|
🇺🇸
34.213.159.201
|
|
23/Mar/2026:22:16:13.873854 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:22:16:13.873854 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.213.159.201] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rc
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
23/Mar/2026:22:15:10.352353 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:22:15:10.352353 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acGtXm6DeXM50svqRK2ZIwAAAAA"]
23/Mar/2026:22:15:11.092538 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇩🇪
141.95.84.126
|
|
23/Mar/2026:22:08:55.053636 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:22:08:55.053636 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 141.95.84.126] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "jordymarije.nl"] [uri "/.env"] [unique_id "acGr5wXNTlMeuex4hDfRcAAAAAA"]
23/Mar/2026:22:08:55.053636 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 141.95.84.126] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/us
...
show less
|
Web App Attack
|
|
🇳🇱
77.83.39.162
|
|
23/Mar/2026:21:57:23.532719 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:21:57:23.532719 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.162] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/refs/heads/"] [unique_id "acGpM5DIQkcQq2yWRSa7XQAAAAo"]
23/Mar/2026:21:57:23.532719 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.162] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs
...
show less
|
Web App Attack
|
|
🇺🇸
172.203.234.251
|
|
23/Mar/2026:21:35:04.230881 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:21:35:04.230881 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.203.234.251] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "acGj-PQhkXw16o_BtF6R2gAAAAU"]
23/Mar/2026:21:35:04.230881 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.203.234.251] ModSecurity: Warning. Pattern ma
...
show less
|
Web App Attack
|
|
🇳🇱
77.83.39.156
|
|
23/Mar/2026:21:01:41.187400 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:21:01:41.187400 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.156] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "acGcJSMEQrblSmqAFnDgOAAAABo"]
23/Mar/2026:21:01:41.187400 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.156] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Acce
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
23/Mar/2026:20:32:23.472306 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:20:32:23.472306 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acGVR4Q6Pz0ZpKH9nnoDXAAAAAU"]
23/Mar/2026:20:32:24.155751 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇵🇱
151.115.35.91
|
|
23/Mar/2026:19:29:47.786867 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:19:29:47.786867 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 151.115.35.91] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "familievandemaat.nl"] [uri "/"] [unique_id "acGGm6biN1kofY3ON6NkDAAAAAk"]
23/Mar/2026:19:29:47.786867 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 151.115.35.91] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/us
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
23/Mar/2026:19:10:21.809692 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:19:10:21.809692 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acGCDVbbtNX2W0f6sS7WAgAAABQ"]
23/Mar/2026:19:10:22.530025 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
23/Mar/2026:16:53:37.469551 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:16:53:37.469551 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acFiAZ60l0lxkRabz9wvMAAAAA0"]
23/Mar/2026:16:53:38.088099 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇺🇸
20.168.121.252
|
|
23/Mar/2026:16:38:29.161054 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:16:38:29.161054 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.168.121.252] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/version"] [unique_id "acFedRVB0Akknp0N0zAefgAAAAg"]
23/Mar/2026:16:38:29.161054 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.168.121.252] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/mods
...
show less
|
Web App Attack
|
|
🇩🇪
91.200.102.173
|
|
23/Mar/2026:15:51:36.748881 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:15:51:36.748881 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 91.200.102.173] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "acFTeBd6gXRiRmD1GbDMvwAAABg"]
23/Mar/2026:15:51:36.748881 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 91.200.102.173] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restrict
...
show less
|
Web App Attack
|
|
🇳🇱
45.148.10.120
|
|
23/Mar/2026:15:19:13.114030 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:15:19:13.114030 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.120] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "familievandemaat.nl"] [uri "/"] [unique_id "acFL4YgGl8qulZsbsnH5_AAAAAo"]
23/Mar/2026:15:19:13.114030 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.120] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/us
...
show less
|
Web App Attack
|
|
🇫🇷
185.177.72.30
|
|
23/Mar/2026:15:17:38.070531 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:15:17:38.070531 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.30] ModSecurity: Warning. Matched phrase "proc/self/environ" at ARGS:files.f-3k6rae.filepath. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "98"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: proc/self/environ found within ARGS:files.f-3k6rae.filepath: /proc/self/environ"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/form/upload"] [unique_id "acFLgqbiN1kofY3ON6NjUwAAAAk"]
23/Mar/2026:15:17:38.070531 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.30] ModSecurity: Warning. Matched phrase "proc/self/" at ARGS:files.f-3k6rae.filepath. [file "/usr/share/modsecurity-
...
show less
|
Web App Attack
|
|
🇳🇱
77.83.39.162
|
|
23/Mar/2026:15:01:29.735630 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:15:01:29.735630 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.162] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/refs/"] [unique_id "acFHuafp7CCITGTU05jXEwAAAAE"]
23/Mar/2026:15:01:29.735630 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.162] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
23/Mar/2026:14:12:56.158675 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:14:12:56.158675 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acE8WLEMkjUtZl2kHUb0bgAAAAg"]
23/Mar/2026:14:12:56.879174 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
23/Mar/2026:12:53:31.560937 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:12:53:31.560937 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acEpu8VaBiC0L9VDleW5_wAAAAE"]
23/Mar/2026:12:53:32.211580 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇭🇰
168.76.20.229
|
|
23/Mar/2026:12:21:54.016998 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:12:21:54.016998 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 168.76.20.229] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acEiUoilKNrU6RkfyeKbzAAAAAw"]
23/Mar/2026:12:21:54.992567 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 168.76.20.229] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host h
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
23/Mar/2026:10:47:46.143558 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:10:47:46.143558 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acEMQuazgjEvg-3kJIDBMAAAAAQ"]
23/Mar/2026:10:47:46.898571 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇱
195.178.110.18
|
|
23/Mar/2026:09:09:20.385225 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:09:09:20.385225 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.18] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "autoconfig.familievandemaat.nl"] [uri "/.git/config"] [unique_id "acD1MDp-IHoexn456Qi9qQAAAAE"]
23/Mar/2026:09:09:20.385225 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.18] ModSecurity: Warning. Matched phrase "/.git/" at RE
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
23/Mar/2026:08:58:28.102650 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:08:58:28.102650 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acDypIOP1bweZkNWQ1xZdAAAAA4"]
23/Mar/2026:08:58:28.825356 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇫🇷
185.177.72.60
|
|
23/Mar/2026:08:09:36.212112 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:08:09:36.212112 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "jordymarije.nl"] [uri "/.env.production"] [unique_id "acDnMOjX60D1Ui2ZBKaEWgAAAAs"]
23/Mar/2026:08:09:36.212112 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"]
...
show less
|
Web App Attack
|
|
🇫🇷
185.177.72.50
|
|
23/Mar/2026:08:01:47.514275 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:08:01:47.514275 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.50] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "jordymarije.nl"] [uri "/.env.production"] [unique_id "acDlW-8By__g_pRUD5hevQAAAAE"]
23/Mar/2026:08:01:47.514275 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.50] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"]
...
show less
|
Web App Attack
|
|
🇳🇱
77.83.39.162
|
|
23/Mar/2026:08:05:01.522631 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:08:05:01.522631 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.162] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/HEAD"] [unique_id "acDmHQDnqFjAr0TJwEc41gAAAAQ"]
23/Mar/2026:08:05:01.522631 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.162] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/
...
show less
|
Web App Attack
|
|
🇨🇳
106.58.164.119
|
|
23/Mar/2026:07:24:26.238574 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
23/Mar/2026:07:24:26.238574 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 106.58.164.119] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/dns-query"] [unique_id "acDcmvRMqlf9nxrLQsaPjgAAAAI"]
23/Mar/2026:07:24:28.087864 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 106.58.164.119] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg
...
show less
|
Web App Attack
|