๐ซ๐ฎ
oh.mg
2026-10-18 18:11:20
(1 day ago)
[Sun Oct 18 20:11:19.329281 2026] [security2:error] [pid 1295500:tid 1295524] [client 240d:c010:77:8 ...
show more
[Sun Oct 18 20:11:19.329281 2026] [security2:error] [pid 1295500:tid 1295524] [client 240d:c010:77:8::70:45380] [client 240d:c010:77:8::70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.aws/config"] [unique_id "atULx3jbx_UeQQMqmSq2cgAAAFY"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-10-07 17:03:05
(1 week ago)
[Wed Oct 07 19:03:04.224043 2026] [security2:error] [pid 201072:tid 201079] [client 240d:c010:77:8:: ...
show more
[Wed Oct 07 19:03:04.224043 2026] [security2:error] [pid 201072:tid 201079] [client 240d:c010:77:8::70:47064] [client 240d:c010:77:8::70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/lib/.env"] [unique_id "asZ7SNyILye5Lyb6FIGjagAAAMU"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-30 11:29:56
(2 weeks ago)
[Wed Sep 30 13:29:55.801310 2026] [security2:error] [pid 3443041:tid 3443054] [client 240d:c010:77:8 ...
show more
[Wed Sep 30 13:29:55.801310 2026] [security2:error] [pid 3443041:tid 3443054] [client 240d:c010:77:8::70:47036] [client 240d:c010:77:8::70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.docker/.env"] [unique_id "arzys1o9EJ_J8tcFWraEhQAAAAs"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-25 14:03:46
(3 weeks ago)
[Fri Sep 25 16:03:45.570357 2026] [security2:error] [pid 126090:tid 126099] [client 240d:c010:77:8:: ...
show more
[Fri Sep 25 16:03:45.570357 2026] [security2:error] [pid 126090:tid 126099] [client 240d:c010:77:8::70:35678] [client 240d:c010:77:8::70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.aws/credentials.bak"] [unique_id "arZ_QQ8exw2GsvTSLe6rFAAAAEc"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-23 03:34:09
(3 weeks ago)
[Wed Sep 23 05:34:08.900429 2026] [security2:error] [pid 2568724:tid 2568737] [client 240d:c010:77:8 ...
show more
[Wed Sep 23 05:34:08.900429 2026] [security2:error] [pid 2568724:tid 2568737] [client 240d:c010:77:8::70:28612] [client 240d:c010:77:8::70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.ssh/id_ed25519"] [unique_id "arNIsFyOfgUWiP8S2Vsc7wAAAEo"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-22 08:03:40
(3 weeks ago)
[Tue Sep 22 10:03:39.226102 2026] [security2:error] [pid 2115523:tid 2115576] [client 240d:c010:77:8 ...
show more
[Tue Sep 22 10:03:39.226102 2026] [security2:error] [pid 2115523:tid 2115576] [client 240d:c010:77:8::70:34066] [client 240d:c010:77:8::70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.config/anthropic/credentials/default.json"] [unique_id "arI2W05178eDcPu16n_21AAAAZg"]
[Tue Sep 22 10:03:39.235828 2026] [security2:error] [pid 2116937:tid 2116953] [client 240d:c010:77:8::70:34068] [client 240d:c010:77:8::70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score E
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-20 20:22:25
(4 weeks ago)
[Sun Sep 20 22:22:24.198716 2026] [security2:error] [pid 1133865:tid 1133870] [client 240d:c010:77:8 ...
show more
[Sun Sep 20 22:22:24.198716 2026] [security2:error] [pid 1133865:tid 1133870] [client 240d:c010:77:8::70:16628] [client 240d:c010:77:8::70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.aws/credentials.bak"] [unique_id "arBAgIfNyyE9p1V54l1ykQAAAIM"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-19 09:46:24
(1 month ago)
[Sat Sep 19 11:46:23.305714 2026] [security2:error] [pid 87729:tid 87741] [client 240d:c010:77:8::70 ...
show more
[Sat Sep 19 11:46:23.305714 2026] [security2:error] [pid 87729:tid 87741] [client 240d:c010:77:8::70:53160] [client 240d:c010:77:8::70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.prod"] [unique_id "aq5Z7xn2XyQI83qU_dw2iwAAAIo"]
[Sat Sep 19 11:46:23.435354 2026] [security2:error] [pid 87729:tid 87747] [client 240d:c010:77:8::70:53214] [client 240d:c010:77:8::70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CR
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-18 21:19:56
(1 month ago)
[Fri Sep 18 23:19:49.043032 2026] [security2:error] [pid 3899303:tid 3899348] [client 240d:c010:77:8 ...
show more
[Fri Sep 18 23:19:49.043032 2026] [security2:error] [pid 3899303:tid 3899348] [client 240d:c010:77:8::70:53362] [client 240d:c010:77:8::70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "goatsea.tacobele.com"] [uri "/.env.staging"] [unique_id "aq2q9fyIi3qQp0h-UlA2VQAAAVA"], referer: http://goatsea.tacobele.com:80/.env.staging
[Fri Sep 18 23:19:55.791688 2026] [security2:error] [pid 3900273:tid 3900295] [client 240d:c010:77:8::70:57596] [client 240d:c010:77:8::70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [m
...
show less
Web App Attack
Bad Web Bot