|
π©πͺ
172.70.251.162
|
|
30/Mar/2026:17:04:14.194417 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:17:04:14.194417 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.251.162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /api/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "jordymarije.nl"] [uri "/api/.env"] [unique_id "acqQ7kz8K2a21Pj-aGt9qgAAAAY"]
30/Mar/2026:17:04:14.194417 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.251.162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.
...
show less
|
Web App Attack
|
|
π©πͺ
172.70.251.215
|
|
30/Mar/2026:17:04:13.643434 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:17:04:13.643434 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.251.215] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.staging"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "jordymarije.nl"] [uri "/.env.staging"] [unique_id "acqQ7YnEl5bMsFFp-6jypwAAAAQ"]
30/Mar/2026:17:04:13.643434 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.251.215] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVA
...
show less
|
Web App Attack
|
|
π©πͺ
172.70.251.216
|
|
30/Mar/2026:17:04:13.548904 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:17:04:13.548904 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.251.216] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "jordymarije.nl"] [uri "/.git/config"] [unique_id "acqQ7ZK5IpfeEyV6m7GfwQAAAAE"]
30/Mar/2026:17:04:13.548904 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.251.216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVA
...
show less
|
Web App Attack
|
|
π©πͺ
172.70.251.161
|
|
30/Mar/2026:17:04:13.548443 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:17:04:13.548443 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.251.161] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/heads/master"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "jordymarije.nl"] [uri "/.git/refs/heads/master"] [unique_id "acqQ7ZA_R-UfzcL-Ir-T-QAAAAw"]
30/Mar/2026:17:04:13.548443 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.251.161] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/RE
...
show less
|
Web App Attack
|
|
π©πͺ
172.70.251.159
|
|
30/Mar/2026:17:04:13.547240 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:17:04:13.547240 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.251.159] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/index"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "jordymarije.nl"] [uri "/.git/index"] [unique_id "acqQ7RZIslh-rXJ_ks3ZzgAAAAk"]
30/Mar/2026:17:04:13.547240 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.251.159] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALU
...
show less
|
Web App Attack
|
|
π©πͺ
172.70.251.160
|
|
30/Mar/2026:17:04:13.544700 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:17:04:13.544700 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.251.160] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/refs/heads/main"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "jordymarije.nl"] [uri "/.git/refs/heads/main"] [unique_id "acqQ7SI8lQqkKqmn654NMQAAAA0"]
30/Mar/2026:17:04:13.544700 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.251.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUES
...
show less
|
Web App Attack
|
|
π³π±
45.148.10.4
|
|
30/Mar/2026:15:53:53.033089 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:15:53:53.033089 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.4] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "activeer.vetspons.nl"] [uri "/.git/config"] [unique_id "acqAcRZIslh-rXJ_ks3ZuQAAAAk"]
30/Mar/2026:15:53:53.033089 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.4] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME.
...
show less
|
Web App Attack
|
|
πΊπΈ
167.172.133.233
|
|
30/Mar/2026:15:33:51.757162 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:15:33:51.757162 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 167.172.133.233] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/.env"] [unique_id "acp7v12f13wTHMbczKQ72gAAAAM"]
30/Mar/2026:15:33:51.757162 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 167.172.133.233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.c
...
show less
|
Web App Attack
|
|
π©πͺ
164.90.228.79
|
|
30/Mar/2026:15:37:29.976133 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:15:37:29.976133 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 164.90.228.79] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "radio.vetspons.nl"] [uri "/.DS_Store"] [unique_id "acp8man_kS6ediB8cWEefwAAAA8"]
30/Mar/2026:15:37:29.976133 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 164.90.228.79] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"
...
show less
|
Web App Attack
|
|
π¨π¦
20.63.96.180
|
|
30/Mar/2026:14:52:44.015779 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:14:52:44.015779 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.63.96.180] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "familievandemaat.nl"] [uri "/php.ini"] [unique_id "acpyHJK5
...
show less
|
Web App Attack
|
|
πΊπΈ
167.172.133.233
|
|
30/Mar/2026:14:26:35.371630 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:14:26:35.371630 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 167.172.133.233] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ins.vetspons.nl"] [uri "/.env"] [unique_id "acpr-8S7UCJDIRsYa85jdgAAAAc"]
30/Mar/2026:14:26:35.371630 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 167.172.133.233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"
...
show less
|
Web App Attack
|
|
π«π·
185.177.72.50
|
|
30/Mar/2026:13:57:07.789389 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:13:57:07.789389 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.50] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/.env"] [unique_id "acplE-9CaTrnPWsaDk_s0QAAAAM"]
30/Mar/2026:13:57:07.789389 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.50] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"
...
show less
|
Web App Attack
|
|
π«π·
185.177.72.30
|
|
30/Mar/2026:12:51:50.770284 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:12:51:50.770284 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.30] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ramongames.nl"] [uri "/%2f%2eenv"] [unique_id "acpVxhu0Ui1CTDDZBs0R1QAAAA0"]
30/Mar/2026:12:51:50.770284 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.30] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"]
...
show less
|
Web App Attack
|
|
π³π±
195.178.110.246
|
|
30/Mar/2026:11:43:49.334434 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:11:43:49.334434 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.246] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "ramongames.nl"] [uri "/.git/credentials"] [unique_id "acpF1WTOeAjT5s9QvpLTSwAAABY"]
30/Mar/2026:11:43:49.334434 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.246] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILE
...
show less
|
Web App Attack
|
|
π³π±
23.94.216.234
|
|
30/Mar/2026:11:09:00.622570 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:11:09:00.622570 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 23.94.216.234] ModSecurity: Warning. Pattern match "(?:\\\\\\\\$(?:\\\\\\\\((?:\\\\\\\\(.*\\\\\\\\)|.*)\\\\\\\\)|\\\\\\\\{.*\\\\\\\\})|[<>]\\\\\\\\(.*\\\\\\\\))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "367"] [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data: $((42249*44665))) found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=process.mainmodule.require(child_process).execsync(echo $((42249*44665))).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "par
...
show less
|
Web App Attack
|
|
π³π±
45.148.10.4
|
|
30/Mar/2026:10:57:24.569599 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:10:57:24.569599 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.4] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "versie.vetspons.nl"] [uri "/.git/config"] [unique_id "aco69PI48F7n5sh7-bVSFAAAAAI"]
30/Mar/2026:10:57:24.569599 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.4] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [f
...
show less
|
Web App Attack
|
|
π«π·
146.70.184.71
|
|
30/Mar/2026:09:40:55.112629 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:09:40:55.112629 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 146.70.184.71] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "radio.vetspons.nl"] [uri "/.git/HEAD"] [unique_id "acopB4hUNM4hGyNzN1QkpAAAABM"]
30/Mar/2026:09:40:55.112629 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 146.70.184.71] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "9
...
show less
|
Web App Attack
|
|
π¨π¦
143.110.213.72
|
|
30/Mar/2026:09:33:58.654261 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:09:33:58.654261 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 143.110.213.72] ModSecurity: Warning. Matched phrase "/.DS_Store" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.DS_Store found within REQUEST_FILENAME: /.ds_store"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "req.jordymarije.nl"] [uri "/.DS_Store"] [unique_id "aconZlPZvqT3yD_iP3v5MgAAAAs"]
30/Mar/2026:09:33:58.654261 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 143.110.213.72] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOC
...
show less
|
Web App Attack
|
|
π³π±
45.148.10.23
|
|
30/Mar/2026:08:44:08.764757 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:08:44:08.764757 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.23] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "radio.vetspons.nl"] [uri "/.git/HEAD"] [unique_id "acobuMRDKdG3-KNWLASxbQAAAA8"]
30/Mar/2026:08:44:08.764757 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.23] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949
...
show less
|
Web App Attack
|
|
π³π±
45.134.225.36
|
|
30/Mar/2026:06:56:33.711228 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:06:56:33.711228 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.134.225.36] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "familievandemaat.nl"] [uri "/"] [unique_id "acoCgeuHHq7rM-JvVWp5VQAAAAA"]
30/Mar/2026:06:56:33.711228 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.134.225.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 a
...
show less
|
Web App Attack
|
|
π·πΊ
37.72.140.3
|
|
30/Mar/2026:06:05:34.849928 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:06:05:34.849928 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 37.72.140.3] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "familievandemaat.nl"] [uri "/.env"] [unique_id "acn2jvQznkHJdESwO6VA-AAAAAI"]
30/Mar/2026:06:05:34.849928 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 37.72.140.3] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/u
...
show less
|
Web App Attack
|
|
π³π±
195.178.110.246
|
|
30/Mar/2026:03:13:07.006776 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:03:13:07.006776 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.246] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "familievandemaat.nl"] [uri "/.git/credentials"] [unique_id "acnOIqYZPMzcSSl9u1B5gQAAAAo"]
30/Mar/2026:03:13:07.006776 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.246] ModSecurity: Warning. Matched phrase "/.git/" at REQUES
...
show less
|
Web App Attack
|
|
π¨π¦
20.63.96.180
|
|
30/Mar/2026:03:11:33.934737 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:03:11:33.934737 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.63.96.180] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "familievandemaat.nl"] [uri "/php.ini"] [unique_id "acnNxXPY
...
show less
|
Web App Attack
|
|
π³π±
45.148.10.4
|
|
30/Mar/2026:00:29:46.375596 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
30/Mar/2026:00:29:46.375596 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.4] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "jordymarije.nl"] [uri "/.git/config"] [unique_id "acmn2poJGl3cauL9F1KhQQAAABY"]
30/Mar/2026:00:29:46.375596 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.4] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file
...
show less
|
Web App Attack
|
|
π―π΅
176.34.0.240
|
|
29/Mar/2026:21:50:01.095684 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
29/Mar/2026:21:50:01.095684 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 176.34.0.240] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ins.vetspons.nl"] [uri "/.env"] [unique_id "acmCaVtCSCcoEGgH_XABGgAAAAI"]
29/Mar/2026:21:50:01.095684 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 176.34.0.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [lin
...
show less
|
Web App Attack
|