|
🇷🇴
2.57.122.173
|
|
22/Mar/2026:18:55:26.914622 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:18:55:26.914622 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 2.57.122.173] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "mak.vetspons.nl"] [uri "/.env"] [unique_id "acAtDq8xT0rgc6bKd3dXhAAAABc"]
22/Mar/2026:18:55:26.914622 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 2.57.122.173] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr
...
show less
|
Web App Attack
|
|
🇳🇱
77.83.39.162
|
|
22/Mar/2026:18:07:55.163570 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:18:07:55.163570 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.162] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "acAh62z7wgPO4ro5xgRqiwAAAA0"]
22/Mar/2026:18:07:55.163570 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.162] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rule
...
show less
|
Web App Attack
|
|
🇫🇷
185.177.72.52
|
|
22/Mar/2026:17:31:16.847977 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:17:31:16.847977 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.52] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "worldcup.jordymarije.nl"] [uri "/info.php.bak"] [unique_id
...
show less
|
Web App Attack
|
|
🇫🇷
185.177.72.23
|
|
22/Mar/2026:17:07:41.600385 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:17:07:41.600385 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.23] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "autoconfig.familievandemaat.nl"] [uri "/.git/config"] [unique_id "acATzc5-Snv19qBkGb_5FgAAAAc"]
22/Mar/2026:17:07:41.600385 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.23] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [
...
show less
|
Web App Attack
|
|
🇳🇱
45.148.10.231
|
|
22/Mar/2026:16:54:56.810420 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:16:54:56.810420 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "jordymarije.nl"] [uri "/.env"] [unique_id "acAQ0JE2gyo25agmZ5Ba-AAAAB0"]
22/Mar/2026:16:54:56.810420 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.231] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "I
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
22/Mar/2026:16:56:05.523753 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:16:56:05.523753 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acARFWsom_8coUg_84BrsgAAAAY"]
22/Mar/2026:16:56:06.256517 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇺🇸
138.197.31.182
|
|
22/Mar/2026:16:41:19.584691 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:16:41:19.584691 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 138.197.31.182] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ex.vetspons.nl"] [uri "/.env"] [unique_id "acANn-5qCVzvu3yzKOJgqwAAAB4"]
22/Mar/2026:16:41:19.584691 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 138.197.31.182] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg
...
show less
|
Web App Attack
|
|
🇺🇸
20.168.13.44
|
|
22/Mar/2026:16:23:09.973702 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:16:23:09.973702 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.168.13.44] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/developmentserver/metadatauploader"] [unique_id "acAJXSWNK7Ii3sTkQ7x4yAAAAAM"]
22/Mar/2026:16:23:09.973702 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.168.13.44] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host.
...
show less
|
Web App Attack
|
|
🇳🇱
93.123.109.79
|
|
22/Mar/2026:15:52:52.599970 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:15:52:52.599970 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.79] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/.git/config"] [unique_id "acACRAapJox8uTrSvVE5wQAAABs"]
22/Mar/2026:15:52:52.599970 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.79] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"]
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
22/Mar/2026:15:55:13.155806 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:15:55:13.155806 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acAC0Ss-NqTCcNMR4DznBwAAAAE"]
22/Mar/2026:15:55:13.881958 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇱
130.89.144.166
|
|
22/Mar/2026:15:03:14.081187 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:15:03:14.081187 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 130.89.144.166] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "familievandemaat.nl"] [uri "/robots.txt"] [unique_id "ab_2ojbRtJiatHfgNX-RxwAAABY"]
22/Mar/2026:15:03:14.081187 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 130.89.144.166] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
22/Mar/2026:14:52:15.039145 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:14:52:15.039145 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab_0D5i_F4hJ7KWT-nv_6gAAAAM"]
22/Mar/2026:14:52:15.782400 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇵🇱
195.164.49.144
|
|
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.164.49.144 ...
show more
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.164.49.144] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "worldcup.jordymarije.nl"] [uri "/"] [unique_id "ab_uXq8xT0rgc6bKd3dWJwAAABc"]
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.164.49.144] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-cr
...
show less
|
Web App Attack
|
|
🇵🇱
45.141.215.227
|
|
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.141.215.227 ...
show more
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.141.215.227] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "worldcup.jordymarije.nl"] [uri "/"] [unique_id "ab_hGjSEbRZzifWe2D_DKgAAABw"]
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.141.215.227] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-cr
...
show less
|
Web App Attack
|
|
🇳🇱
89.248.168.239
|
|
22/Mar/2026:12:57:50.176682 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:12:57:50.176682 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 89.248.168.239] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "ab_ZPnf1fvXRr-ZeUgOdvgAAAAo"]
22/Mar/2026:12:57:50.176682 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 89.248.168.239] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File
...
show less
|
Web App Attack
|
|
🇲🇾
180.75.246.228
|
|
22/Mar/2026:12:11:22.042375 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:12:11:22.042375 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 180.75.246.228] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.svn/wc.db"] [unique_id "ab_OWse6-68xqbT0rjltPwAAAAY"]
22/Mar/2026:12:11:22.042375 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 180.75.246.228] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/
...
show less
|
Web App Attack
|
|
🇧🇷
177.188.146.102
|
|
22/Mar/2026:12:11:15.750347 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:12:11:15.750347 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 177.188.146.102] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.svn/entries"] [unique_id "ab_OU92I8EZHZ2Hyw5CpWgAAACk"]
22/Mar/2026:12:11:15.750347 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 177.188.146.102] ModSecurity: Warning. Matched phrase "/.svn/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restr
...
show less
|
Web App Attack
|
|
🇧🇷
131.221.202.97
|
|
22/Mar/2026:12:11:14.065932 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:12:11:14.065932 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 131.221.202.97] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "ab_OUoc71I26gJLhd4Un5gAAAAk"]
22/Mar/2026:12:11:14.065932 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 131.221.202.97] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restrict
...
show less
|
Web App Attack
|
|
🇧🇷
138.185.216.118
|
|
22/Mar/2026:12:11:06.262431 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:12:11:06.262431 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 138.185.216.118] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab_OSkI7qsPR2HpIDuRXjwAAABA"]
22/Mar/2026:12:11:06.643185 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 138.185.216.118] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host h
...
show less
|
Web App Attack
|
|
🇺🇸
198.211.114.79
|
|
22/Mar/2026:12:08:07.491131 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:12:08:07.491131 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 198.211.114.79] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "703"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab_Nl042X52M3J6x6aqmmAAAAAg"]
22/Mar/2026:12:08:07.491131 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 198.211.114.79] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "
...
show less
|
Web App Attack
|
|
🇺🇸
139.144.31.179
|
|
22/Mar/2026:12:07:11.398189 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:12:07:11.398189 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 139.144.31.179] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/sonicui/7/sslvpn-portal/"] [unique_id "ab_NX042X52M3J6x6aqmlwAAAAg"]
22/Mar/2026:12:07:11.725745 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 139.144.31.179] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id
...
show less
|
Web App Attack
|
|
🇺🇸
45.33.60.188
|
|
22/Mar/2026:12:04:15.181642 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:12:04:15.181642 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.33.60.188] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/RDWeb"] [unique_id "ab_Mr92I8EZHZ2Hyw5CpDgAAACk"]
22/Mar/2026:12:04:15.645791 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.33.60.188] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host he
...
show less
|
Web App Attack
|
|
🇺🇸
192.81.131.106
|
|
22/Mar/2026:12:03:23.066009 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:12:03:23.066009 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 192.81.131.106] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "703"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "141.224.196.208"] [uri "/v1/statement"] [unique_id "ab_Me042X52M3J6x6aqmjQAAAAg"]
22/Mar/2026:12:03:23.066009 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 192.81.131.106] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP addre
...
show less
|
Web App Attack
|
|
🇺🇸
192.81.131.109
|
|
22/Mar/2026:11:57:02.416347 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:11:57:02.416347 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 192.81.131.109] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/owa/auth/errorFE.aspx"] [unique_id "ab_K_vXFLm8Hx9wMNOtKZAAAACs"]
22/Mar/2026:11:57:02.865900 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 192.81.131.109] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "92
...
show less
|
Web App Attack
|
|
🇺🇦
91.232.238.112
|
|
22/Mar/2026:11:33:31.602571 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
22/Mar/2026:11:33:31.602571 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 91.232.238.112] ModSecurity: Warning. Matched phrase "x-scanner" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "78"] [id "913110"] [msg "Found request header associated with security scanner"] [data "Matched Data: x-scanner found within REQUEST_HEADERS:User-Agent: mozilla/5.0 (compatible; freepbx-scanner/1.0)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/robots.txt"] [unique_id "ab_Fe48zNEsnlc6du-iAvgAAABE"]
22/Mar/2026:11:33:31.602571 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 91.232.238.112] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUE
...
show less
|
Web App Attack
|