๐ซ๐ฎ
oh.mg
2026-10-07 17:03:37
(1 day ago)
[Wed Oct 07 19:03:37.251824 2026] [security2:error] [pid 189713:tid 189724] [client 240d:c010:c8:10: ...
show more
[Wed Oct 07 19:03:37.251824 2026] [security2:error] [pid 189713:tid 189724] [client 240d:c010:c8:10::47:61366] [client 240d:c010:c8:10::47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/mandrill/.env"] [unique_id "asZ7aTmNfFngCPFg30U9bgAAAQk"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-30 11:29:58
(1 week ago)
[Wed Sep 30 13:29:57.335268 2026] [security2:error] [pid 3442616:tid 3442640] [client 240d:c010:c8:1 ...
show more
[Wed Sep 30 13:29:57.335268 2026] [security2:error] [pid 3442616:tid 3442640] [client 240d:c010:c8:10::47:44928] [client 240d:c010:c8:10::47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.save"] [unique_id "arzytUyhtMzsfRa9e8UJFwAAARY"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-27 04:26:23
(1 week ago)
[Sun Sep 27 06:26:23.257096 2026] [security2:error] [pid 1234010:tid 1234027] [client 240d:c010:c8:1 ...
show more
[Sun Sep 27 06:26:23.257096 2026] [security2:error] [pid 1234010:tid 1234027] [client 240d:c010:c8:10::47:48170] [client 240d:c010:c8:10::47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.dist"] [unique_id "aria7_3Wy0gNib_adpMo4AAAAE8"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-25 14:03:51
(1 week ago)
[Fri Sep 25 16:03:50.291443 2026] [security2:error] [pid 126122:tid 126128] [client 240d:c010:c8:10: ...
show more
[Fri Sep 25 16:03:50.291443 2026] [security2:error] [pid 126122:tid 126128] [client 240d:c010:c8:10::47:28981] [client 240d:c010:c8:10::47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/old/.env"] [unique_id "arZ_RnvWV19DMqMbrfln5AAAAIQ"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-24 06:26:01
(2 weeks ago)
[Thu Sep 24 08:26:00.514528 2026] [security2:error] [pid 3298464:tid 3298485] [client 240d:c010:c8:1 ...
show more
[Thu Sep 24 08:26:00.514528 2026] [security2:error] [pid 3298464:tid 3298485] [client 240d:c010:c8:10::47:64416] [client 240d:c010:c8:10::47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/configs/application.ini"] [unique_id "arTCeHQFcf8_cSnJGvagtAAAAdM"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-23 03:34:09
(2 weeks ago)
[Wed Sep 23 05:34:09.111035 2026] [security2:error] [pid 2568724:tid 2568734] [client 240d:c010:c8:1 ...
show more
[Wed Sep 23 05:34:09.111035 2026] [security2:error] [pid 2568724:tid 2568734] [client 240d:c010:c8:10::47:24858] [client 240d:c010:c8:10::47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/_vti_pvt/service.pwd"] [unique_id "arNIsVyOfgUWiP8S2Vsc8QAAAEc"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-22 08:03:48
(2 weeks ago)
[Tue Sep 22 10:03:41.231998 2026] [security2:error] [pid 2115523:tid 2115564] [client 240d:c010:c8:1 ...
show more
[Tue Sep 22 10:03:41.231998 2026] [security2:error] [pid 2115523:tid 2115564] [client 240d:c010:c8:10::47:23524] [client 240d:c010:c8:10::47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.qa"] [unique_id "arI2XU5178eDcPu16n_24AAAAYw"]
[Tue Sep 22 10:03:47.901624 2026] [security2:error] [pid 2115523:tid 2115566] [client 240d:c010:c8:10::47:11003] [client 240d:c010:c8:10::47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-18 03:06:09
(3 weeks ago)
[Fri Sep 18 05:06:07.757249 2026] [security2:error] [pid 3366686:tid 3366710] [client 240d:c010:c8:1 ...
show more
[Fri Sep 18 05:06:07.757249 2026] [security2:error] [pid 3366686:tid 3366710] [client 240d:c010:c8:10::47:47531] [client 240d:c010:c8:10::47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.openai"] [unique_id "aqyqn4zGFcOkzt9c-G8KBAAAANY"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-17 05:47:03
(3 weeks ago)
[Thu Sep 17 07:47:01.857241 2026] [security2:error] [pid 2545460:tid 2545513] [client 240d:c010:c8:1 ...
show more
[Thu Sep 17 07:47:01.857241 2026] [security2:error] [pid 2545460:tid 2545513] [client 240d:c010:c8:10::47:39499] [client 240d:c010:c8:10::47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/sites/default/settings.php.bak"] [unique_id "aqt-1fs_AvTRZtaYDwguewAAANg"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-16 04:33:35
(3 weeks ago)
[Wed Sep 16 06:33:34.391745 2026] [security2:error] [pid 2048148:tid 2048164] [client 240d:c010:c8:1 ...
show more
[Wed Sep 16 06:33:34.391745 2026] [security2:error] [pid 2048148:tid 2048164] [client 240d:c010:c8:10::47:63430] [client 240d:c010:c8:10::47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/nbproject/project.properties"] [unique_id "aqocHuwIpdNRKt8xT7U4_QAAAQ4"]
[Wed Sep 16 06:33:34.739158 2026] [security2:error] [pid 2048148:tid 2048157] [client 240d:c010:c8:10::47:63430] [client 240d:c010:c8:10::47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (T
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-10 21:31:09
(4 weeks ago)
[Thu Sep 10 23:30:47.780973 2026] [security2:error] [pid 1213289:tid 1213321] [client 240d:c010:c8:1 ...
show more
[Thu Sep 10 23:30:47.780973 2026] [security2:error] [pid 1213289:tid 1213321] [client 240d:c010:c8:10::47:52526] [client 240d:c010:c8:10::47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.old"] [unique_id "aqMhh-OTQl0m8bD3gAn3VgAAAJU"]
[Thu Sep 10 23:31:08.855586 2026] [security2:error] [pid 1213289:tid 1213300] [client 240d:c010:c8:10::47:46313] [client 240d:c010:c8:10::47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [v
...
show less
Web App Attack
Bad Web Bot