|
🇫🇷
109.205.176.10
|
|
[Mon Oct 12 10:38:17.263234 2026] [security2:error] [pid 1403019:tid 1403019] [client 109.205.176.10 ...
show more
[Mon Oct 12 10:38:17.263234 2026] [security2:error] [pid 1403019:tid 1403019] [client 109.205.176.10:35070] [client 109.205.176.10] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "asy4mTS5wtD_EHZJsuf4eQAAABE"]
[Mon Oct 12 10:38:17.290624 2026] [security2:error] [pid 1403019:tid 1403019] [client 109.205.176.10:35070] [client 109.205.176.10] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920
...
show less
|
Hacking
Web App Attack
|
|
🇨🇦
34.95.26.109
|
|
[Mon Oct 12 10:13:04.608987 2026] [security2:error] [pid 1323498:tid 1323498] [client 34.95.26.109:5 ...
show more
[Mon Oct 12 10:13:04.608987 2026] [security2:error] [pid 1323498:tid 1323498] [client 34.95.26.109:51468] [client 34.95.26.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "asyysFi8XTvmiDrr6iBgnwAAAB0"]
[Mon Oct 12 10:13:04.642133 2026] [security2:error] [pid 1323502:tid 1323502] [client 34.95.26.109:51490] [client 34.95.26.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRIT
...
show less
|
Hacking
Web App Attack
|
|
🇯🇵
43.167.198.92
|
|
[Mon Oct 12 08:29:15.011163 2026] [security2:error] [pid 1323498:tid 1323498] [client 43.167.198.92: ...
show more
[Mon Oct 12 08:29:15.011163 2026] [security2:error] [pid 1323498:tid 1323498] [client 43.167.198.92:51516] [client 43.167.198.92] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/hello.world"] [unique_id "asyaW1i8XTvmiDrr6iBfPQAAAB0"]
[Mon Oct 12 08:29:15.015319 2026] [security2:error] [pid 1323498:tid 1323498] [client 43.167.198.92:51516] [client 43.167.198.92] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
184.105.139.68
|
|
[Mon Oct 12 07:54:31.389783 2026] [security2:error] [pid 1298485:tid 1298485] [client 184.105.139.68 ...
show more
[Mon Oct 12 07:54:31.389783 2026] [security2:error] [pid 1298485:tid 1298485] [client 184.105.139.68:37430] [client 184.105.139.68] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "asySN0nsy3iosb_GMZzKkAAAAAo"]
[Mon Oct 12 08:12:33.202195 2026] [security2:error] [pid 1298549:tid 1298549] [client 184.105.139.68:7760] [client 184.105.139.68] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "9203
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
34.12.225.42
|
|
[Mon Oct 12 08:20:18.810435 2026] [security2:error] [pid 1298521:tid 1298521] [client 34.12.225.42:4 ...
show more
[Mon Oct 12 08:20:18.810435 2026] [security2:error] [pid 1298521:tid 1298521] [client 34.12.225.42:45746] [client 34.12.225.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "asyYQiYvmlClIXBWyhNmswAAACw"]
[Mon Oct 12 08:20:18.854150 2026] [security2:error] [pid 1298537:tid 1298537] [client 34.12.225.42:45760] [client 34.12.225.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRI
...
show less
|
Hacking
Web App Attack
|
|
🇯🇵
34.85.42.232
|
|
[Mon Oct 12 07:44:10.002724 2026] [security2:error] [pid 1000774:tid 1000774] [client 34.85.42.232:0 ...
show more
[Mon Oct 12 07:44:10.002724 2026] [security2:error] [pid 1000774:tid 1000774] [client 34.85.42.232:0] [client 34.85.42.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asyPyXKjo9eh52uFQ0T5yAAAAAk"]
[Mon Oct 12 07:44:13.569735 2026] [security2:error] [pid 1298488:tid 1298488] [client 34.85.42.232:0] [client 34.85.42.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Ex
...
show less
|
Hacking
Web App Attack
|
|
🇵🇰
165.99.207.153
|
|
[Mon Oct 12 07:16:48.052495 2026] [security2:error] [pid 1085211:tid 1085211] [client 165.99.207.153 ...
show more
[Mon Oct 12 07:16:48.052495 2026] [security2:error] [pid 1085211:tid 1085211] [client 165.99.207.153:40588] [client 165.99.207.153] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/hello.world"] [unique_id "asyJYNuXKnTp-uO8mvPzPAAAAAc"]
[Mon Oct 12 07:16:48.061796 2026] [security2:error] [pid 1085211:tid 1085211] [client 165.99.207.153:40588] [client 165.99.207.153] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUA
...
show less
|
Hacking
Web App Attack
|
|
🇫🇷
217.76.52.171
|
|
[Mon Oct 12 07:03:28.178844 2026] [security2:error] [pid 1085209:tid 1085209] [client 217.76.52.171: ...
show more
[Mon Oct 12 07:03:28.178844 2026] [security2:error] [pid 1085209:tid 1085209] [client 217.76.52.171:51426] [client 217.76.52.171] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "asyGQP-Bw8fWGltGSJK1kwAAAAM"]
[Mon Oct 12 07:03:28.243135 2026] [security2:error] [pid 1085209:tid 1085209] [client 217.76.52.171:51426] [client 217.76.52.171] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
35.243.198.227
|
|
[Mon Oct 12 06:27:41.535792 2026] [security2:error] [pid 1085211:tid 1085211] [client 35.243.198.227 ...
show more
[Mon Oct 12 06:27:41.535792 2026] [security2:error] [pid 1085211:tid 1085211] [client 35.243.198.227:52430] [client 35.243.198.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "asx93duXKnTp-uO8mvPxzAAAAAc"]
[Mon Oct 12 06:27:41.830111 2026] [security2:error] [pid 1096086:tid 1096086] [client 35.243.198.227:52474] [client 35.243.198.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [sever
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
45.148.10.5
|
|
[Mon Oct 12 04:07:25.067059 2026] [security2:error] [pid 1000789:tid 1000789] [client 45.148.10.5:21 ...
show more
[Mon Oct 12 04:07:25.067059 2026] [security2:error] [pid 1000789:tid 1000789] [client 45.148.10.5:21866] [client 45.148.10.5] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "asxc_XLFv4UQc_bxXMEI8gAAABg"]
[Mon Oct 12 04:09:12.889056 2026] [security2:error] [pid 1000616:tid 1000616] [client 45.148.10.5:26208] [client 45.148.10.5] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "
...
show less
|
Hacking
Web App Attack
|
|
🇧🇪
34.52.150.124
|
|
[Mon Oct 12 00:33:21.590106 2026] [security2:error] [pid 826736:tid 826736] [client 34.52.150.124:42 ...
show more
[Mon Oct 12 00:33:21.590106 2026] [security2:error] [pid 826736:tid 826736] [client 34.52.150.124:42146] [client 34.52.150.124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/.env"] [unique_id "aswq0e34U8sknfwahF84eQAAAAs"]
[Mon Oct 12 00:33:21.616158 2026] [security2:error] [pid 826736:tid 826736] [client 34.52.150.124:42146] [client 34.52.150.124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "C
...
show less
|
Hacking
Web App Attack
|
|
🇬🇧
185.91.69.128
|
|
[Mon Oct 12 00:32:07.416926 2026] [security2:error] [pid 826815:tid 826815] [client 185.91.69.128:53 ...
show more
[Mon Oct 12 00:32:07.416926 2026] [security2:error] [pid 826815:tid 826815] [client 185.91.69.128:53982] [client 185.91.69.128] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "aswqhwuANBVw1Sw-ADp7OAAAAAA"]
[Mon Oct 12 00:32:12.481536 2026] [security2:error] [pid 826738:tid 826738] [client 185.91.69.128:41594] [client 185.91.69.128] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [m
...
show less
|
Hacking
Web App Attack
|
|
🇧🇪
34.79.242.244
|
|
[Sun Oct 11 23:04:37.193243 2026] [security2:error] [pid 771014:tid 771014] [client 34.79.242.244:0] ...
show more
[Sun Oct 11 23:04:37.193243 2026] [security2:error] [pid 771014:tid 771014] [client 34.79.242.244:0] [client 34.79.242.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/ads.txt"] [unique_id "aswWBcM162-a-igTqy6tdAAAAAg"]
[Sun Oct 11 23:04:37.255639 2026] [security2:error] [pid 771014:tid 771014] [client 34.79.242.244:0] [client 34.79.242.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severi
...
show less
|
Hacking
Web App Attack
|
|
🇩🇪
134.122.66.227
|
|
[Sun Oct 11 22:42:19.801832 2026] [security2:error] [pid 771013:tid 771013] [client 134.122.66.227:4 ...
show more
[Sun Oct 11 22:42:19.801832 2026] [security2:error] [pid 771013:tid 771013] [client 134.122.66.227:43838] [client 134.122.66.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/%2eenv.prod"] [unique_id "aswQy54i_xFhCUnsleI_QwAAAAE"], referer: http://fambus.nl/%25%32%65%65%6e%76.%70%72%6f%64?v=gKqIW
[Sun Oct 11 22:42:20.290758 2026] [security2:error] [pid 771013:tid 771013] [client 134.122.66.227:43838] [client 134.122.66.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
45.148.10.238
|
|
[Sun Oct 11 21:58:17.580677 2026] [security2:error] [pid 739975:tid 739975] [client 45.148.10.238:33 ...
show more
[Sun Oct 11 21:58:17.580677 2026] [security2:error] [pid 739975:tid 739975] [client 45.148.10.238:33158] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/crm/.env"] [unique_id "aswGedJQBzRzi5Cm6daYFgAAAAI"], referer: http://mail.fambus.nl/crm/.env
[Sun Oct 11 21:58:22.281953 2026] [security2:error] [pid 739538:tid 739538] [client 45.148.10.238:57374] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly S
...
show less
|
Hacking
Web App Attack
|
|
🇦🇺
170.64.156.116
|
|
[Sun Oct 11 19:36:08.547493 2026] [security2:error] [pid 623744:tid 623744] [client 170.64.156.116:0 ...
show more
[Sun Oct 11 19:36:08.547493 2026] [security2:error] [pid 623744:tid 623744] [client 170.64.156.116:0] [client 170.64.156.116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.git/config"] [unique_id "asvlKPqsguNQq841SxX1-QAAACs"]
[Sun Oct 11 19:36:09.819688 2026] [security2:error] [pid 623732:tid 623732] [client 170.64.156.116:0] [client 170.64.156.116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [
...
show less
|
Hacking
Web App Attack
|
|
🇳🇴
87.120.104.29
|
|
[Sun Oct 11 19:12:58.091602 2026] [security2:error] [pid 568499:tid 568499] [client 87.120.104.29:55 ...
show more
[Sun Oct 11 19:12:58.091602 2026] [security2:error] [pid 568499:tid 568499] [client 87.120.104.29:55758] [client 87.120.104.29] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/.git/HEAD"] [unique_id "asvfunMfvMcMvqYRDMZZrQAAABA"]
[Sun Oct 11 19:12:58.091668 2026] [security2:error] [pid 600183:tid 600183] [client 87.120.104.29:55764] [client 87.120.104.29] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "92
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
66.132.195.125
|
|
[Sun Oct 11 17:54:08.846453 2026] [security2:error] [pid 568027:tid 568027] [client 66.132.195.125:2 ...
show more
[Sun Oct 11 17:54:08.846453 2026] [security2:error] [pid 568027:tid 568027] [client 66.132.195.125:27356] [client 66.132.195.125] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "asvNQOzRBChS5DLBk5P5vAAAAAs"]
[Sun Oct 11 17:54:09.908034 2026] [security2:error] [pid 567734:tid 567734] [client 66.132.195.125:48182] [client 66.132.195.125] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"
...
show less
|
Hacking
Web App Attack
|
|
🇧🇪
34.79.242.244
|
|
[Sun Oct 11 16:22:22.764900 2026] [security2:error] [pid 480812:tid 480812] [client 34.79.242.244:0] ...
show more
[Sun Oct 11 16:22:22.764900 2026] [security2:error] [pid 480812:tid 480812] [client 34.79.242.244:0] [client 34.79.242.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/ads.txt"] [unique_id "asu3vmPj3gEMmI5QoXi45wAAAAA"]
[Sun Oct 11 16:22:22.840987 2026] [security2:error] [pid 480812:tid 480812] [client 34.79.242.244:0] [client 34.79.242.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severi
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
45.156.87.117
|
|
[Sun Oct 11 16:02:05.430617 2026] [security2:error] [pid 480825:tid 480825] [client 45.156.87.117:42 ...
show more
[Sun Oct 11 16:02:05.430617 2026] [security2:error] [pid 480825:tid 480825] [client 45.156.87.117:42778] [client 45.156.87.117] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/.env"] [unique_id "asuy_R9PVRh7VBiSYvlb8wAAAAQ"], referer: http://hass.fambus.nl/.env
[Sun Oct 11 16:02:05.523012 2026] [security2:error] [pid 480825:tid 480825] [client 45.156.87.117:42778] [client 45.156.87.117] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exc
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
45.148.10.238
|
|
[Sun Oct 11 15:31:37.561910 2026] [security2:error] [pid 468438:tid 468438] [client 45.148.10.238:47 ...
show more
[Sun Oct 11 15:31:37.561910 2026] [security2:error] [pid 468438:tid 468438] [client 45.148.10.238:47370] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/laravel/.env"] [unique_id "asur2XNkdanqTvsIeOymWAAAABM"], referer: http://94-209-38-171.cable.dynamic.v4.ziggo.nl/laravel/.env
[Sun Oct 11 15:31:37.711127 2026] [security2:error] [pid 444242:tid 444242] [client 45.148.10.238:47378] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id
...
show less
|
Hacking
Web App Attack
|
|
🇨🇭
170.231.236.98
|
|
[Sun Oct 11 15:13:34.901895 2026] [security2:error] [pid 447321:tid 447321] [client 170.231.236.98:2 ...
show more
[Sun Oct 11 15:13:34.901895 2026] [security2:error] [pid 447321:tid 447321] [client 170.231.236.98:24144] [client 170.231.236.98] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "asunnvzXFcv_VACor_lmtgAAABA"]
[Sun Oct 11 15:13:38.471874 2026] [security2:error] [pid 446671:tid 446671] [client 170.231.236.98:61768] [client 170.231.236.98] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"
...
show less
|
Hacking
Web App Attack
|
|
🇧🇪
207.175.194.102
|
|
[Sun Oct 11 14:25:31.691319 2026] [security2:error] [pid 420335:tid 420335] [client 207.175.194.102: ...
show more
[Sun Oct 11 14:25:31.691319 2026] [security2:error] [pid 420335:tid 420335] [client 207.175.194.102:0] [client 207.175.194.102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.aws/config"] [unique_id "asucW1xGak3-m5mDKDYHbQAAAAo"]
[Sun Oct 11 14:25:31.868174 2026] [security2:error] [pid 421073:tid 421073] [client 207.175.194.102:0] [client 207.175.194.102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
2a0f:ca80:b00b:8089::5:0
|
|
[Sun Oct 11 10:27:45.155324 2026] [security2:error] [pid 245862:tid 245862] [client 2a0f:ca80:b00b:8 ...
show more
[Sun Oct 11 10:27:45.155324 2026] [security2:error] [pid 245862:tid 245862] [client 2a0f:ca80:b00b:8089::5:0] [client 2a0f:ca80:b00b:8089::5] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.env"] [unique_id "astkoSQ66EHkJR2uLaKfigAAAAE"]
[Sun Oct 11 10:27:45.232363 2026] [security2:error] [pid 246742:tid 246742] [client 2a0f:ca80:b00b:8089::5:0] [client 2a0f:ca80:b00b:8089::5] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exce
...
show less
|
Hacking
Web App Attack
|
|
🇯🇵
2001:268:72ed:d3f3:8c4c:97ff:feba:b467
|
|
[Sun Oct 11 06:44:57.101806 2026] [security2:error] [pid 4011707:tid 4011707] [client 2001:268:72ed: ...
show more
[Sun Oct 11 06:44:57.101806 2026] [security2:error] [pid 4011707:tid 4011707] [client 2001:268:72ed:d3f3:8c4c:97ff:feba:b467:0] [client 2001:268:72ed:d3f3:8c4c:97ff:feba:b467] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/"] [unique_id "asswafnw_uIxAFC4NFvMfQAAABw"]
[Sun Oct 11 06:44:58.484709 2026] [security2:error] [pid 4083540:tid 4083540] [client 2001:268:72ed:d3f3:8c4c:97ff:feba:b467:0] [client 2001:268:72ed:d3f3:8c4c:97ff:feba:b467] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.c
...
show less
|
Hacking
Web App Attack
|