|
🇨🇭
35.216.144.195
|
|
20/Mar/2026:15:20:02.716447 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:15:20:02.716447 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.216.144.195] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab1Xkr4-ptQiy3C6yLjHHwAAAAM"]
20/Mar/2026:15:20:07.307864 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 35.216.144.195] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host hea
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
20/Mar/2026:15:15:19.061505 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:15:15:19.061505 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab1Wd_4Wt8oFN40iP6ZBKAAAABA"]
20/Mar/2026:15:15:19.803151 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇬
165.154.11.52
|
|
20/Mar/2026:14:32:41.260585 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:14:32:41.260585 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 165.154.11.52] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab1MeUZBILt-YrD0PDr4vQAAAA4"]
20/Mar/2026:14:32:46.694126 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 165.154.11.52] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host heade
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
20/Mar/2026:14:10:34.024455 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:14:10:34.024455 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab1HSg_k-B-M1CkbrrQTawAAAAI"]
20/Mar/2026:14:10:35.088951 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇱
204.76.203.25
|
|
20/Mar/2026:14:07:56.206413 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:14:07:56.206413 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "player.jordymarije.nl"] [uri "/.env"] [unique_id "ab1GrKTcgnxt5vnhru-Z0AAAABg"]
20/Mar/2026:14:07:56.206413 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"]
...
show less
|
Web App Attack
|
|
🇭🇰
168.76.20.229
|
|
20/Mar/2026:14:02:47.752357 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:14:02:47.752357 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 168.76.20.229] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab1Fd9-o9136arqMFtIKqgAAAAo"]
20/Mar/2026:14:02:48.853466 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 168.76.20.229] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host h
...
show less
|
Web App Attack
|
|
🇳🇱
34.158.79.105
|
|
20/Mar/2026:13:19:48.974636 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:13:19:48.974636 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.158.79.105] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "ab07ZGlRYx5uZLb5MB-1igAAAAg"]
20/Mar/2026:13:19:48.974636 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.158.79.105] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted Fil
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
20/Mar/2026:12:47:16.173642 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:12:47:16.173642 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab0zxDQNEhgoqMqca4bxtAAAABI"]
20/Mar/2026:12:47:16.835459 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
20/Mar/2026:10:56:26.955472 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:10:56:26.955472 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab0ZylslUqC-bo7iuen_HAAAAAg"]
20/Mar/2026:10:56:27.618696 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
20/Mar/2026:09:13:03.867644 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:09:13:03.867644 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "ab0BjwZU-CxCUD3cFsA8WwAAAAc"]
20/Mar/2026:09:13:04.558650 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇺🇸
20.29.19.243
|
|
20/Mar/2026:08:07:30.584855 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:08:07:30.584855 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.29.19.243] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/version"] [unique_id "abzyMtPpxaoem5-6GDk02QAAAAY"]
20/Mar/2026:08:07:30.584855 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.29.19.243] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecur
...
show less
|
Web App Attack
|
|
🇷🇺
37.72.140.25
|
|
20/Mar/2026:07:35:47.943926 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:07:35:47.943926 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 37.72.140.25] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "jordymarije.nl"] [uri "/.env"] [unique_id "abzqw0pkn4WMIDnilSCLvwAAAAQ"]
20/Mar/2026:07:35:47.943926 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 37.72.140.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
20/Mar/2026:07:14:45.329799 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:07:14:45.329799 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "abzl1XQ28HYRfy0J5DZnwgAAAAg"]
20/Mar/2026:07:14:46.168320 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇱
172.94.9.253
|
|
20/Mar/2026:07:06:43.431241 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:07:06:43.431241 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.94.9.253] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "abzj85FldgpZ0VIvF5YwBwAAABY"]
20/Mar/2026:07:06:43.431241 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.94.9.253] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rule
...
show less
|
Web App Attack
|
|
🇳🇱
89.248.168.239
|
|
20/Mar/2026:06:00:30.015689 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:06:00:30.015689 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 89.248.168.239] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "abzUbtDx7q8HcjEfptstWAAAAAY"]
20/Mar/2026:06:00:30.015689 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 89.248.168.239] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File
...
show less
|
Web App Attack
|
|
🇧🇪
79.127.164.162
|
|
20/Mar/2026:05:22:38.531788 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:05:22:38.531788 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 79.127.164.162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/.env"] [unique_id "abzLjnLZ4-O-7MDA35A8RQAAAAA"]
20/Mar/2026:05:22:38.531788 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 79.127.164.162] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"]
...
show less
|
Web App Attack
|
|
🇺🇸
20.169.85.114
|
|
20/Mar/2026:05:24:55.843188 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:05:24:55.843188 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.169.85.114] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/owa/auth/x.js"] [unique_id "abzMF6vHNgi_9CCOe4hs2wAAAAI"]
20/Mar/2026:05:24:55.843188 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.169.85.114] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
20/Mar/2026:05:12:01.399410 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:05:12:01.399410 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "abzJEcqJ3lb8BwKThrNo3wAAABA"]
20/Mar/2026:05:12:02.148830 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇱
85.11.167.7
|
|
20/Mar/2026:05:07:17.708486 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:05:07:17.708486 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 85.11.167.7] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "abzH9YfHziJFv3d2q7JAjwAAAA0"]
20/Mar/2026:05:07:17.708486 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 85.11.167.7] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/
...
show less
|
Web App Attack
|
|
🇳🇱
204.76.203.25
|
|
20/Mar/2026:04:55:01.893783 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:04:55:01.893783 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ex.vetspons.nl"] [uri "/.env"] [unique_id "abzFFXjgf0OLcmCDUf-nXwAAAAE"]
20/Mar/2026:04:55:01.893783 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "I
...
show less
|
Web App Attack
|
|
🇩🇪
167.94.146.49
|
|
20/Mar/2026:04:10:12.492213 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:04:10:12.492213 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 167.94.146.49] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "aby6lK9U5IoEDW_kKrrsUgAAAAU"]
20/Mar/2026:04:10:12.553096 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 167.94.146.49] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host heade
...
show less
|
Web App Attack
|
|
🇺🇸
135.119.97.34
|
|
20/Mar/2026:03:28:33.192985 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:03:28:33.192985 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 135.119.97.34] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/actuator/health"] [unique_id "abyw0SayMGv1NJo2l_D-HgAAAAk"]
20/Mar/2026:03:28:33.192985 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 135.119.97.34] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/shar
...
show less
|
Web App Attack
|
|
🇧🇷
45.205.1.8
|
|
20/Mar/2026:02:56:47.437860 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:02:56:47.437860 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "abypX0cA10Xpn-XFaNOXlgAAAAs"]
20/Mar/2026:02:56:48.120156 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
🇳🇱
45.130.203.149
|
|
20/Mar/2026:02:22:04.935820 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:02:22:04.935820 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.130.203.149] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.jordymarije.nl"] [uri "/.git/HEAD"] [unique_id "abyhPCMO1yO7RSCiHo27iAAAAAc"]
20/Mar/2026:02:22:04.935820 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.130.203.149] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id
...
show less
|
Web App Attack
|
|
🇺🇸
64.62.156.182
|
|
20/Mar/2026:01:38:05.134010 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:01:38:05.134010 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 64.62.156.182] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "abyW7cCM02EtHcBdFQLy6gAAAAc"]
20/Mar/2026:01:38:05.134010 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 64.62.156.182] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted
...
show less
|
Web App Attack
|