๐ซ๐ฎ
oh.mg
2026-09-18 21:19:45
(1 day ago)
[Fri Sep 18 23:19:44.816384 2026] [security2:error] [pid 3899794:tid 3899799] [client 43.152.143.180 ...
show more
[Fri Sep 18 23:19:44.816384 2026] [security2:error] [pid 3899794:tid 3899799] [client 43.152.143.180:45640] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "goatsea.tacobele.com"] [uri "/.env.backup"] [unique_id "aq2q8L3cZIEv1Et8RECKDgAAAAM"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-17 05:46:47
(3 days ago)
[Thu Sep 17 07:46:45.885996 2026] [security2:error] [pid 2761728:tid 2761735] [client 43.152.143.180 ...
show more
[Thu Sep 17 07:46:45.885996 2026] [security2:error] [pid 2761728:tid 2761735] [client 43.152.143.180:3300] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env-config.js"] [unique_id "aqt-xWztjyrj5q-hsbAmQQAAAEU"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-16 04:33:39
(4 days ago)
[Wed Sep 16 06:33:37.911724 2026] [security2:error] [pid 2049258:tid 2049284] [client 43.152.143.180 ...
show more
[Wed Sep 16 06:33:37.911724 2026] [security2:error] [pid 2049258:tid 2049284] [client 43.152.143.180:59390] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.sqlite_history"] [unique_id "aqocIYmjUUbfUO-_fO2a4AAAAFg"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-15 20:04:44
(4 days ago)
[Tue Sep 15 22:04:43.644155 2026] [security2:error] [pid 1785658:tid 1785664] [client 43.152.143.180 ...
show more
[Tue Sep 15 22:04:43.644155 2026] [security2:error] [pid 1785658:tid 1785664] [client 43.152.143.180:39808] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/internal/.env"] [unique_id "aqmk28UEzZ2NJcY-otU9UgAAAMQ"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-14 09:24:19
(6 days ago)
[Mon Sep 14 11:24:18.888065 2026] [security2:error] [pid 1030596:tid 1030615] [client 43.152.143.180 ...
show more
[Mon Sep 14 11:24:18.888065 2026] [security2:error] [pid 1030596:tid 1030615] [client 43.152.143.180:59490] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/node/.env"] [unique_id "aqe9QhR7QvbpCDMAFnsbwwAAAJA"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-13 16:16:44
(6 days ago)
[Sun Sep 13 18:16:34.808903 2026] [security2:error] [pid 2470899:tid 2470910] [client 43.152.143.180 ...
show more
[Sun Sep 13 18:16:34.808903 2026] [security2:error] [pid 2470899:tid 2470910] [client 43.152.143.180:30138] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/app/.env"] [unique_id "aqbMYj8EXXBoujGKTbYuDQAAAIk"]
[Sun Sep 13 18:16:43.752755 2026] [security2:error] [pid 2781165:tid 2781178] [client 43.152.143.180:64178] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-
...
show less
Web App Attack
Bad Web Bot
๐ฌ๐ง
Dominicwu
2026-07-28 07:16:22
(1 month ago)
43.152.143.180 - - [28/Jul/2026:07:12:30 +0000] "GET / HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT ...
show more
43.152.143.180 - - [28/Jul/2026:07:12:30 +0000] "GET / HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Edg/92.0.902.62"
43.152.143.180 - - [28/Jul/2026:07:12:30 +0000] "GET / HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15"
43.152.143.180 - - [28/Jul/2026:07:12:30 +0000] "GET / HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36"
43.152.143.180 - - [28/Jul/2026:07:12:30 +0000] "GET / HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Edg/91.0.864.70"
43.152.143.180 - - [28/Jul/2026:07:12:40 +0000] "GET / HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.164 Safari/537.
...
show less
Web App Attack
๐ซ๐ฎ
oh.mg
2026-07-21 15:23:08
(1 month ago)
43.152.143.180 - - [21/Jul/2026:17:22:50 +0200] "GET /wp-config.php;/style.css HTTP/1.1" 403 2251 "- ...
show more
43.152.143.180 - - [21/Jul/2026:17:22:50 +0200] "GET /wp-config.php;/style.css HTTP/1.1" 403 2251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.6; rv:132.0) Gecko/20100101 Firefox/132.0"
43.152.143.180 - - [21/Jul/2026:17:22:59 +0200] "GET /.env.production;/style.css HTTP/1.1" 403 882 "https://www.bing.com/" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
43.152.143.180 - - [21/Jul/2026:17:23:06 +0200] "GET /.env.local.save HTTP/1.1" 403 882 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.6; rv:132.0) Gecko/20100101 Firefox/132.0"
43.152.143.180 - - [21/Jul/2026:17:23:06 +0200] "GET /.env.backup HTTP/1.1" 403 882 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.6; rv:132.0) Gecko/20100101 Firefox/132.0"
43.152.143.180 - - [21/Jul/2026:17:23:08 +0200] "GET /.env.production.save HTTP/1.1" 403 882 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.6; rv:132.0) Gecko/20100101 Firefox/132.0"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ฎ
oh.mg
2026-07-12 17:17:23
(2 months ago)
[Sun Jul 12 19:17:21.276008 2026] [security2:error] [pid 4069489:tid 4069508] [client 43.152.143.180 ...
show more
[Sun Jul 12 19:17:21.276008 2026] [security2:error] [pid 4069489:tid 4069508] [client 43.152.143.180:41402] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env"] [unique_id "alPMIT5HHFZDtcs1WxXi8QAAARA"]
[Sun Jul 12 19:17:23.002916 2026] [security2:error] [pid 4069489:tid 4069506] [client 43.152.143.180:41402] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-09 14:19:55
(2 months ago)
[Thu Jul 09 16:19:55.166367 2026] [security2:error] [pid 3515361:tid 3515363] [client 43.152.143.180 ...
show more
[Thu Jul 09 16:19:55.166367 2026] [security2:error] [pid 3515361:tid 3515363] [client 43.152.143.180:3410] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.git/HEAD"] [unique_id "ak-uCw6yJV8Eho6cZTl0SgAAAAA"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-08 11:19:13
(2 months ago)
[Wed Jul 08 13:19:11.049356 2026] [security2:error] [pid 3271571:tid 3271578] [client 43.152.143.180 ...
show more
[Wed Jul 08 13:19:11.049356 2026] [security2:error] [pid 3271571:tid 3271578] [client 43.152.143.180:10360] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.config"] [unique_id "ak4yL9CHXNdaCSvGfe2iUwAAAUQ"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-08 02:48:39
(2 months ago)
[Wed Jul 08 04:48:34.029306 2026] [security2:error] [pid 3211036:tid 3211060] [client 43.152.143.180 ...
show more
[Wed Jul 08 04:48:34.029306 2026] [security2:error] [pid 3211036:tid 3211060] [client 43.152.143.180:61994] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.old"] [unique_id "ak26gsS3hnKW1CgpR_EmUwAAAJU"]
[Wed Jul 08 04:48:39.000282 2026] [security2:error] [pid 3211036:tid 3211057] [client 43.152.143.180:61994] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.10.
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-27 00:30:38
(2 months ago)
[Sat Jun 27 02:30:38.460199 2026] [security2:error] [pid 1186615:tid 1186632] [client 43.152.143.180 ...
show more
[Sat Jun 27 02:30:38.460199 2026] [security2:error] [pid 1186615:tid 1186632] [client 43.152.143.180:63874] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.c9/metadata/environment/.env"] [unique_id "aj8Zrm9rjDtGFjNjqE-GGgAAAE8"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-26 16:34:54
(2 months ago)
[Fri Jun 26 18:34:47.021462 2026] [security2:error] [pid 1100597:tid 1100616] [client 43.152.143.180 ...
show more
[Fri Jun 26 18:34:47.021462 2026] [security2:error] [pid 1100597:tid 1100616] [client 43.152.143.180:2730] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env-sample"] [unique_id "aj6qJyuPOOwnwwUgEaTxrwAAAA8"]
[Fri Jun 26 18:34:53.615598 2026] [security2:error] [pid 1100597:tid 1100609] [client 43.152.143.180:2730] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-24 23:37:31
(2 months ago)
[Thu Jun 25 01:31:15.299491 2026] [security2:error] [pid 818154:tid 818169] [client 43.152.143.180:4 ...
show more
[Thu Jun 25 01:31:15.299491 2026] [security2:error] [pid 818154:tid 818169] [client 43.152.143.180:41678] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/phpinfo.php"] [unique_id "ajxowz6yI2abpBsxLpZkTwAAAQ0"], referer: http://archive.mmn.on.ca/
[Thu Jun 25 01:37:31.128432 2026] [security2:error] [pid 818050:tid 818060] [client 43.152.143.180:55656] [client 43.152.143.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total
...
show less
Web App Attack
Bad Web Bot