[ThuJun1120:15:24.4276792026][security2:error][pid2408920:tid2408956][client34.88.18.54:0]ModSecurit ...
show more[ThuJun1120:15:24.4276792026][security2:error][pid2408920:tid2408956][client34.88.18.54:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"biling.maurokorangraf.ch\"][uri\"/wp-json/gravitysmtp/v1/config\"][unique_id\"air7PGOxkOgqbY67SpAwRgAAABQ\"]
show less
[WedJun1006:32:37.8935412026][security2:error][pid359548:tid359843][client34.88.18.54:0]ModSecurity: ...
show more[WedJun1006:32:37.8935412026][security2:error][pid359548:tid359843][client34.88.18.54:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"retepastoralebelli.ch\"][uri\"/wp-json/gravitysmtp/v1/tests/mock-data\"][unique_id\"aijo5d2v_ImXoKTWXEP0ogAAANE\"]
show less
WebApp brute force attack detected. Multiple file scanning attempts from 34.88.18.54. Detected by fa ...
show moreWebApp brute force attack detected. Multiple file scanning attempts from 34.88.18.54. Detected by fail2ban.
show less
{"ClientAddr":"34.88.18.54:56346","ClientHost":"34.88.18.54","ClientPort":"56346","ClientUsername":" ...
show more{"ClientAddr":"34.88.18.54:56346","ClientHost":"34.88.18.54","ClientPort":"56346","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":51399,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":51399,"RequestAddr":"up.vdkln.com","RequestContentSize":0,"RequestCount":8841,"RequestHost":"up.vdkln.com","RequestMethod":"GET","RequestPath":"/wp-json/gravitysmtp/v1/settings","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-06-08T22:26:20.101083091Z","StartUTC":"2026-06-08T22:26:20.101083091Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-08T22:26:20Z"}
{"ClientAddr":"34.88.18.54:56360","ClientHost":"34.88.18.54","ClientPort":"56360","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":35233,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhea
...
show less
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.88.18.54 (FI/Finland/54.18.88.34. ...
show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.88.18.54 (FI/Finland/54.18.88.34.bc.googleusercontent.com): 1 in the last 3600 secs
show less