|
πΊπΈ
192.159.99.74
|
|
26/Mar/2026:17:37:38.429399 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:17:37:38.429399 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 192.159.99.74] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "ramongames.nl"] [uri "/"] [unique_id "acVg0mIVfWBWTWRqLj3o1wAAAAw"]
26/Mar/2026:17:37:38.429399 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 192.159.99.74] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/shar
...
show less
|
Web App Attack
|
|
π³π±
195.178.110.187
|
|
26/Mar/2026:17:18:38.370186 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:17:18:38.370186 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.187] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "im.vetspons.nl"] [uri "/.git/config"] [unique_id "acVcXifanvBGhi3I8LXfpgAAAA8"]
26/Mar/2026:17:18:38.370186 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.187] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME
...
show less
|
Web App Attack
|
|
π·π΄
2.57.122.173
|
|
26/Mar/2026:16:57:05.927110 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:16:57:05.927110 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 2.57.122.173] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "ramongames.nl"] [uri "/.env"] [unique_id "acVXUfWKam08C-IkWQRFjAAAAAI"]
26/Mar/2026:16:57:05.927110 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 2.57.122.173] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/s
...
show less
|
Web App Attack
|
|
πΊπΈ
159.65.232.188
|
|
26/Mar/2026:16:44:59.091994 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:16:44:59.091994 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 159.65.232.188] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ins.vetspons.nl"] [uri "/.env"] [unique_id "acVUe-_fRcCUydZRNKwj0AAAAAM"]
26/Mar/2026:16:44:59.091994 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 159.65.232.188] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg
...
show less
|
Web App Attack
|
|
π³π±
195.178.110.223
|
|
26/Mar/2026:15:43:42.544132 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:15:43:42.544132 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.223] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ins.vetspons.nl"] [uri "/.env"] [unique_id "acVGHjp4pSh1d0_cZ4sIwgAAAAU"]
26/Mar/2026:15:43:42.544132 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 195.178.110.223] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [m
...
show less
|
Web App Attack
|
|
π³π±
93.123.109.214
|
|
26/Mar/2026:15:38:38.440897 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:15:38:38.440897 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.env"] [unique_id "acVE7rDsx1FA4JyHUUooLQAAAAA"]
26/Mar/2026:15:38:38.440897 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg
...
show less
|
Web App Attack
|
|
π·π΄
2.57.122.173
|
|
26/Mar/2026:15:27:48.785309 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:15:27:48.785309 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 2.57.122.173] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "ins.vetspons.nl"] [uri "/.env"] [unique_id "acVCZHWBIHEgDjspmjYEgAAAAA0"]
26/Mar/2026:15:27:48.785309 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 2.57.122.173] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr
...
show less
|
Web App Attack
|
|
π³π±
45.148.10.23
|
|
26/Mar/2026:15:16:36.940448 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:15:16:36.940448 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.23] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "ex.vetspons.nl"] [uri "/.git/config"] [unique_id "acU_xJ3l6-eAO8wrdNMlQQAAABM"]
26/Mar/2026:15:16:36.940448 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.148.10.23] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [fil
...
show less
|
Web App Attack
|
|
πΊπΈ
124.198.131.162
|
|
26/Mar/2026:15:16:09.426735 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:15:16:09.426735 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 124.198.131.162] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "acU_qaAVRUXl0FBVtSpeOAAAAA4"]
26/Mar/2026:15:16:09.426735 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 124.198.131.162] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted Fil
...
show less
|
Web App Attack
|
|
πΊπΈ
20.169.105.90
|
|
26/Mar/2026:15:07:10.407076 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:15:07:10.407076 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.169.105.90] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/usr/share/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "55"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/developmentserver/metadatauploader"] [unique_id "acU9jqXg3isNTylEDOoubgAAAAY"]
26/Mar/2026:15:07:10.407076 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 20.169.105.90] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Hos
...
show less
|
Web App Attack
|
|
π³π±
46.151.178.13
|
|
26/Mar/2026:15:05:51.947683 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:15:05:51.947683 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 46.151.178.13] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg "Method is not allowed by policy"] [data "PROPFIND"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272/220/274"] [tag "PCI/12.1"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acU9P6AVRUXl0FBVtSpeEgAAAA4"]
26/Mar/2026:15:05:51.947683 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 46.151.178.13] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "H
...
show less
|
Web App Attack
|
|
πΊπΈ
159.65.232.188
|
|
26/Mar/2026:14:59:22.807353 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:14:59:22.807353 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 159.65.232.188] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mak.vetspons.nl"] [uri "/.env"] [unique_id "acU7ujp4pSh1d0_cZ4sIuwAAAAU"]
26/Mar/2026:14:59:22.807353 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 159.65.232.188] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg
...
show less
|
Web App Attack
|
|
ππ°
101.36.112.233
|
|
26/Mar/2026:14:46:09.763324 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:14:46:09.763324 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 101.36.112.233] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acU4obEFsKJdPHGeRa8zJwAAAAY"]
26/Mar/2026:14:46:09.763324 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 101.36.112.233] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/R
...
show less
|
Web App Attack
|
|
πΊπΈ
159.65.232.188
|
|
26/Mar/2026:14:32:31.232050 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:14:32:31.232050 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 159.65.232.188] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ramongames.nl"] [uri "/.env"] [unique_id "acU1b9hq6Q296JlyswWsvQAAAAE"]
26/Mar/2026:14:32:31.232050 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 159.65.232.188] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "
...
show less
|
Web App Attack
|
|
ππ°
152.32.133.174
|
|
26/Mar/2026:14:00:54.047635 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:14:00:54.047635 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 152.32.133.174] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acUuBk-wAP0ftoiq3A2HFgAAAAU"]
26/Mar/2026:14:01:01.059637 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 152.32.133.174] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host
...
show less
|
Web App Attack
|
|
π·πΊ
91.215.85.43
|
|
26/Mar/2026:13:53:25.642557 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:13:53:25.642557 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 91.215.85.43] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "mak.vetspons.nl"] [uri "/"] [unique_id "acUsRc8T-WdeBtDGY8hJJgAAAAc"]
26/Mar/2026:13:53:25.642557 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 91.215.85.43] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/shar
...
show less
|
Web App Attack
|
|
πΊπΈ
66.132.172.141
|
|
26/Mar/2026:13:42:13.477583 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:13:42:13.477583 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132.172.141] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acUppVeuWoFnOzZUnliicwAAAAs"]
26/Mar/2026:13:42:14.566401 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 66.132.172.141] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host hea
...
show less
|
Web App Attack
|
|
π§π·
45.205.1.8
|
|
26/Mar/2026:13:20:31.369977 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:13:20:31.369977 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acUkj8_sBi2jHhXTjMWICQAAABQ"]
26/Mar/2026:13:20:32.744168 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
πΈπ¬
160.187.141.195
|
|
26/Mar/2026:12:56:53.295505 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:12:56:53.295505 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 160.187.141.195] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/.env"] [unique_id "acUfBYVqjuutoOWHaCaWFQAAAAw"]
26/Mar/2026:12:56:53.295505 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 160.187.141.195] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules
...
show less
|
Web App Attack
|
|
π«π·
185.177.72.23
|
|
26/Mar/2026:12:10:44.624534 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:12:10:44.624534 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 185.177.72.23] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".bak"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "ramongames.nl"] [uri "/info.php.bak"] [unique_id "acUUNBn3
...
show less
|
Web App Attack
|
|
π³π±
93.123.109.214
|
|
26/Mar/2026:12:07:09.474033 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:12:07:09.474033 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.214] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ramongames.nl"] [uri "/.env"] [unique_id "acUTXYRDFa21tnYI1iMErQAAAAM"]
26/Mar/2026:12:07:09.474033 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 93.123.109.214] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "
...
show less
|
Web App Attack
|
|
π§π·
45.205.1.8
|
|
26/Mar/2026:11:59:29.901295 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:11:59:29.901295 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acURkUG7cWfsetNHQtlIUgAAAAU"]
26/Mar/2026:11:59:30.577678 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
π³π±
46.151.178.13
|
|
26/Mar/2026:11:39:34.267810 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:11:39:34.267810 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 46.151.178.13] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg "Method is not allowed by policy"] [data "PROPFIND"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272/220/274"] [tag "PCI/12.1"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acUM5pymYV3cBumY7ZxF2QAAAAM"]
26/Mar/2026:11:39:34.267810 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 46.151.178.13] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "H
...
show less
|
Web App Attack
|
|
π§π·
45.205.1.8
|
|
26/Mar/2026:10:54:45.199279 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:10:54:45.199279 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acUCZaFGIRbWqz4a9Im5xAAAABg"]
26/Mar/2026:10:54:45.884906 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.205.1.8] ModSecurity: Warning. Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/share/modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg
...
show less
|
Web App Attack
|
|
ππ°
168.76.20.229
|
|
26/Mar/2026:10:40:56.742715 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ...
show more
26/Mar/2026:10:40:56.742715 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 168.76.20.229] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/"] [unique_id "acT_KLmT3_NXYCbeUieFYAAAABU"]
26/Mar/2026:10:40:57.650321 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 168.76.20.229] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host h
...
show less
|
Web App Attack
|