|
๐ง๐ท
45.205.1.8
|
|
21/Mar/2026:02:01:16.512207 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:02:01:16.512207 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab3t3L-UXd2RxS8DC3XWRAAAAAg"]
21/Mar/2026:02:01:17.144003 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
๐ซ๐ท
185.177.72.60
|
|
21/Mar/2026:01:07:51.452290 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:01:07:51.452290 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.60] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.env.production"] [unique_id "ab3hV6OG-ZEO_GY_Iwib9AAAAAY"]
21/Mar/2026:01:07:51.452290 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.60] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"
...
show less
|
Web App Attack
|
|
๐ซ๐ท
185.177.72.50
|
|
21/Mar/2026:01:02:19.314442 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:01:02:19.314442 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.50] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.env.production"] [unique_id "ab3gC3g9C2g0YXrfaPHl6wAAAAI"]
21/Mar/2026:01:02:19.314442 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.50] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"
...
show less
|
Web App Attack
|
|
๐ฉ๐ช
168.119.49.33
|
|
21/Mar/2026:00:56:39.534641 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:00:56:39.534641 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 168.119.49.33] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "mak.vetspons.nl"] [uri "/"] [unique_id "ab3etybCYbvcgZ4B4LNQfwAAAAM"]
21/Mar/2026:00:56:39.534641 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 168.119.49.33] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/sh
...
show less
|
Web App Attack
|
|
๐จ๐ฆ
167.99.181.249
|
|
21/Mar/2026:00:55:34.308616 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:00:55:34.308616 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 167.99.181.249] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "worldcup.jordymarije.nl"] [uri "/.DS_Store"] [unique_id "ab3edqOG-ZEO_GY_Iwib7gAAAAY"]
21/Mar/2026:00:55:34.308616 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 167.99.181.249] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [l
...
show less
|
Web App Attack
|
|
๐บ๐ธ
206.81.12.187
|
|
21/Mar/2026:00:54:02.882362 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:00:54:02.882362 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 206.81.12.187] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.DS_Store"] [unique_id "ab3eGknnMfAkqp1Men5eogAAAAU"]
21/Mar/2026:00:54:02.882362 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 206.81.12.187] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"]
...
show less
|
Web App Attack
|
|
๐ง๐ท
45.205.1.8
|
|
21/Mar/2026:00:28:12.453819 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
21/Mar/2026:00:28:12.453819 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab3YDCGLRPnXRQyIVwvXiQAAAAw"]
21/Mar/2026:00:28:13.121689 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
๐ง๐ท
45.205.1.8
|
|
20/Mar/2026:23:24:48.061447 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:23:24:48.061447 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab3JML0Q-aU5KgiE23eTIgAAAAI"]
20/Mar/2026:23:24:48.747646 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
๐ธ๐ฌ
129.212.227.251
|
|
20/Mar/2026:22:15:48.631043 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:22:15:48.631043 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 129.212.227.251] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/.env"] [unique_id "ab25BFH1gZm8QrY_QozzvAAAAAs"]
20/Mar/2026:22:15:48.631043 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 129.212.227.251] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"
...
show less
|
Web App Attack
|
|
๐ท๐บ
81.29.142.100
|
|
20/Mar/2026:21:55:21.672879 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:21:55:21.672879 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 81.29.142.100] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab20OfeZVcL0IFxwrXCZCAAAAAM"]
20/Mar/2026:21:55:22.804302 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 81.29.142.100] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host heade
...
show less
|
Web App Attack
|
|
๐บ๐ธ
104.248.61.201
|
|
20/Mar/2026:21:25:27.222388 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:21:25:27.222388 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 104.248.61.201] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab2tN1raUU3Ah4hcO0SmmQAAAAw"]
20/Mar/2026:21:25:27.553866 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 104.248.61.201] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host
...
show less
|
Web App Attack
|
|
๐ง๐ท
45.205.1.8
|
|
20/Mar/2026:21:15:27.058708 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:21:15:27.058708 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab2q34uh6dDNlutFA-E2qAAAAAc"]
20/Mar/2026:21:15:27.744417 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
๐ณ๐ฑ
176.65.149.253
|
|
20/Mar/2026:21:06:27.790440 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:21:06:27.790440 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 176.65.149.253] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "550"] [id "920280"] [msg "Request Missing a Host Header"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "ramongames.nl"] [uri "/api/.env"] [unique_id "ab2ow76G78khRvhiWFSG-QAAAAU"]
20/Mar/2026:21:06:27.790440 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 176.65.149.253] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env f
...
show less
|
Web App Attack
|
|
๐บ๐ธ
40.119.24.130
|
|
20/Mar/2026:20:32:52.537909 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:20:32:52.537909 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 40.119.24.130] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "ab2g5EOv7_oFRxfgL3U5PgAAAAA"]
20/Mar/2026:20:32:52.537909 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 40.119.24.130] ModSecurity: Warning. Pattern match
...
show less
|
Web App Attack
|
|
๐บ๐ธ
35.164.170.136
|
|
20/Mar/2026:19:31:24.052232 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:19:31:24.052232 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.164.170.136] ModSecurity: Warning. Match of "rx ^(?:(?:\\\\\\\\*|[^\\\\"(),\\\\\\\\/:;<=>?![\\\\\\\\x5c\\\\\\\\]{}]+)\\\\\\\\/(?:\\\\\\\\*|[^\\\\"(),\\\\\\\\/:;<=>?![\\\\\\\\x5c\\\\\\\\]{}]+))(?:\\\\\\\\s*+;\\\\\\\\s*+(?:(?:charset\\\\\\\\s*+=\\\\\\\\s*+(?:\\\\"?(?:iso-8859-15?|windows-1252|utf-8)\\\\\\\\b\\\\"?))|(?:(?:c(?:h(?:a(?:r(?:s(?:e[^t\\\\"(),\\\\\\\\/:;<=>?![\\\\\\\\x5c\\\\\\\\]{}]|[^e\\\\"(),/:;<=>?![\\\\\\\\x5c ..." against "REQUEST_HEADERS:Accept" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1162"] [id "920600"] [msg "Illegal Accept header: charset parameter"] [data "text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [hostname "office.
...
show less
|
Web App Attack
|
|
๐บ๐ธ
5.252.248.147
|
|
20/Mar/2026:19:20:11.523773 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:19:20:11.523773 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 5.252.248.147] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "office.vetspons.nl"] [uri "/"] [unique_id "ab2P26gq42F62hj-GIYv_QAAAAQ"]
20/Mar/2026:19:20:11.523773 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 5.252.248.147] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr
...
show less
|
Web App Attack
|
|
๐ท๐บ
37.72.140.25
|
|
20/Mar/2026:19:13:34.042994 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:19:13:34.042994 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 37.72.140.25] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "familievandemaat.nl"] [uri "/.env"] [unique_id "ab2OTq2V4pGXQnXqKA8jfgAAAAE"]
20/Mar/2026:19:13:34.042994 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 37.72.140.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "
...
show less
|
Web App Attack
|
|
๐ง๐ท
45.205.1.8
|
|
20/Mar/2026:18:59:30.755167 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:18:59:30.755167 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab2LAnPA-Zk7yEGKF4EsiQAAABE"]
20/Mar/2026:18:59:31.424460 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
๐ธ๐ฌ
160.187.141.195
|
|
20/Mar/2026:18:29:48.630868 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:18:29:48.630868 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 160.187.141.195] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "ab2EDMtksSYHrp36Jtyg0QAAAAg"]
20/Mar/2026:18:29:48.630868 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 160.187.141.195] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules
...
show less
|
Web App Attack
|
|
๐บ๐ธ
20.98.137.225
|
|
20/Mar/2026:18:25:06.111006 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:18:25:06.111006 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.98.137.225] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab2C8h3Z9g5Dh4f2yPP_KAAAAA0"]
20/Mar/2026:18:25:06.111006 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.98.137.225] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-c
...
show less
|
Web App Attack
|
|
๐ณ๐ฑ
195.178.110.246
|
|
20/Mar/2026:18:04:24.401358 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:18:04:24.401358 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.246] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/credentials"] [unique_id "ab1-GI4PR2A4DeQGzq2FaAAAABQ"]
20/Mar/2026:18:04:24.401358 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.246] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecuri
...
show less
|
Web App Attack
|
|
๐ฎ๐ณ
34.47.182.97
|
|
20/Mar/2026:17:39:13.579388 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:17:39:13.579388 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.47.182.97] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "im.vetspons.nl"] [uri "/.git/config"] [unique_id "ab14MVH1gZm8QrY_QozzVwAAAAs"]
20/Mar/2026:17:39:13.579388 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.47.182.97] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "94
...
show less
|
Web App Attack
|
|
๐ง๐ท
45.205.1.8
|
|
20/Mar/2026:17:31:28.971803 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:17:31:28.971803 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab12YJ0ltSu3zDdTICM3WAAAAAE"]
20/Mar/2026:17:31:29.693612 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
๐ธ๐ฌ
129.212.227.251
|
|
20/Mar/2026:16:41:56.781506 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:16:41:56.781506 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 129.212.227.251] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/.env"] [unique_id "ab1qxL3cl8v3KgFAKOigoQAAAAk"]
20/Mar/2026:16:41:56.781506 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 129.212.227.251] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"
...
show less
|
Web App Attack
|
|
๐ณ๐ฑ
195.178.110.162
|
|
20/Mar/2026:15:44:20.298751 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:15:44:20.298751 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.162] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/credentials"] [unique_id "ab1dRHeIM1227XnQjd4iAwAAAAg"]
20/Mar/2026:15:44:20.298751 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.162] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecuri
...
show less
|
Web App Attack
|