🇫🇮
oh.mg
2026-09-10 21:31:01
(1 day ago)
[Thu Sep 10 23:30:53.183163 2026] [security2:error] [pid 1185482:tid 1185518] [client 240d:c010:64:8 ...
show more
[Thu Sep 10 23:30:53.183163 2026] [security2:error] [pid 1185482:tid 1185518] [client 240d:c010:64:8::104:47305] [client 240d:c010:64:8::104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.ci"] [unique_id "aqMhjeSDyEA50PCJL3vL3wAAAFg"]
[Thu Sep 10 23:31:00.366587 2026] [security2:error] [pid 1185482:tid 1185513] [client 240d:c010:64:8::104:31609] [client 240d:c010:64:8::104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver
...
show less
Web App Attack
Bad Web Bot
🇫🇮
oh.mg
2026-07-21 15:23:36
(1 month ago)
240d:c010:64:8::104 - - [21/Jul/2026:17:22:58 +0200] "GET //.env/. HTTP/1.1" 403 2251 "-" "Mozilla/5 ...
show more
240d:c010:64:8::104 - - [21/Jul/2026:17:22:58 +0200] "GET //.env/. HTTP/1.1" 403 2251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.6; rv:132.0) Gecko/20100101 Firefox/132.0"
240d:c010:64:8::104 - - [21/Jul/2026:17:23:14 +0200] "GET /configuration.php.old HTTP/1.1" 403 882 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.6; rv:132.0) Gecko/20100101 Firefox/132.0"
240d:c010:64:8::104 - - [21/Jul/2026:17:23:16 +0200] "GET /config.inc.php.old HTTP/1.1" 403 882 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.6; rv:132.0) Gecko/20100101 Firefox/132.0"
240d:c010:64:8::104 - - [21/Jul/2026:17:23:16 +0200] "GET /config.inc.php.bak HTTP/1.1" 403 882 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.6; rv:132.0) Gecko/20100101 Firefox/132.0"
240d:c010:64:8::104 - - [21/Jul/2026:17:23:35 +0200] "GET /?_=v11orr4b&v=hgwbo/%2eenv HTTP/1.1" 403 882 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.6; rv:132.0) Gecko/20100101 Firefox/132.0"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-07-08 12:28:53
(2 months ago)
[Wed Jul 08 14:28:47.686333 2026] [security2:error] [pid 3271572:tid 3271603] [client 240d:c010:64:8 ...
show more
[Wed Jul 08 14:28:47.686333 2026] [security2:error] [pid 3271572:tid 3271603] [client 240d:c010:64:8::104:55711] [client 240d:c010:64:8::104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/erp/.env"] [unique_id "ak5Cf8IKtQBW0g3VfkXQfwAAAYI"]
[Wed Jul 08 14:28:51.900485 2026] [security2:error] [pid 3271572:tid 3271615] [client 240d:c010:64:8::104:55711] [client 240d:c010:64:8::104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ve
...
show less
Web App Attack
Bad Web Bot
🇫🇮
oh.mg
2026-06-27 13:33:16
(2 months ago)
[Sat Jun 27 15:33:16.325307 2026] [security2:error] [pid 1303465:tid 1303475] [client 240d:c010:64:8 ...
show more
[Sat Jun 27 15:33:16.325307 2026] [security2:error] [pid 1303465:tid 1303475] [client 240d:c010:64:8::104:13086] [client 240d:c010:64:8::104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/config/.env"] [unique_id "aj_RHJkgm66WTSyYct_RQAAAAMg"]
...
show less
Web App Attack
Bad Web Bot
🇫🇮
oh.mg
2026-06-26 22:42:13
(2 months ago)
[Sat Jun 27 00:42:08.392799 2026] [security2:error] [pid 1186652:tid 1186669] [client 240d:c010:64:8 ...
show more
[Sat Jun 27 00:42:08.392799 2026] [security2:error] [pid 1186652:tid 1186669] [client 240d:c010:64:8::104:24698] [client 240d:c010:64:8::104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.sample"] [unique_id "aj8AQL0rhKnQ-7mK9sKv3QAAAI4"]
...
show less
Web App Attack
Bad Web Bot
🇫🇮
oh.mg
2026-06-26 16:35:13
(2 months ago)
[Fri Jun 26 18:35:06.466698 2026] [security2:error] [pid 1100597:tid 1100616] [client 240d:c010:64:8 ...
show more
[Fri Jun 26 18:35:06.466698 2026] [security2:error] [pid 1100597:tid 1100616] [client 240d:c010:64:8::104:56001] [client 240d:c010:64:8::104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/root/.aws/credentials"] [unique_id "aj6qOiuPOOwnwwUgEaTyBgAAAA8"]
[Fri Jun 26 18:35:12.744242 2026] [security2:error] [pid 1100093:tid 1100132] [client 240d:c010:64:8::104:38664] [client 240d:c010:64:8::104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Sc
...
show less
Web App Attack
Bad Web Bot
🇫🇮
oh.mg
2026-06-24 04:54:36
(2 months ago)
[Wed Jun 24 06:54:34.765823 2026] [security2:error] [pid 679694:tid 679704] [client 240d:c010:64:8:: ...
show more
[Wed Jun 24 06:54:34.765823 2026] [security2:error] [pid 679694:tid 679704] [client 240d:c010:64:8::104:60578] [client 240d:c010:64:8::104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.dist"] [unique_id "ajtjCt10C_gxMBjEvyifvAAAAIg"]
[Wed Jun 24 06:54:35.766806 2026] [security2:error] [pid 679694:tid 679702] [client 240d:c010:64:8::104:60578] [client 240d:c010:64:8::104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver
...
show less
Web App Attack
Bad Web Bot
🇫🇮
oh.mg
2026-06-20 20:51:22
(2 months ago)
[Sat Jun 20 22:51:13.088371 2026] [security2:error] [pid 64111:tid 64115] [client 240d:c010:64:8::10 ...
show more
[Sat Jun 20 22:51:13.088371 2026] [security2:error] [pid 64111:tid 64115] [client 240d:c010:64:8::104:24560] [client 240d:c010:64:8::104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.production"] [unique_id "ajb9QdIg3Pw9tcd9Z2d8fQAAAEI"]
[Sat Jun 20 22:51:21.953539 2026] [security2:error] [pid 66829:tid 66847] [client 240d:c010:64:8::104:29714] [client 240d:c010:64:8::104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver
...
show less
Web App Attack
Bad Web Bot
🇫🇮
oh.mg
2026-06-14 23:13:59
(2 months ago)
[Mon Jun 15 01:10:42.270274 2026] [security2:error] [pid 3160716:tid 3160724] [client 240d:c010:64:8 ...
show more
[Mon Jun 15 01:10:42.270274 2026] [security2:error] [pid 3160716:tid 3160724] [client 240d:c010:64:8::104:63058] [client 240d:c010:64:8::104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/phpinfo"] [unique_id "ai808pGmnMn5-srp6vOvRgAAAEY"]
[Mon Jun 15 01:13:58.439456 2026] [security2:error] [pid 3159383:tid 3159390] [client 240d:c010:64:8::104:60031] [client 240d:c010:64:8::104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver
...
show less
Web App Attack
Bad Web Bot