|
π§π·
45.205.1.8
|
|
25/Mar/2026:04:03:38.771965 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:04:03:38.771965 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acNQihhCJ3JD9vW25xZxIgAAAAY"]
25/Mar/2026:04:03:39.589310 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
π³π±
45.148.10.64
|
|
25/Mar/2026:03:01:11.077581 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:03:01:11.077581 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.64] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "ramongames.nl"] [uri "/"] [unique_id "acNB52yguJURfEm6l2s-GwAAABQ"]
25/Mar/2026:03:01:11.077581 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.64] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/
...
show less
|
Web App Attack
|
|
π§π·
45.205.1.8
|
|
25/Mar/2026:02:56:10.372949 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:02:56:10.372949 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acNAusXg_RqXoIgMcGf5XgAAAAo"]
25/Mar/2026:02:56:12.171304 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
π³π±
204.76.203.25
|
|
25/Mar/2026:02:15:30.745048 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:02:15:30.745048 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.familievandemaat.nl"] [uri "/.env"] [unique_id "acM3MpkabajiF-FahlkPrgAAAAA"]
25/Mar/2026:02:15:30.745048 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"
...
show less
|
Web App Attack
|
|
π«π·
185.177.72.11
|
|
25/Mar/2026:01:51:21.507666 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:01:51:21.507666 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.11] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/.env"] [unique_id "acMxifT5WrwPQgO_X8KAVAAAAAg"]
25/Mar/2026:01:51:21.507666 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.11] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [m
...
show less
|
Web App Attack
|
|
π§π·
45.205.1.8
|
|
25/Mar/2026:01:49:29.306937 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:01:49:29.306937 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acMxGX-RRP2LuLt7YXTEaAAAAAs"]
25/Mar/2026:01:49:29.998530 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
π«π·
185.177.72.50
|
|
25/Mar/2026:01:19:53.619139 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:01:19:53.619139 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.50] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/.env"] [unique_id "acMqKVa0VJjGo7N4UGu9KwAAAA0"]
25/Mar/2026:01:19:53.619139 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.50] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [m
...
show less
|
Web App Attack
|
|
π³π±
45.148.10.238
|
|
25/Mar/2026:00:59:31.614181 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:00:59:31.614181 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.238] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "mak.vetspons.nl"] [uri "/.env"] [unique_id "acMlY-hwdFbxOjIcxpdQ8wAAAAY"]
25/Mar/2026:00:59:31.614181 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/u
...
show less
|
Web App Attack
|
|
π³π±
195.189.97.40
|
|
25/Mar/2026:00:32:38.715808 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:00:32:38.715808 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.189.97.40] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.env"] [unique_id "acMfFuhwdFbxOjIcxpdQ4AAAAAY"]
25/Mar/2026:00:32:38.715808 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.189.97.40] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "
...
show less
|
Web App Attack
|
|
π³π±
45.148.10.120
|
|
25/Mar/2026:00:32:32.463976 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:00:32:32.463976 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.120] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "mak.vetspons.nl"] [uri "/"] [unique_id "acMfEBpVhKTJ3Qp4em9fBQAAAAQ"]
25/Mar/2026:00:32:32.463976 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.120] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/sh
...
show less
|
Web App Attack
|
|
π³π±
45.144.212.97
|
|
25/Mar/2026:00:26:54.297819 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:00:26:54.297819 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.144.212.97] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "acMdvhkWVVvXxIIikMyH4AAAAAc"]
25/Mar/2026:00:26:54.297819 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.144.212.97] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/ru
...
show less
|
Web App Attack
|
|
π§π·
45.205.1.8
|
|
25/Mar/2026:00:24:25.548990 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:00:24:25.548990 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acMdKRX9k8lC6qu5CE1ahgAAAA4"]
25/Mar/2026:00:24:26.221267 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
π³π±
204.76.203.25
|
|
25/Mar/2026:00:14:23.719360 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
25/Mar/2026:00:14:23.719360 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ramongames.nl"] [uri "/.env"] [unique_id "acMaz7fPFZfxUR4LV1afLQAAABE"]
25/Mar/2026:00:14:23.719360 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "In
...
show less
|
Web App Attack
|
|
π§π·
45.205.1.8
|
|
24/Mar/2026:23:17:44.115942 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:23:17:44.115942 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acMNiAZMWqGe8sglH_hXNAAAAAY"]
24/Mar/2026:23:17:44.828200 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
πΊπΈ
20.172.67.176
|
|
24/Mar/2026:23:14:16.755585 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:23:14:16.755585 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.172.67.176] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/owa/auth/x.js"] [unique_id "acMMuE_DGd4H5bZ56JLQqwAAAAo"]
24/Mar/2026:23:14:16.755585 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.172.67.176] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/
...
show less
|
Web App Attack
|
|
π°π·
49.247.44.179
|
|
24/Mar/2026:23:12:54.468337 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:23:12:54.468337 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 49.247.44.179] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "acMMZp5RzZd3yhr39I30FAAAAAw"]
24/Mar/2026:23:12:54.468337 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 49.247.44.179] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted
...
show less
|
Web App Attack
|
|
π³π±
204.76.203.25
|
|
24/Mar/2026:22:33:19.959594 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:22:33:19.959594 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/.env"] [unique_id "acMDH0jEG-Z6bDed_I-yRwAAAAU"]
24/Mar/2026:22:33:19.959594 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [m
...
show less
|
Web App Attack
|
|
π§π·
45.205.1.8
|
|
24/Mar/2026:22:11:03.379012 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:22:11:03.379012 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acL954Iv5k6QT9AESAX89AAAAAA"]
24/Mar/2026:22:11:05.190525 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
πΊπΈ
147.182.162.94
|
|
24/Mar/2026:21:24:37.026243 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:21:24:37.026243 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 147.182.162.94] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.env"] [unique_id "acLzBZiu8BBgcSsj9hRHTwAAABY"]
24/Mar/2026:21:24:37.026243 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 147.182.162.94] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg
...
show less
|
Web App Attack
|
|
π³π±
195.178.110.162
|
|
24/Mar/2026:21:24:33.662975 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:21:24:33.662975 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.162] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "acLzAd7z2HRle_9dcY4PygAAAAY"]
24/Mar/2026:21:24:33.662975 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.162] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-cr
...
show less
|
Web App Attack
|
|
π³π±
195.178.110.246
|
|
24/Mar/2026:20:37:56.488105 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:20:37:56.488105 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.246] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "acLoFCnbo1BA6x96CNpaAQAAABU"]
24/Mar/2026:20:37:56.488105 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.246] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-cr
...
show less
|
Web App Attack
|
|
πΈπ¬
118.194.233.182
|
|
24/Mar/2026:20:28:51.862886 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:20:28:51.862886 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 118.194.233.182] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acLl878R_ULFj-nCJKFSogAAAAc"]
24/Mar/2026:20:28:57.647307 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 118.194.233.182] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host h
...
show less
|
Web App Attack
|
|
π§π·
45.205.1.8
|
|
24/Mar/2026:20:27:51.203839 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:20:27:51.203839 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acLlt0NGCfLnaS_hlHuVRwAAAA8"]
24/Mar/2026:20:27:51.890258 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
π³π±
204.76.203.25
|
|
24/Mar/2026:19:46:46.368992 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:19:46:46.368992 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "jordymarije.nl"] [uri "/.env"] [unique_id "acLcFrOPeFJaJNEeGWdogwAAAAY"]
24/Mar/2026:19:46:46.368992 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "I
...
show less
|
Web App Attack
|
|
πΊπΈ
135.237.125.201
|
|
24/Mar/2026:19:16:05.584464 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:19:16:05.584464 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 135.237.125.201] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acLU5ULbV43WvY1z6U9zvAAAAAg"]
24/Mar/2026:19:16:05.584464 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 135.237.125.201] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecuri
...
show less
|
Web App Attack
|