
show more
[Mon Nov 02 09:15:02.618022 2026] [security2:error] [pid 739306:tid 739306] [client 35.243.179.90:0] [client 35.243.179.90] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.git/config"] [unique_id "auhUlm9TjFSo304s1FMnPQAAAA4"]
[Mon Nov 02 09:15:03.606425 2026] [security2:error] [pid 739302:tid 739302] [client 35.243.179.90:0] [client 35.243.179.90] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [seve
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
8.234.185.181
|
|
[Mon Nov 02 08:37:13.404898 2026] [security2:error] [pid 728641:tid 728641] [client 8.234.185.181:34 ...
show more
[Mon Nov 02 08:37:13.404898 2026] [security2:error] [pid 728641:tid 728641] [client 8.234.185.181:34160] [client 8.234.185.181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ziggo.fambus.nl"] [uri "/.env.shared"] [unique_id "auhLuf6Ix10UanOc-cpsEwAAABk"]
[Mon Nov 02 08:37:13.405221 2026] [security2:error] [pid 728626:tid 728626] [client 8.234.185.181:34176] [client 8.234.185.181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"]
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
65.49.1.122
|
|
[Mon Nov 02 07:51:21.463271 2026] [security2:error] [pid 646214:tid 646214] [client 65.49.1.122:5277 ...
show more
[Mon Nov 02 07:51:21.463271 2026] [security2:error] [pid 646214:tid 646214] [client 65.49.1.122:52770] [client 65.49.1.122] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "auhA-bWJAlXWM2YCZwRMLwAAACA"]
[Mon Nov 02 08:22:08.969861 2026] [security2:error] [pid 716256:tid 716256] [client 65.49.1.122:58346] [client 65.49.1.122] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
185.218.86.14
|
|
[Mon Nov 02 08:22:22.575584 2026] [security2:error] [pid 716264:tid 716264] [client 185.218.86.14:0] ...
show more
[Mon Nov 02 08:22:22.575584 2026] [security2:error] [pid 716264:tid 716264] [client 185.218.86.14:0] [client 185.218.86.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.env.bak"] [unique_id "auhIPo10UQ41PuYCN1Ma1QAAAAw"]
[Mon Nov 02 08:22:22.614366 2026] [security2:error] [pid 676570:tid 676570] [client 185.218.86.14:0] [client 185.218.86.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severi
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
2001:1c00:5:b400:18f:f519:656c:dcfd
|
|
[Mon Nov 02 08:06:32.646978 2026] [security2:error] [pid 672342:tid 672342] [client 2001:1c00:5:b400 ...
show more
[Mon Nov 02 08:06:32.646978 2026] [security2:error] [pid 672342:tid 672342] [client 2001:1c00:5:b400:18f:f519:656c:dcfd:8967] [client 2001:1c00:5:b400:18f:f519:656c:dcfd] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/wpad.dat"] [unique_id "auhEiMygEz_lR-GZn6POBAAAAAU"]
[Mon Nov 02 08:06:32.647116 2026] [security2:error] [pid 672081:tid 672081] [client 2001:1c00:5:b400:18f:f519:656c:dcfd:8968] [client 2001:1c00:5:b400:18f:f519:656c:dcfd] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [lin
...
show less
|
Hacking
Web App Attack
|
|
🇨🇦
34.19.138.230
|
|
[Mon Nov 02 08:05:29.453462 2026] [security2:error] [pid 465159:tid 465159] [client 34.19.138.230:0] ...
show more
[Mon Nov 02 08:05:29.453462 2026] [security2:error] [pid 465159:tid 465159] [client 34.19.138.230:0] [client 34.19.138.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.git/config"] [unique_id "auhESWk_geopPlo3qsAFlwAAAAI"]
[Mon Nov 02 08:05:30.765195 2026] [security2:error] [pid 643147:tid 643147] [client 34.19.138.230:0] [client 34.19.138.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [seve
...
show less
|
Hacking
Web App Attack
|
|
🇦🇺
54.79.174.51
|
|
[Mon Nov 02 07:03:41.705200 2026] [security2:error] [pid 646227:tid 646227] [client 54.79.174.51:0] ...
show more
[Mon Nov 02 07:03:41.705200 2026] [security2:error] [pid 646227:tid 646227] [client 54.79.174.51:0] [client 54.79.174.51] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.git/config"] [unique_id "aug1zdv6zHpetV03cRRtZAAAACY"]
[Mon Nov 02 07:03:44.287574 2026] [security2:error] [pid 645776:tid 645776] [client 54.79.174.51:0] [client 54.79.174.51] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity
...
show less
|
Hacking
Web App Attack
|
|
🇲🇾
121.121.152.6
|
|
[Mon Nov 02 06:38:35.037511 2026] [security2:error] [pid 360238:tid 360238] [client 121.121.152.6:33 ...
show more
[Mon Nov 02 06:38:35.037511 2026] [security2:error] [pid 360238:tid 360238] [client 121.121.152.6:33440] [client 121.121.152.6] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "augv63JKzBDuPi3pT0KEggAAAAA"]
[Mon Nov 02 06:38:35.320819 2026] [security2:error] [pid 360238:tid 360238] [client 121.121.152.6:33440] [client 121.121.152.6] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [m
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
2001:1c00:5:b400:d436:6485:69d:42c4
|
|
[Mon Nov 02 06:27:21.228261 2026] [security2:error] [pid 358436:tid 358436] [client 2001:1c00:5:b400 ...
show more
[Mon Nov 02 06:27:21.228261 2026] [security2:error] [pid 358436:tid 358436] [client 2001:1c00:5:b400:d436:6485:69d:42c4:58569] [client 2001:1c00:5:b400:d436:6485:69d:42c4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/wpad.dat"] [unique_id "augtSZml7tL9YXEh5DNrDgAAAAY"]
[Mon Nov 02 06:27:38.047970 2026] [security2:error] [pid 241209:tid 241209] [client 2001:1c00:5:b400:d436:6485:69d:42c4:58592] [client 2001:1c00:5:b400:d436:6485:69d:42c4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [l
...
show less
|
Hacking
Web App Attack
|
|
🇫🇷
185.177.72.9
|
|
[Mon Nov 02 03:53:36.068512 2026] [security2:error] [pid 358434:tid 358434] [client 185.177.72.9:125 ...
show more
[Mon Nov 02 03:53:36.068512 2026] [security2:error] [pid 358434:tid 358434] [client 185.177.72.9:12582] [client 185.177.72.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ziggo.fambus.nl"] [uri "/.git/config"] [unique_id "augJQA3pBAILi3oPiybsXwAAAAI"]
[Mon Nov 02 03:53:36.094105 2026] [security2:error] [pid 358434:tid 358434] [client 185.177.72.9:12582] [client 185.177.72.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [se
...
show less
|
Hacking
Web App Attack
|
|
🇻🇳
171.237.170.148
|
|
[Mon Nov 02 03:04:21.223360 2026] [security2:error] [pid 273398:tid 273398] [client 171.237.170.148: ...
show more
[Mon Nov 02 03:04:21.223360 2026] [security2:error] [pid 273398:tid 273398] [client 171.237.170.148:35722] [client 171.237.170.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "auf9teYen_gWc5dajvM7yQAAAAc"]
[Mon Nov 02 03:04:23.114032 2026] [security2:error] [pid 273398:tid 273398] [client 171.237.170.148:35722] [client 171.237.170.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [sever
...
show less
|
Hacking
Web App Attack
|
|
🇫🇷
185.177.72.13
|
|
[Mon Nov 02 02:55:09.731662 2026] [security2:error] [pid 273398:tid 273398] [client 185.177.72.13:41 ...
show more
[Mon Nov 02 02:55:09.731662 2026] [security2:error] [pid 273398:tid 273398] [client 185.177.72.13:41776] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "xmltv.fambus.nl"] [uri "/.git/config"] [unique_id "auf7jeYen_gWc5dajvM7uQAAAAc"]
[Mon Nov 02 02:55:09.759194 2026] [security2:error] [pid 273398:tid 273398] [client 185.177.72.13:41776] [client 185.177.72.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"]
...
show less
|
Hacking
Web App Attack
|
|
🇧🇪
35.210.48.46
|
|
[Mon Nov 02 02:18:33.435368 2026] [security2:error] [pid 263472:tid 263472] [client 35.210.48.46:477 ...
show more
[Mon Nov 02 02:18:33.435368 2026] [security2:error] [pid 263472:tid 263472] [client 35.210.48.46:47704] [client 35.210.48.46] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "aufy-ZAAvw1f-jPFz6s-LAAAAAo"]
[Mon Nov 02 02:18:33.644417 2026] [security2:error] [pid 241210:tid 241210] [client 35.210.48.46:47716] [client 35.210.48.46] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
195.178.110.101
|
|
[Sun Nov 01 20:43:23.598477 2026] [security2:error] [pid 70526:tid 70526] [client 195.178.110.101:0] ...
show more
[Sun Nov 01 20:43:23.598477 2026] [security2:error] [pid 70526:tid 70526] [client 195.178.110.101:0] [client 195.178.110.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.fambus.nl"] [uri "/wp-json/batch/v1/..;/batch/v1"] [unique_id "auekazFUUOfUZDq-ZEBYDQAAAAw"]
[Sun Nov 01 20:43:24.537894 2026] [security2:error] [pid 70526:tid 70526] [client 195.178.110.101:0] [client 195.178.110.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total
...
show less
|
Hacking
Web App Attack
|
|
🇫🇷
62.210.142.39
|
|
[Sun Nov 01 14:46:56.106915 2026] [security2:error] [pid 3965453:tid 3965453] [client 62.210.142.39: ...
show more
[Sun Nov 01 14:46:56.106915 2026] [security2:error] [pid 3965453:tid 3965453] [client 62.210.142.39:39002] [client 62.210.142.39] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "audQ4PRe5s2Q19oJBl3xZAAAABc"]
[Sun Nov 01 14:46:56.139953 2026] [security2:error] [pid 3965453:tid 3965453] [client 62.210.142.39:39002] [client 62.210.142.39] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"
...
show less
|
Hacking
Web App Attack
|
|
🇩🇪
139.162.170.116
|
|
[Sun Nov 01 14:22:12.534801 2026] [security2:error] [pid 3965443:tid 3965443] [client 139.162.170.11 ...
show more
[Sun Nov 01 14:22:12.534801 2026] [security2:error] [pid 3965443:tid 3965443] [client 139.162.170.116:34300] [client 139.162.170.116] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "audLFMcX_Q-idg3FKn-XkAAAAAg"]
[Sun Nov 01 14:31:59.998615 2026] [security2:error] [pid 3926512:tid 3926512] [client 139.162.170.116:54016] [client 139.162.170.116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"]
...
show less
|
Hacking
Web App Attack
|