AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Jordy , the webmaster of jordymarije.nl, joined AbuseIPDB in July 2021 and has reported 32,867 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇳🇱 45.148.10.231	22 Mar 2026	22/Mar/2026:11:03:23.629347 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:11:03:23.629347 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.231] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.jordymarije.nl"] [uri "/.env"] [unique_id "ab--awapJox8uTrSvVE5RwAAABs"] 22/Mar/2026:11:03:23.629347 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.231] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [ms ... show less	Web App Attack
🇸🇬 139.59.101.9	22 Mar 2026	22/Mar/2026:09:57:52.891049 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:09:57:52.891049 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 139.59.101.9] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/.env"] [unique_id "ab-vEPVVUPhQPcTw998uFgAAABg"] 22/Mar/2026:09:57:52.891049 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 139.59.101.9] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg ... show less	Web App Attack
🇧🇷 45.205.1.8	22 Mar 2026	22/Mar/2026:09:52:09.344266 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:09:52:09.344266 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab-tuZwZK-5OjDVpgKkSrQAAABU"] 22/Mar/2026:09:52:10.008190 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg ... show less	Web App Attack
🇸🇬 8.222.225.103	22 Mar 2026	22/Mar/2026:09:39:59.990968 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:09:39:59.990968 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 8.222.225.103] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/hello.world"] [unique_id "ab-q3wRa7s5neFBzcMI--wAAAAs"] 22/Mar/2026:09:39:59.990968 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 8.222.225.103] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\\(,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./ ... show less	Web App Attack
🇸🇬 139.59.101.9	22 Mar 2026	22/Mar/2026:08:43:05.042832 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:08:43:05.042832 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 139.59.101.9] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/.env"] [unique_id "ab-dia8xT0rgc6bKd3dV_gAAABc"] 22/Mar/2026:08:43:05.042832 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 139.59.101.9] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg ... show less	Web App Attack
🇧🇷 45.205.1.8	22 Mar 2026	22/Mar/2026:08:47:44.785902 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:08:47:44.785902 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab-eoEe2knXCDPIIHYBo-QAAAA4"] 22/Mar/2026:08:47:45.516586 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg ... show less	Web App Attack
🇯🇵 40.74.65.33	22 Mar 2026	22/Mar/2026:08:30:37.953206 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:08:30:37.953206 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 40.74.65.33] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".com"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "familievandemaat.nl"] [uri "/hotiyourbags.com"] [unique_id " ... show less	Web App Attack
🇷🇺 37.72.140.25	22 Mar 2026	22/Mar/2026:08:25:31.699277 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:08:25:31.699277 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 37.72.140.25] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "autodiscover.familievandemaat.nl"] [uri "/"] [unique_id "ab-Za7hOvhBYhjElT_aH8wAAAAU"] 22/Mar/2026:08:25:31.699277 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 37.72.140.25] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. ... show less	Web App Attack
🇳🇱 195.178.110.223	22 Mar 2026	22/Mar/2026:08:11:43.334109 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:08:11:43.334109 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.env"] [unique_id "ab-WL5E2gyo25agmZ5BaLwAAAB0"] 22/Mar/2026:08:11:43.334109 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.223] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [m ... show less	Web App Attack
🇳🇱 195.178.110.162	22 Mar 2026	22/Mar/2026:07:43:57.773716 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:07:43:57.773716 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.162] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "ab-PrUsEi5DaX0AEqF_vFQAAAAA"] 22/Mar/2026:07:43:57.773716 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.162] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules ... show less	Web App Attack
🇷🇺 81.29.142.100	22 Mar 2026	22/Mar/2026:07:35:38.962166 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:07:35:38.962166 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 81.29.142.100] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab-NukAKcVB5BrdBZeYOYAAAAA8"] 22/Mar/2026:07:35:39.764230 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 81.29.142.100] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host heade ... show less	Web App Attack
🇸🇬 13.213.73.226	22 Mar 2026	22/Mar/2026:07:20:18.380600 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:07:20:18.380600 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 13.213.73.226] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\$(?:\\\\\\\\(.\\\\\\\$\|.)\\\\\\\\)\|\\\\\\\\{.\\\\\\\\})\|[<>]\\\\\\\$.\\\\\\\$)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41271)) \| base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce ... show less	Web App Attack
🇧🇷 45.205.1.8	22 Mar 2026	22/Mar/2026:07:16:58.551385 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:07:16:58.551385 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab-JWhk-Kg033TbJO4kJAQAAAAs"] 22/Mar/2026:07:16:59.269000 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg ... show less	Web App Attack
🇫🇷 185.177.72.60	22 Mar 2026	22/Mar/2026:07:01:07.780162 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:07:01:07.780162 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.env.production"] [unique_id "ab-Fo1CZmQRmk3qMbAQSuQAAAAY"] 22/Mar/2026:07:01:07.780162 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94" ... show less	Web App Attack
🇺🇸 20.163.15.34	22 Mar 2026	22/Mar/2026:06:57:45.432401 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:06:57:45.432401 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.163.15.34] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/autodiscover/autodiscover.json"] [unique_id "ab-E2TGzIKIj7Mq3CtxkAAAAAAA"] 22/Mar/2026:06:57:45.432401 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.163.15.34] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [fi ... show less	Web App Attack
🇺🇸 216.218.206.67	22 Mar 2026	22/Mar/2026:06:26:59.797337 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:06:26:59.797337 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 216.218.206.67] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "ab99o_o-i7oLM199LLhOlAAAAAE"] 22/Mar/2026:06:26:59.797337 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 216.218.206.67] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restrict ... show less	Web App Attack
🇩🇪 18.159.50.92	22 Mar 2026	2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 18.159.50.92] ... show more 2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 18.159.50.92] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\$(?:\\\\\\\\(.\\\\\\\$\|.)\\\\\\\\)\|\\\\\\\\{.\\\\\\\\})\|[<>]\\\\\\\$.\\\\\\\$)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41271)) \| base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "parano ... show less	Web App Attack
🇧🇷 45.205.1.8	22 Mar 2026	22/Mar/2026:05:56:18.214215 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:05:56:18.214215 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab92coEwKoVRoyxtwURKFAAAABE"] 22/Mar/2026:05:56:20.066436 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg ... show less	Web App Attack
🇺🇸 66.132.172.218	22 Mar 2026	22/Mar/2026:05:52:35.696076 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:05:52:35.696076 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132.172.218] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab91k4UQwClQbTwuGI8aywAAAAk"] 22/Mar/2026:05:52:37.865982 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132.172.218] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host hea ... show less	Web App Attack
🇳🇱 77.83.39.82	22 Mar 2026	22/Mar/2026:05:42:36.705050 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:05:42:36.705050 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.82] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "ab9zPDbLBN9sDCUZWW_4OgAAAA0"] 22/Mar/2026:05:42:36.705050 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.82] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST ... show less	Web App Attack
🇸🇬 18.136.119.16	22 Mar 2026	22/Mar/2026:05:34:39.129790 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:05:34:39.129790 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 18.136.119.16] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\$(?:\\\\\\\\(.\\\\\\\$\|.)\\\\\\\\)\|\\\\\\\\{.\\\\\\\\})\|[<>]\\\\\\\$.\\\\\\\$)" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((41271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41271)) \| base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce ... show less	Web App Attack
🇳🇱 45.148.10.238	22 Mar 2026	22/Mar/2026:05:31:18.883359 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:05:31:18.883359 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.238] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "mak.vetspons.nl"] [uri "/.git/config"] [unique_id "ab9wlv6lrD9aytpihx9AqgAAAAM"] 22/Mar/2026:05:31:18.883359 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [ ... show less	Web App Attack
🇺🇸 135.237.127.54	22 Mar 2026	22/Mar/2026:05:32:11.779609 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:05:32:11.779609 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 135.237.127.54] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/owa/auth/x.js"] [unique_id "ab9wy5ipdpgXM0sNysrKyAAAAAY"] 22/Mar/2026:05:32:11.779609 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 135.237.127.54] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/shar ... show less	Web App Attack
🇳🇱 77.83.39.82	22 Mar 2026	22/Mar/2026:04:28:24.916678 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:04:28:24.916678 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.82] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "ab9h2DyXZqHVK-_KauO9jQAAAAc"] 22/Mar/2026:04:28:24.916678 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.82] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST ... show less	Web App Attack
🇧🇷 45.205.1.8	22 Mar 2026	22/Mar/2026:04:11:21.325493 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 22/Mar/2026:04:11:21.325493 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab9d2TyXZqHVK-_KauO9PAAAAAc"] 22/Mar/2026:04:11:22.215762 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg ... show less	Web App Attack