|
🇧🇷
45.205.1.8
|
|
21/Mar/2026:09:17:43.852285 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:09:17:43.852285 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab5UJ7HYx9g4Wav_lQZdHAAAAAw"]
21/Mar/2026:09:17:44.484164 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇱
45.148.10.238
|
|
21/Mar/2026:08:58:33.661531 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:08:58:33.661531 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.238] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "mak.vetspons.nl"] [uri "/.git/config"] [unique_id "ab5PqUVFlkj1c4ULgLHfqgAAAAg"]
21/Mar/2026:08:58:33.661531 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.238] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [
...
show less
|
Web App Attack
|
|
🇺🇦
185.254.197.90
|
|
21/Mar/2026:09:00:05.758637 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:09:00:05.758637 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.254.197.90] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ramongames.nl"] [uri "/.env.local"] [unique_id "ab5QBV2DYcVeau8j0BeoxAAAAAY"]
21/Mar/2026:09:00:05.758637 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.254.197.90] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949
...
show less
|
Web App Attack
|
|
🇺🇸
65.49.1.152
|
|
21/Mar/2026:08:44:31.684426 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:08:44:31.684426 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 65.49.1.152] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "ab5MXxwHoOtkI-7U3DGwdQAAAAg"]
21/Mar/2026:08:44:31.684426 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 65.49.1.152] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted Fil
...
show less
|
Web App Attack
|
|
🇷🇺
37.72.140.25
|
|
21/Mar/2026:08:37:56.383347 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:08:37:56.383347 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 37.72.140.25] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "autodiscover.familievandemaat.nl"] [uri "/.env"] [unique_id "ab5K1MvX5V0fzRdb7gDS3AAAAA4"]
21/Mar/2026:08:37:56.383347 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 37.72.140.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILE
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
21/Mar/2026:07:52:29.005406 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:07:52:29.005406 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab5ALcvX5V0fzRdb7gDShgAAAA4"]
21/Mar/2026:07:52:29.639556 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇺🇸
135.233.112.103
|
|
21/Mar/2026:07:48:25.026872 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:07:48:25.026872 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 135.233.112.103] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/developmentserver/metadatauploader"] [unique_id "ab4_OT6eyYOnreGNp8ktkgAAAAk"]
21/Mar/2026:07:48:25.026872 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 135.233.112.103] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS
...
show less
|
Web App Attack
|
|
🇫🇷
185.177.72.50
|
|
21/Mar/2026:07:28:48.596011 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:07:28:48.596011 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.50] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.env"] [unique_id "ab46oC_B6OVMbOr7P4sUJwAAAAI"]
21/Mar/2026:07:28:48.596011 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.50] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "
...
show less
|
Web App Attack
|
|
🇳🇱
85.11.167.19
|
|
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 85.11.167.19] ...
show more
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 85.11.167.19] ModSecurity: Warning. Pattern match "(?:;|\\\\\\\\{|\\\\\\\\||\\\\\\\\|\\\\\\\\||&|&&|\\\\\\\\n|\\\\\\\\r|\\\\\\\\$\\\\\\\\(|\\\\\\\\$\\\\\\\\(\\\\\\\\(|`|\\\\\\\\${|<\\\\\\\\(|>\\\\\\\\(|\\\\\\\\(\\\\\\\\s*\\\\\\\\))\\\\\\\\s*(?:{|\\\\\\\\s*\\\\\\\\(\\\\\\\\s*|\\\\\\\\w+=(?:[^\\\\\\\\s]*|\\\\\\\\$.*|\\\\\\\\$.*|<.*|>.*|\\\\\\\\'.*\\\\\\\\'|\\\\".*\\\\")\\\\\\\\s+|!\\\\\\\\s*|\\\\\\\\$)*\\\\\\\\s*(?:'|\\\\")*(?:[\\\\\\\\?\\\\\\\\*\\\\\\\\[\\\\\\\\]\\\\\\\\(\\\\\\\\)\\\\\\\\-\\\\\\\\|+\\\\\\\\w'\\\\"\\\\\\\\./\\\\\\\\\\\\\\\\]+/)?[\\\\\\\\\\\\\\\\'\\\\"]*(?:s[\\\\\\\\\\\\\\\\'\\\\"]* ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "159"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\\\x22_response\\\\x22:{\\\\x22_formData\\\\x22:{\\\\x22get\\\\x22:\\\\x22
...
show less
|
Web App Attack
|
|
🇳🇱
195.178.110.223
|
|
21/Mar/2026:06:56:42.548174 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:06:56:42.548174 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.env"] [unique_id "ab4zGkxDa1iPAtmMdEhhGQAAAAM"]
21/Mar/2026:06:56:42.548174 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.223] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [m
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
21/Mar/2026:06:04:03.554347 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:06:04:03.554347 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab4mw8RSibVZPCUP8mjJ3QAAAA8"]
21/Mar/2026:06:04:04.319001 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇱
93.123.109.214
|
|
21/Mar/2026:05:41:22.353521 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:05:41:22.353521 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.env"] [unique_id "ab4hcnQC3UsU0VdvaNN_-wAAAAg"]
21/Mar/2026:05:41:22.353521 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg
...
show less
|
Web App Attack
|
|
🇦🇹
109.70.100.2
|
|
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 109.70.100.2] ...
show more
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 109.70.100.2] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "worldcup.jordymarije.nl"] [uri "/"] [unique_id "ab4aUrJgdvBaf20Ho_geQwAAABc"]
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 109.70.100.2] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/ru
...
show less
|
Web App Attack
|
|
🇮🇳
34.47.182.97
|
|
21/Mar/2026:05:04:51.039214 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:05:04:51.039214 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.47.182.97] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "office.vetspons.nl"] [uri "/.git/config"] [unique_id "ab4Y4_wIQOmqtFzknsWdJwAAABM"]
21/Mar/2026:05:04:51.039214 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.47.182.97] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id
...
show less
|
Web App Attack
|
|
🇳🇱
93.123.109.62
|
|
21/Mar/2026:05:08:03.307289 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:05:08:03.307289 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.62] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg "Method is not allowed by policy"] [data "CONNECT"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272/220/274"] [tag "PCI/12.1"] [hostname "ip.ninonakano.jp"] [uri "/"] [unique_id "ab4Zo5wi-2mmCSjWSjAQVAAAABc"]
21/Mar/2026:05:08:03.307289 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.62] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#\\\\\\\\s]*)?(?:#[\\\\\\\\S]*)?|connec
...
show less
|
Web App Attack
|
|
🇷🇺
95.215.0.144
|
|
21/Mar/2026:05:04:40.406110 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:05:04:40.406110 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 95.215.0.144] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab4Y2J2TmNJquJ5bjOYjPwAAABQ"]
21/Mar/2026:05:04:40.433559 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 95.215.0.144] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host hea
...
show less
|
Web App Attack
|
|
🇳🇱
195.178.110.246
|
|
21/Mar/2026:04:54:47.820028 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:04:54:47.820028 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.246] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "ab4Wh-aDYgu1jWa7EYjQwgAAAAA"]
21/Mar/2026:04:54:47.820028 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.246] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
21/Mar/2026:04:42:33.886109 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:04:42:33.886109 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab4TqctX2V_khoOP9dc1bwAAAAI"]
21/Mar/2026:04:42:34.629164 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇫🇷
185.249.225.2
|
|
21/Mar/2026:04:28:36.527482 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:04:28:36.527482 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.249.225.2] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.git/config"] [unique_id "ab4QZHs6bJL6aaX7_jFnRwAAABg"]
21/Mar/2026:04:28:36.527482 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.249.225.2] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id
...
show less
|
Web App Attack
|
|
🇩🇪
185.220.101.10
|
|
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.220.101.10 ...
show more
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.220.101.10] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "worldcup.jordymarije.nl"] [uri "/"] [unique_id "ab4OoPwIQOmqtFzknsWdJQAAABM"]
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.220.101.10] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-cr
...
show less
|
Web App Attack
|
|
🇺🇸
13.222.31.143
|
|
21/Mar/2026:03:45:36.105397 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:03:45:36.105397 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 13.222.31.143] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "mak.vetspons.nl"] [uri "/.git/config"] [unique_id "ab4GUPwIQOmqtFzknsWdIwAAABM"]
21/Mar/2026:03:45:36.105397 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 13.222.31.143] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [
...
show less
|
Web App Attack
|
|
🇫🇮
77.42.3.120
|
|
21/Mar/2026:03:31:21.000446 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:03:31:21.000446 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.42.3.120] ModSecurity: Warning. Pattern match "\\\\\\\\b(?:keep-alive|close),\\\\\\\\s?(?:keep-alive|close)\\\\\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "339"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "familievandemaat.nl"] [uri "/"] [unique_id "ab4C-KOG-ZEO_GY_IwicDAAAAAY"]
21/Mar/2026:03:31:21.912258 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.42.3.120] ModSecurity: Warning. Pattern match "\\\\\\\\b(?:keep-alive|close),\\\\\\\\s?(?:keep-alive|close)\\\\\\\\b" at REQUEST_HEADERS:Connection. [file "/
...
show less
|
Web App Attack
|
|
🇺🇸
128.31.0.13
|
|
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 128.31.0.13] M ...
show more
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 128.31.0.13] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "worldcup.jordymarije.nl"] [uri "/"] [unique_id "ab4BHns6bJL6aaX7_jFnQQAAABg"]
2026-06-01 17:00:00Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 128.31.0.13] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rule
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
21/Mar/2026:03:11:35.231836 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:03:11:35.231836 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab3-V_NNwesQLzFKzPysUAAAABc"]
21/Mar/2026:03:11:35.925863 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇷🇺
37.72.140.25
|
|
21/Mar/2026:02:40:12.009613 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:02:40:12.009613 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 37.72.140.25] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "autoconfig.familievandemaat.nl"] [uri "/.env"] [unique_id "ab32_GuvfBKE7sYe4uioyAAAAAE"]
21/Mar/2026:02:40:12.009613 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 37.72.140.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENA
...
show less
|
Web App Attack
|