🇫🇮
oh.mg
2026-11-15 21:52:28
UTC ·
(22 minutes ago)
240d:c010:75:4::38 - - [15/Nov/2026:22:52:28 +0100] "GET /sparkpost.env HTTP/1.1" 403 3148 "https://archive.mmn.on.ca/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
...
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-10-16 15:52:52
UTC ·
(4 weeks ago)
240d:c010:75:4::38 - - [16/Oct/2026:17:52:51 +0200] "GET /.env.bak HTTP/1.1" 403 3149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-09-14 09:23:59
UTC ·
(2 months ago)
240d:c010:75:4::38 - - [14/Sep/2026:11:23:58 +0200] "GET /frontend/.env HTTP/1.1" 403 882 "-" "python-httpx/0.28.1"
...
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-07-21 15:22:52
UTC ·
(3 months ago)
240d:c010:75:4::38 - - [21/Jul/2026:17:22:51 +0200] "GET /.git/config HTTP/1.1" 403 2251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.6; rv:132.0) Gecko/20100101 Firefox/132.0"
...
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-07-01 11:35:45
UTC ·
(4 months ago)
240d:c010:75:4::38 - - [01/Jul/2026:13:35:44 +0200] "GET /login.action HTTP/1.1" 403 539 "-" "Mozilla/5.0 (l9scan/2.0.9353e2734323e2437313e23343; +https://leakix.net)"
...
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-06-20 02:16:29
UTC ·
(4 months ago)
240d:c010:75:4::38 - - [20/Jun/2026:04:16:26 +0200] "GET /.env.dist HTTP/1.1" 403 2251 "-" "TLM-Audit-Scanner/1.0"
240d:c010:75:4::38 - - [20/Jun/2026:04:16:27 +0200] "GET /.git/config.bak HTTP/1.1" 403 561 "-" "TLM-Audit-Scanner/1.0"
240d:c010:75:4: ...
show more
240d:c010:75:4::38 - - [20/Jun/2026:04:16:26 +0200] "GET /.env.dist HTTP/1.1" 403 2251 "-" "TLM-Audit-Scanner/1.0"
240d:c010:75:4::38 - - [20/Jun/2026:04:16:27 +0200] "GET /.git/config.bak HTTP/1.1" 403 561 "-" "TLM-Audit-Scanner/1.0"
240d:c010:75:4::38 - - [20/Jun/2026:04:16:27 +0200] "GET /.git/config.bak HTTP/1.1" 403 561 "-" "TLM-Audit-Scanner/1.0"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-06-15 23:50:00
UTC ·
(4 months ago)
240d:c010:75:4::38 - - [16/Jun/2026:01:49:38 +0200] "GET /___proxy_subdomain_cpanel HTTP/1.1" 403 2251 "-" "Mozilla/5.0 (l9scan/2.0.9353e2734323e2437313e23343; +https://leakix.net)"
240d:c010:75:4::38 - - [16/Jun/2026:01:49:53 +0200] "GET /config.jso ...
show more
240d:c010:75:4::38 - - [16/Jun/2026:01:49:38 +0200] "GET /___proxy_subdomain_cpanel HTTP/1.1" 403 2251 "-" "Mozilla/5.0 (l9scan/2.0.9353e2734323e2437313e23343; +https://leakix.net)"
240d:c010:75:4::38 - - [16/Jun/2026:01:49:53 +0200] "GET /config.json HTTP/1.1" 403 882 "-" "Mozilla/5.0 (l9scan/2.0.9353e2734323e2437313e23343; +https://leakix.net)"
240d:c010:75:4::38 - - [16/Jun/2026:01:49:53 +0200] "GET /config.json HTTP/1.1" 403 882 "-" "Mozilla/5.0 (l9scan/2.0.9353e2734323e2437313e23343; +https://leakix.net)"
240d:c010:75:4::38 - - [16/Jun/2026:01:49:59 +0200] "GET /@vite/env HTTP/1.1" 403 539 "-" "Mozilla/5.0 (l9scan/2.0.9353e2734323e2437313e23343; +https://leakix.net)"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-06-14 04:12:48
UTC ·
(5 months ago)
[Sun Jun 14 06:12:42.912711 2026] [security2:error] [pid 2992110:tid 2992122] [client 240d:c010:75:4::38:12290] [client 240d:c010:75:4::38] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score ...
show more
[Sun Jun 14 06:12:42.912711 2026] [security2:error] [pid 2992110:tid 2992122] [client 240d:c010:75:4::38:12290] [client 240d:c010:75:4::38] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.development.local"] [unique_id "ai4qOuUEw4PKzbpl4sMc3gAAAUo"]
[Sun Jun 14 06:12:42.922151 2026] [security2:error] [pid 2992110:tid 2992136] [client 240d:c010:75:4::38:12298] [client 240d:c010:75:4::38] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score
...
show less
Web App Attack
Bad Web Bot
🇫🇮
oh.mg
2026-06-14 02:24:20
UTC ·
(5 months ago)
[Sun Jun 14 04:24:18.388448 2026] [security2:error] [pid 2992110:tid 2992117] [client 240d:c010:75:4::38:61172] [client 240d:c010:75:4::38] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score ...
show more
[Sun Jun 14 04:24:18.388448 2026] [security2:error] [pid 2992110:tid 2992117] [client 240d:c010:75:4::38:61172] [client 240d:c010:75:4::38] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/frontend/.git/config"] [unique_id "ai4Q0uUEw4PKzbpl4sMPVQAAAUU"]
[Sun Jun 14 04:24:18.395849 2026] [security2:error] [pid 2992110:tid 2992125] [client 240d:c010:75:4::38:61190] [client 240d:c010:75:4::38] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score:
...
show less
Web App Attack
Bad Web Bot
