๐ซ๐ฎ
oh.mg
2026-09-22 08:03:43
(1 day ago)
[Tue Sep 22 10:03:40.923803 2026] [security2:error] [pid 2115523:tid 2115553] [client 43.152.23.67:5 ...
show more
[Tue Sep 22 10:03:40.923803 2026] [security2:error] [pid 2115523:tid 2115553] [client 43.152.23.67:51438] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.live"] [unique_id "arI2XE5178eDcPu16n_23AAAAYE"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-20 20:22:40
(3 days ago)
[Sun Sep 20 22:22:40.108860 2026] [security2:error] [pid 1133820:tid 1133841] [client 43.152.23.67:5 ...
show more
[Sun Sep 20 22:22:40.108860 2026] [security2:error] [pid 1133820:tid 1133841] [client 43.152.23.67:52448] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/server/.env"] [unique_id "arBAkJT0TipzQ2BUZqfEEAAAABM"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-18 21:19:58
(5 days ago)
[Fri Sep 18 23:19:58.451890 2026] [security2:error] [pid 3899303:tid 3899337] [client 43.152.23.67:4 ...
show more
[Fri Sep 18 23:19:58.451890 2026] [security2:error] [pid 3899303:tid 3899337] [client 43.152.23.67:43264] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "goatsea.tacobele.com"] [uri "/application/.env"] [unique_id "aq2q_vyIi3qQp0h-UlA2YAAAAUU"], referer: http://goatsea.tacobele.com:8080/application/.env
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-18 08:16:26
(5 days ago)
[Fri Sep 18 10:16:24.865871 2026] [security2:error] [pid 3436489:tid 3436541] [client 43.152.23.67:4 ...
show more
[Fri Sep 18 10:16:24.865871 2026] [security2:error] [pid 3436489:tid 3436541] [client 43.152.23.67:42266] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/lib/.env"] [unique_id "aqzzWErsUA2YONYcYbJc_QAAAVc"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-17 05:46:48
(6 days ago)
[Thu Sep 17 07:46:45.937911 2026] [security2:error] [pid 2545460:tid 2545499] [client 43.152.23.67:1 ...
show more
[Thu Sep 17 07:46:45.937911 2026] [security2:error] [pid 2545460:tid 2545499] [client 43.152.23.67:19588] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.3"] [unique_id "aqt-xfs_AvTRZtaYDwguMwAAAMo"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-16 04:33:40
(1 week ago)
[Wed Sep 16 06:33:37.054055 2026] [security2:error] [pid 2048148:tid 2048163] [client 43.152.23.67:4 ...
show more
[Wed Sep 16 06:33:37.054055 2026] [security2:error] [pid 2048148:tid 2048163] [client 43.152.23.67:42028] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/roundcube/logs/errors.log"] [unique_id "aqocIewIpdNRKt8xT7U5EwAAAQ0"]
[Wed Sep 16 06:33:39.241095 2026] [security2:error] [pid 2048148:tid 2048172] [client 43.152.23.67:42028] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CR
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-13 16:16:51
(1 week ago)
[Sun Sep 13 18:16:30.667519 2026] [security2:error] [pid 2837223:tid 2837248] [client 43.152.23.67:1 ...
show more
[Sun Sep 13 18:16:30.667519 2026] [security2:error] [pid 2837223:tid 2837248] [client 43.152.23.67:16458] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.txt"] [unique_id "aqbMXm8jh73Gz_sYBODMjwAAAFc"]
[Sun Sep 13 18:16:50.539542 2026] [security2:error] [pid 2470899:tid 2470924] [client 43.152.23.67:31762] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [t
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-10 21:32:17
(1 week ago)
[Thu Sep 10 23:31:50.899585 2026] [security2:error] [pid 1238472:tid 1238504] [client 43.152.23.67:1 ...
show more
[Thu Sep 10 23:31:50.899585 2026] [security2:error] [pid 1238472:tid 1238504] [client 43.152.23.67:1452] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/vendor/.env"] [unique_id "aqMhxr258GJ9UpwLbuuiKQAAANQ"]
[Thu Sep 10 23:32:16.569019 2026] [security2:error] [pid 1213289:tid 1213301] [client 43.152.23.67:13000] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-21 15:23:10
(2 months ago)
[Tue Jul 21 17:23:08.377299 2026] [security2:error] [pid 1623422:tid 1623446] [client 43.152.23.67:3 ...
show more
[Tue Jul 21 17:23:08.377299 2026] [security2:error] [pid 1623422:tid 1623446] [client 43.152.23.67:37198] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/wp-content/debug.log"] [unique_id "al-O3KMezROJTsGRdRJo_AAAANY"]
[Tue Jul 21 17:23:08.426094 2026] [security2:error] [pid 1623279:tid 1623303] [client 43.152.23.67:37202] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-08 12:29:25
(2 months ago)
[Wed Jul 08 14:28:40.003784 2026] [security2:error] [pid 3271571:tid 3271578] [client 43.152.23.67:5 ...
show more
[Wed Jul 08 14:28:40.003784 2026] [security2:error] [pid 3271571:tid 3271578] [client 43.152.23.67:56068] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/api/staging/.env"] [unique_id "ak5CeNCHXNdaCSvGfe2n8QAAAUQ"]
[Wed Jul 08 14:29:25.322599 2026] [security2:error] [pid 3271572:tid 3271617] [client 43.152.23.67:40276] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-29 19:49:19
(2 months ago)
[Mon Jun 29 21:49:18.651760 2026] [security2:error] [pid 1692527:tid 1692549] [client 43.152.23.67:2 ...
show more
[Mon Jun 29 21:49:18.651760 2026] [security2:error] [pid 1692527:tid 1692549] [client 43.152.23.67:29890] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env"] [unique_id "akLMPpHeCMyEklEsLpVJOwAAABQ"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-28 19:35:08
(2 months ago)
[Sun Jun 28 21:35:07.500627 2026] [security2:error] [pid 1472710:tid 1472728] [client 43.152.23.67:5 ...
show more
[Sun Jun 28 21:35:07.500627 2026] [security2:error] [pid 1472710:tid 1472728] [client 43.152.23.67:57638] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.git/HEAD"] [unique_id "akF3a6oaC2BLS-gO-l3OSQAAAJA"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-27 13:32:31
(2 months ago)
[Sat Jun 27 15:32:30.588692 2026] [security2:error] [pid 1254293:tid 1254310] [client 43.152.23.67:4 ...
show more
[Sat Jun 27 15:32:30.588692 2026] [security2:error] [pid 1254293:tid 1254310] [client 43.152.23.67:40216] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.lc"] [unique_id "aj_Q7qYmxBKvKM3oXEQdZwAAAA8"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-26 16:34:54
(2 months ago)
[Fri Jun 26 18:34:47.894107 2026] [security2:error] [pid 1100092:tid 1100102] [client 43.152.23.67:1 ...
show more
[Fri Jun 26 18:34:47.894107 2026] [security2:error] [pid 1100092:tid 1100102] [client 43.152.23.67:1656] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.git/description"] [unique_id "aj6qJ8ygMkVcZXbKcfjvtQAAAEc"]
[Fri Jun 26 18:34:53.662308 2026] [security2:error] [pid 1100092:tid 1100099] [client 43.152.23.67:1656] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-de
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-20 20:52:31
(3 months ago)
[Sat Jun 20 22:52:31.222446 2026] [security2:error] [pid 64111:tid 64136] [client 43.152.23.67:4954] ...
show more
[Sat Jun 20 22:52:31.222446 2026] [security2:error] [pid 64111:tid 64136] [client 43.152.23.67:4954] [client 43.152.23.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/storage/logs/laravel.log"] [unique_id "ajb9j9Ig3Pw9tcd9Z2d8ngAAAFc"]
...
show less
Web App Attack
Bad Web Bot