|
🇧🇷
45.205.1.8
|
|
24/Mar/2026:18:54:51.819442 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:18:54:51.819442 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acLP60LbV43WvY1z6U9zegAAAAg"]
24/Mar/2026:18:54:54.487198 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇱
195.178.110.223
|
|
24/Mar/2026:18:06:28.272233 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:18:06:28.272233 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.env"] [unique_id "acLElC60xqHLtvAyRCu6tgAAAAI"]
24/Mar/2026:18:06:28.272233 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.223] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [m
...
show less
|
Web App Attack
|
|
🇷🇺
81.29.142.100
|
|
24/Mar/2026:17:35:32.375671 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:17:35:32.375671 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 81.29.142.100] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acK9VGxD9W6pVa1WRqIBBgAAAAo"]
24/Mar/2026:17:35:33.166510 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 81.29.142.100] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host heade
...
show less
|
Web App Attack
|
|
🇳🇱
77.83.39.82
|
|
24/Mar/2026:17:27:32.105428 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:17:27:32.105428 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.82] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "acK7dIiRlMucZkIsle7AvgAAAAk"]
24/Mar/2026:17:27:32.105428 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.82] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
24/Mar/2026:17:03:25.674464 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:17:03:25.674464 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acK1zamETAVhXIrTsRzVzAAAAAc"]
24/Mar/2026:17:03:26.326782 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇺🇸
45.61.129.5
|
|
24/Mar/2026:16:33:08.849455 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:16:33:08.849455 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.61.129.5] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "jordymarije.nl"] [uri "/.git/config"] [unique_id "acKutAOe92lcc3zmC5tregAAAAI"]
24/Mar/2026:16:33:08.849455 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.61.129.5] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "9491
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
24/Mar/2026:15:52:39.999991 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:15:52:39.999991 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acKlN6ooFr2vKMz_haaLPAAAAAA"]
24/Mar/2026:15:52:40.705815 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇺🇸
45.61.129.5
|
|
24/Mar/2026:15:01:47.238854 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:15:01:47.238854 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.61.129.5] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/.git/config"] [unique_id "acKZSw3eAMC7QTnhsJ_yCAAAAAQ"]
24/Mar/2026:15:01:47.238854 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.61.129.5] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id
...
show less
|
Web App Attack
|
|
🇺🇸
20.83.32.182
|
|
24/Mar/2026:15:00:19.480583 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:15:00:19.480583 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.83.32.182] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/autodiscover/autodiscover.json"] [unique_id "acKY8-WQSRiJufYL-BpX1AAAABA"]
24/Mar/2026:15:00:19.480583 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.83.32.182] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [fi
...
show less
|
Web App Attack
|
|
🇺🇦
185.254.197.90
|
|
24/Mar/2026:14:40:58.062095 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:14:40:58.062095 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.254.197.90] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "im.vetspons.nl"] [uri "/.env.bak"] [unique_id "acKUareqH1
...
show less
|
Web App Attack
|
|
🇺🇸
216.81.245.214
|
|
24/Mar/2026:14:27:13.462572 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:14:27:13.462572 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 216.81.245.214] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "ramongames.nl"] [uri "/.git/config"] [unique_id "acKRMY8OD3maWk5VCFTgAQAAAAA"]
24/Mar/2026:14:27:13.462572 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 216.81.245.214] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [
...
show less
|
Web App Attack
|
|
🇺🇸
107.173.171.201
|
|
24/Mar/2026:13:56:32.359976 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:13:56:32.359976 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 107.173.171.201] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acKKAL9rzOLKAC11ZmEstwAAAAg"]
24/Mar/2026:13:56:32.359976 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 107.173.171.201] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQ
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
24/Mar/2026:13:19:15.001021 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:13:19:15.001021 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acKBQou_b5mPnMXvnP08PgAAAAc"]
24/Mar/2026:13:19:15.666902 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇺🇸
185.8.106.156
|
|
24/Mar/2026:12:41:01.658894 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:12:41:01.658894 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.8.106.156] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "mak.vetspons.nl"] [uri "/"] [unique_id "acJ4TWwYtqZ0GeJ1p9x0IwAAAAA"]
24/Mar/2026:12:41:01.658894 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.8.106.156] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/sh
...
show less
|
Web App Attack
|
|
🇺🇸
20.40.216.117
|
|
24/Mar/2026:12:29:38.690538 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:12:29:38.690538 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.40.216.117] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/ReportServer"] [unique_id "acJ1oiwfqqXJdQJGomuhlgAAAAc"]
24/Mar/2026:12:29:38.690538 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.40.216.117] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/m
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
24/Mar/2026:12:10:57.088562 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:12:10:57.088562 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acJxQcxrGL6ESqK2u_vgugAAAAs"]
24/Mar/2026:12:10:57.736357 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇺🇸
20.168.0.218
|
|
24/Mar/2026:11:09:31.797848 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:11:09:31.797848 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.168.0.218] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/owa/auth/logon.aspx"] [unique_id "acJi2z87NMnrw-hnG_QLKAAAAAs"]
24/Mar/2026:11:09:31.797848 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.168.0.218] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/sh
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
24/Mar/2026:10:56:44.203809 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:10:56:44.203809 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acJf3KSdOp324sX82pUavgAAAAA"]
24/Mar/2026:10:56:45.830714 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇫🇷
185.177.72.23
|
|
24/Mar/2026:09:26:28.901690 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:09:26:28.901690 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.23] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "office.vetspons.nl"] [uri "/.git/config"] [unique_id "acJKtAhM1Fwy4BqFOVewfgAAAAU"]
24/Mar/2026:09:26:28.901690 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.23] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [
...
show less
|
Web App Attack
|
|
🇳🇱
172.94.9.253
|
|
24/Mar/2026:09:22:02.083166 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:09:22:02.083166 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.94.9.253] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "acJJqqkllq-mDM6-4YGuPwAAAAs"]
24/Mar/2026:09:22:02.083166 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.94.9.253] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rule
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
24/Mar/2026:09:15:03.880456 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:09:15:03.880456 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acJIB9yBdElIpmDUMiEOhAAAAAI"]
24/Mar/2026:09:15:04.616442 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇱
195.178.110.18
|
|
24/Mar/2026:08:15:12.902138 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:08:15:12.902138 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.18] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "www.ramongames.nl"] [uri "/.git/config"] [unique_id "acI6ADB4VptN-JDEzQBMYgAAAAE"]
24/Mar/2026:08:15:12.902138 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.18] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAM
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
24/Mar/2026:08:01:09.251249 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:08:01:09.251249 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acI2tZlR5m8Q8fn3P7yj8gAAABI"]
24/Mar/2026:08:01:09.942840 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇱
45.148.10.64
|
|
24/Mar/2026:07:37:58.992422 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:07:37:58.992422 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.64] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "jordymarije.nl"] [uri "/"] [unique_id "acIxRghM1Fwy4BqFOVewKAAAAAU"]
24/Mar/2026:07:37:58.992422 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.64] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share
...
show less
|
Web App Attack
|
|
🇳🇱
45.148.10.238
|
|
24/Mar/2026:06:29:00.265985 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
24/Mar/2026:06:29:00.265985 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.238] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "mak.vetspons.nl"] [uri "/.git/config"] [unique_id "acIhHJiu8BBgcSsj9hRA9AAAABY"]
24/Mar/2026:06:29:00.265985 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [
...
show less
|
Web App Attack
|