|
๐ง๐ท
45.205.1.8
|
|
20/Mar/2026:00:49:25.459370 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:00:49:25.459370 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "abyLhUpbE_aaIsSby7t3SgAAABA"]
20/Mar/2026:00:49:26.130562 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
๐บ๐ธ
20.169.105.57
|
|
20/Mar/2026:00:29:27.593435 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
20/Mar/2026:00:29:27.593435 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.169.105.57] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/developmentserver/metadatauploader"] [unique_id "abyG11323LyoFt7dIJByCAAAAAI"]
20/Mar/2026:00:29:27.593435 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.169.105.57] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Hos
...
show less
|
Web App Attack
|
|
๐บ๐ธ
9.234.10.190
|
|
19/Mar/2026:23:59:49.784920 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:23:59:49.784920 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 9.234.10.190] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/autodiscover/autodiscover.json"] [unique_id "abx_5ZPH7cHYOjsUAT8TNwAAAA8"]
19/Mar/2026:23:59:49.784920 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 9.234.10.190] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [fi
...
show less
|
Web App Attack
|
|
๐ณ๐ฑ
64.227.76.184
|
|
19/Mar/2026:23:17:47.876285 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:23:17:47.876285 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 64.227.76.184] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "abx2C4rES61Pg-qS85sotQAAABM"]
19/Mar/2026:23:17:47.876285 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 64.227.76.184] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST
...
show less
|
Web App Attack
|
|
๐ง๐ท
45.205.1.8
|
|
19/Mar/2026:23:16:07.822590 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:23:16:07.822590 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "abx1p2h7SAvkafvPKom_cQAAAAc"]
19/Mar/2026:23:16:09.206431 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
๐ฉ๐ช
84.233.216.174
|
|
19/Mar/2026:22:49:37.875620 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:22:49:37.875620 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 84.233.216.174] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg "Method is not allowed by policy"] [data "CONNECT"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272/220/274"] [tag "PCI/12.1"] [hostname "www.uni-leipzig.de"] [uri "/"] [unique_id "abxvcfUPWxqPpN1uwSp4EAAAABY"]
19/Mar/2026:22:49:37.875620 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 84.233.216.174] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#\\\\\\\\s]*)?(?:#[\\\\\\\\S]*)?|co
...
show less
|
Web App Attack
|
|
๐ฉ๐ช
84.233.216.247
|
|
19/Mar/2026:22:49:37.826305 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:22:49:37.826305 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 84.233.216.247] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg "Method is not allowed by policy"] [data "CONNECT"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272/220/274"] [tag "PCI/12.1"] [hostname "www.uni-leipzig.de"] [uri "/"] [unique_id "abxvcZHqvvKgA4hCsns3BgAAAAw"]
19/Mar/2026:22:49:37.826305 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 84.233.216.247] ModSecurity: Warning. Match of "rx ^(?i:(?:[a-z]{3,10}\\\\\\\\s+(?:\\\\\\\\w{3,7}?://[\\\\\\\\w\\\\\\\\-\\\\\\\\./]*(?::\\\\\\\\d+)?)?/[^?#]*(?:\\\\\\\\?[^#\\\\\\\\s]*)?(?:#[\\\\\\\\S]*)?|co
...
show less
|
Web App Attack
|
|
๐ณ๐ฑ
195.178.110.199
|
|
19/Mar/2026:22:47:25.953139 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:22:47:25.953139 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.199] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "abxu7dxjnjwpzCaaSLXXGgAAABQ"]
19/Mar/2026:22:47:26.009332 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.199] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Ho
...
show less
|
Web App Attack
|
|
๐ณ๐ฑ
77.83.39.82
|
|
19/Mar/2026:22:03:21.837825 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:22:03:21.837825 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.82] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "abxkmTOAf4KU7TRAGkaKmwAAAAo"]
19/Mar/2026:22:03:21.837825 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 77.83.39.82] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST
...
show less
|
Web App Attack
|
|
๐ฎ๐ฉ
36.83.123.156
|
|
19/Mar/2026:21:09:36.208369 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:21:09:36.208369 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 36.83.123.156] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "ex.vetspons.nl"] [uri "/.env/.env.bak"] [unique_id "abxYAG
...
show less
|
Web App Attack
|
|
๐ญ๐ฐ
103.52.153.122
|
|
19/Mar/2026:20:48:39.719572 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:20:48:39.719572 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 103.52.153.122] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "703"] [id "920340"] [msg "Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "141.224.196.208"] [uri "/"] [unique_id "abxTFx3Icp6PQqd-cDOLlwAAAA0"]
19/Mar/2026:20:48:39.719572 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 103.52.153.122] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "
...
show less
|
Web App Attack
|
|
๐ง๐ท
45.205.1.8
|
|
19/Mar/2026:20:11:23.332293 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:20:11:23.332293 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "abxKW0qWPc20N3eAD_iA_AAAAA4"]
19/Mar/2026:20:11:24.685192 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
๐บ๐ธ
20.172.67.176
|
|
19/Mar/2026:19:08:04.908350 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:19:08:04.908350 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.172.67.176] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/owa/auth/logon.aspx"] [unique_id "abw7hJeXiiRePyDwhTeHPwAAAAc"]
19/Mar/2026:19:08:04.908350 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.172.67.176] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/
...
show less
|
Web App Attack
|
|
๐ท๐บ
81.29.142.6
|
|
19/Mar/2026:17:07:46.603151 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:17:07:46.603151 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 81.29.142.6] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "abwfUjCyh7g3bwWVOHVjUAAAAAo"]
19/Mar/2026:17:07:48.849232 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 81.29.142.6] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is
...
show less
|
Web App Attack
|
|
๐ง๐ท
45.205.1.8
|
|
19/Mar/2026:17:07:42.368591 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:17:07:42.368591 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "abwfTrOoZjnNkZIdnyvtRwAAAAU"]
19/Mar/2026:17:07:43.042996 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
๐ณ๐ฑ
195.178.110.246
|
|
19/Mar/2026:16:43:03.575950 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:16:43:03.575950 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.246] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "abwZh9urxFupwwjwbqSpKwAAAA4"]
19/Mar/2026:16:43:03.575950 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.246] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-cr
...
show less
|
Web App Attack
|
|
๐บ๐ธ
162.142.125.41
|
|
19/Mar/2026:16:40:10.012319 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:16:40:10.012319 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 162.142.125.41] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "abwY2pqhT08W-iiFfEvD-wAAAAU"]
19/Mar/2026:16:40:10.519110 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 162.142.125.41] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host hea
...
show less
|
Web App Attack
|
|
๐ณ๐ฑ
195.178.110.162
|
|
19/Mar/2026:16:26:28.598777 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:16:26:28.598777 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.162] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.git/config"] [unique_id "abwVpASEtiKLiRgso8mZzwAAAAs"]
19/Mar/2026:16:26:28.598777 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.162] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-cr
...
show less
|
Web App Attack
|
|
๐ณ๐ฑ
34.158.79.105
|
|
19/Mar/2026:14:12:51.359308 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:14:12:51.359308 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.158.79.105] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "abv2U91UUpisXSp1XjuRNwAAAAA"]
19/Mar/2026:14:12:51.359308 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.158.79.105] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted Fil
...
show less
|
Web App Attack
|
|
๐ณ๐ฑ
34.158.79.105
|
|
19/Mar/2026:12:49:03.756511 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:12:49:03.756511 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.158.79.105] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "abvir3qLnoyCUKs4Uy438AAAAAo"]
19/Mar/2026:12:49:03.756511 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.158.79.105] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted Fil
...
show less
|
Web App Attack
|
|
๐ณ๐ฑ
204.76.203.25
|
|
19/Mar/2026:12:26:46.914586 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:12:26:46.914586 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "im.vetspons.nl"] [uri "/.env"] [unique_id "abvddurMeMiwF7QdzkmpGwAAAAE"]
19/Mar/2026:12:26:46.914586 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 204.76.203.25] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "I
...
show less
|
Web App Attack
|
|
๐ญ๐ฐ
45.142.154.65
|
|
19/Mar/2026:12:11:15.051573 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:12:11:15.051573 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.142.154.65] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "www.familievandemaat.nl"] [uri "/"] [unique_id "abvZ086FPp2hr-jHZ3qw5wAAAAA"]
19/Mar/2026:12:11:15.051573 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.142.154.65] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file
...
show less
|
Web App Attack
|
|
๐ญ๐ฐ
101.36.118.228
|
|
19/Mar/2026:12:11:14.091441 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:12:11:14.091441 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 101.36.118.228] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "www.familievandemaat.nl"] [uri "/"] [unique_id "abvZ0nS4lIZ-fBSfRRgNPwAAAAQ"]
19/Mar/2026:12:11:14.091441 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 101.36.118.228] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [fil
...
show less
|
Web App Attack
|
|
๐ญ๐ฐ
45.142.154.60
|
|
19/Mar/2026:12:10:59.061676 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:12:10:59.061676 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.142.154.60] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "familievandemaat.nl"] [uri "/"] [unique_id "abvZw2GLh2-wEtvbi0Jr6QAAAAg"]
19/Mar/2026:12:10:59.061676 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.142.154.60] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/us
...
show less
|
Web App Attack
|
|
๐ธ๐ฌ
160.187.141.195
|
|
19/Mar/2026:11:58:54.780885 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
19/Mar/2026:11:58:54.780885 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 160.187.141.195] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "abvW7lA7lUOMnn54GTVhOQAAAAQ"]
19/Mar/2026:11:58:54.780885 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 160.187.141.195] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules
...
show less
|
Web App Attack
|