|
🇳🇱
167.172.38.99
|
|
25/Mar/2026:16:38:00.862430 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:16:38:00.862430 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 167.172.38.99] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "acQBWEa4TQydC05Xa9YxvwAAAAw"]
25/Mar/2026:16:38:00.862430 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 167.172.38.99] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted
...
show less
|
Web App Attack
|
|
🇳🇱
46.151.178.13
|
|
25/Mar/2026:15:01:08.455806 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:15:01:08.455806 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 46.151.178.13] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg "Method is not allowed by policy"] [data "PROPFIND"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272/220/274"] [tag "PCI/12.1"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acPqpGbgiEjgW-Hrp3OZpQAAAAs"]
25/Mar/2026:15:01:08.455806 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 46.151.178.13] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "H
...
show less
|
Web App Attack
|
|
🇳🇱
204.76.203.25
|
|
25/Mar/2026:14:53:22.686729 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:14:53:22.686729 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "activeer.vetspons.nl"] [uri "/.env"] [unique_id "acPo0kTdqSE8QVRlZDjadAAAAAg"]
25/Mar/2026:14:53:22.686729 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
25/Mar/2026:14:49:15.118404 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:14:49:15.118404 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acPn23io_QxEu4Ys8NqhjAAAAAo"]
25/Mar/2026:14:49:15.772360 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇭🇰
199.45.155.83
|
|
25/Mar/2026:14:24:51.108620 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:14:24:51.108620 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 199.45.155.83] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acPiI5L6120yPwPQfldRTgAAAAk"]
25/Mar/2026:14:24:52.335965 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 199.45.155.83] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host heade
...
show less
|
Web App Attack
|
|
🇳🇱
46.151.178.13
|
|
25/Mar/2026:13:30:30.455564 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:13:30:30.455564 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 46.151.178.13] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg "Method is not allowed by policy"] [data "PROPFIND"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272/220/274"] [tag "PCI/12.1"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acPVZjqPLfSNc0b9z11XFwAAAAk"]
25/Mar/2026:13:30:30.455564 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 46.151.178.13] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "H
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
25/Mar/2026:13:26:19.247657 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:13:26:19.247657 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acPUa5uzudIc464x2V7gBgAAAAA"]
25/Mar/2026:13:26:19.990205 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
25/Mar/2026:12:09:37.982869 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:12:09:37.982869 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acPCcYkWkCiP8R067GbL9QAAAAM"]
25/Mar/2026:12:09:38.641391 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇺🇸
64.62.156.38
|
|
25/Mar/2026:11:04:23.652040 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:11:04:23.652040 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 64.62.156.38] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "acOzJ4jS5yvE-mJtBt4YzgAAAA8"]
25/Mar/2026:11:04:23.652040 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 64.62.156.38] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted F
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
25/Mar/2026:11:02:27.860549 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:11:02:27.860549 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acOys8htuxt55SHDyZZGcAAAAAU"]
25/Mar/2026:11:02:29.810636 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇱
45.144.212.97
|
|
25/Mar/2026:10:34:05.420385 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:10:34:05.420385 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.144.212.97] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/credentials"] [unique_id "acOsDYVlwzr3HVVaQso9XAAAAAU"]
25/Mar/2026:10:34:05.420385 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.144.212.97] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-c
...
show less
|
Web App Attack
|
|
🇨🇦
142.93.146.198
|
|
25/Mar/2026:10:23:47.113902 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:10:23:47.113902 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 142.93.146.198] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/update/picture.cgi"] [unique_id "acOpo67-tRrftDgT0VJlogAAAAw"]
25/Mar/2026:10:23:47.113902 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 142.93.146.198] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr
...
show less
|
Web App Attack
|
|
🇳🇱
195.178.110.162
|
|
25/Mar/2026:10:00:47.471698 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:10:00:47.471698 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.162] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/credentials"] [unique_id "acOkP3EWuu6OSUQLoxk_eQAAAAU"]
25/Mar/2026:10:00:47.471698 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.162] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecuri
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
25/Mar/2026:09:12:16.498324 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:09:12:16.498324 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acOY4EXxERfe_NY64_DfdwAAABI"]
25/Mar/2026:09:12:17.231870 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇷🇴
2.57.122.173
|
|
25/Mar/2026:08:21:12.105653 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:08:21:12.105653 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 2.57.122.173] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "mak.vetspons.nl"] [uri "/.git/config"] [unique_id "acOM6Ahgq0nZQ2rGxJLbygAAAAE"]
25/Mar/2026:08:21:12.105653 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 2.57.122.173] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [fi
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
25/Mar/2026:07:46:20.935528 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:07:46:20.935528 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acOEvL86fxw4M-_xgLqpagAAAAA"]
25/Mar/2026:07:46:21.633152 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇱
195.178.110.223
|
|
25/Mar/2026:06:42:18.894011 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:06:42:18.894011 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.env"] [unique_id "acN1uuHX9fojDA4iJOYUqgAAAAM"]
25/Mar/2026:06:42:18.894011 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.223] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [m
...
show less
|
Web App Attack
|
|
🇺🇸
20.80.105.50
|
|
25/Mar/2026:06:46:44.474106 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:06:46:44.474106 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.80.105.50] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/developmentserver/metadatauploader"] [unique_id "acN2xP8D_4uP4cCwN6BVUQAAABI"]
25/Mar/2026:06:46:44.474106 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.80.105.50] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host.
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
25/Mar/2026:06:43:11.393215 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:06:43:11.393215 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acN177mJLl2iMFmgIwm-gQAAAAM"]
25/Mar/2026:06:43:12.569978 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇱
204.76.203.25
|
|
25/Mar/2026:05:30:18.728178 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:05:30:18.728178 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "versie.vetspons.nl"] [uri "/.env"] [unique_id "acNk2lXyBZpnSUSfrUN6wgAAAAs"]
25/Mar/2026:05:30:18.728178 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [ms
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
25/Mar/2026:05:25:50.241639 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:05:25:50.241639 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acNjzqdfJahE427BkTKOlAAAAAs"]
25/Mar/2026:05:25:51.865849 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇺🇸
20.65.194.116
|
|
25/Mar/2026:05:08:01.507203 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:05:08:01.507203 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.65.194.116] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/login"] [unique_id "acNfoW_Q1x7vKIM7j3SyDQAAABQ"]
25/Mar/2026:05:08:01.507203 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.65.194.116] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecur
...
show less
|
Web App Attack
|
|
🇺🇸
47.89.154.16
|
|
25/Mar/2026:04:59:57.161832 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:04:59:57.161832 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 47.89.154.16] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/dns-query"] [unique_id "acNdvalyNzevZSwa6XznqgAAAAs"]
25/Mar/2026:04:59:57.161832 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 47.89.154.16] ModSecurity: Warning. Match of "within %{tx.allowed_request_content_type}" against "TX:content_type" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line
...
show less
|
Web App Attack
|
|
🇺🇸
71.6.199.87
|
|
25/Mar/2026:04:47:25.728205 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:04:47:25.728205 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 71.6.199.87] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acNazTbcxfxqChzK9PzyqgAAAAk"]
25/Mar/2026:04:47:25.728205 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 71.6.199.87] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/r
...
show less
|
Web App Attack
|
|
🇬🇧
157.245.36.108
|
|
25/Mar/2026:04:32:05.790429 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:04:32:05.790429 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 157.245.36.108] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ramongames.nl"] [uri "/.DS_Store"] [unique_id "acNXNYl-54n4miSEsO4O0QAAAAI"]
25/Mar/2026:04:32:05.790429 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 157.245.36.108] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"]
...
show less
|
Web App Attack
|