๐ซ๐ฎ
oh.mg
2026-09-19 13:12:34
(6 hours ago)
[Sat Sep 19 15:12:33.534610 2026] [security2:error] [pid 192920:tid 192930] [client 43.174.32.249:10 ...
show more
[Sat Sep 19 15:12:33.534610 2026] [security2:error] [pid 192920:tid 192930] [client 43.174.32.249:10344] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env"] [unique_id "aq6KQbQesW-CUOMMJM-PKwAAAAg"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-18 08:15:27
(1 day ago)
[Fri Sep 18 10:15:27.240413 2026] [security2:error] [pid 3436900:tid 3436911] [client 43.174.32.249: ...
show more
[Fri Sep 18 10:15:27.240413 2026] [security2:error] [pid 3436900:tid 3436911] [client 43.174.32.249:4432] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.production"] [unique_id "aqzzHy0zb1fHvdlYOvBp-wAAAAk"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-18 03:06:13
(1 day ago)
[Fri Sep 18 05:06:07.992342 2026] [security2:error] [pid 3366686:tid 3366700] [client 43.174.32.249: ...
show more
[Fri Sep 18 05:06:07.992342 2026] [security2:error] [pid 3366686:tid 3366700] [client 43.174.32.249:38190] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.testing"] [unique_id "aqyqn4zGFcOkzt9c-G8KCgAAAMw"]
[Fri Sep 18 05:06:09.843531 2026] [security2:error] [pid 3366686:tid 3366696] [client 43.174.32.249:38190] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-15 20:05:01
(3 days ago)
[Tue Sep 15 22:04:03.239009 2026] [security2:error] [pid 1785658:tid 1785676] [client 43.174.32.249: ...
show more
[Tue Sep 15 22:04:03.239009 2026] [security2:error] [pid 1785658:tid 1785676] [client 43.174.32.249:15050] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/core/Database/.env"] [unique_id "aqmks8UEzZ2NJcY-otU9GAAAANA"]
[Tue Sep 15 22:05:00.600606 2026] [security2:error] [pid 1785658:tid 1785671] [client 43.174.32.249:44694] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-13 16:17:11
(6 days ago)
[Sun Sep 13 18:16:17.637350 2026] [security2:error] [pid 2837223:tid 2837238] [client 43.174.32.249: ...
show more
[Sun Sep 13 18:16:17.637350 2026] [security2:error] [pid 2837223:tid 2837238] [client 43.174.32.249:53432] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.sample"] [unique_id "aqbMUW8jh73Gz_sYBODMhQAAAE0"]
[Sun Sep 13 18:17:10.396326 2026] [security2:error] [pid 2837223:tid 2837245] [client 43.174.32.249:16482] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-d
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-10 21:31:15
(1 week ago)
[Thu Sep 10 23:30:42.099694 2026] [security2:error] [pid 1213289:tid 1213306] [client 43.174.32.249: ...
show more
[Thu Sep 10 23:30:42.099694 2026] [security2:error] [pid 1213289:tid 1213306] [client 43.174.32.249:60932] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.staging"] [unique_id "aqMhguOTQl0m8bD3gAn3SwAAAIc"]
[Thu Sep 10 23:31:14.497538 2026] [security2:error] [pid 1213289:tid 1213299] [client 43.174.32.249:13950] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-22 14:57:01
(1 month ago)
[Wed Jul 22 16:57:00.202072 2026] [security2:error] [pid 1837901:tid 1837915] [client 43.174.32.249: ...
show more
[Wed Jul 22 16:57:00.202072 2026] [security2:error] [pid 1837901:tid 1837915] [client 43.174.32.249:52214] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.staging"] [unique_id "amDaPHLcdVAgCcSgOWZF4AAAAMw"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-21 15:23:09
(1 month ago)
[Tue Jul 21 17:23:00.218514 2026] [security2:error] [pid 1623422:tid 1623437] [client 43.174.32.249: ...
show more
[Tue Jul 21 17:23:00.218514 2026] [security2:error] [pid 1623422:tid 1623437] [client 43.174.32.249:36576] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.production"] [unique_id "al-O1KMezROJTsGRdRJoxQAAAM0"]
[Tue Jul 21 17:23:06.326242 2026] [security2:error] [pid 1623144:tid 1623163] [client 43.174.32.249:38754] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-08 12:28:01
(2 months ago)
[Wed Jul 08 14:28:00.635448 2026] [security2:error] [pid 3271572:tid 3271622] [client 43.174.32.249: ...
show more
[Wed Jul 08 14:28:00.635448 2026] [security2:error] [pid 3271572:tid 3271622] [client 43.174.32.249:25536] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/web/.env"] [unique_id "ak5CUMIKtQBW0g3VfkXQWgAAAZU"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-08 11:19:14
(2 months ago)
[Wed Jul 08 13:19:10.235506 2026] [security2:error] [pid 3271571:tid 3271590] [client 43.174.32.249: ...
show more
[Wed Jul 08 13:19:10.235506 2026] [security2:error] [pid 3271571:tid 3271590] [client 43.174.32.249:26586] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.git/config"] [unique_id "ak4yLtCHXNdaCSvGfe2iRwAAAVA"]
[Wed Jul 08 13:19:11.465275 2026] [security2:error] [pid 3271571:tid 3271593] [client 43.174.32.249:26586] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-d
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-26 22:42:11
(2 months ago)
[Sat Jun 27 00:42:08.010674 2026] [security2:error] [pid 1186652:tid 1186663] [client 43.174.32.249: ...
show more
[Sat Jun 27 00:42:08.010674 2026] [security2:error] [pid 1186652:tid 1186663] [client 43.174.32.249:6180] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.dist"] [unique_id "aj8AQL0rhKnQ-7mK9sKv2gAAAIk"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-26 16:34:47
(2 months ago)
[Fri Jun 26 18:34:46.375558 2026] [security2:error] [pid 1100092:tid 1100115] [client 43.174.32.249: ...
show more
[Fri Jun 26 18:34:46.375558 2026] [security2:error] [pid 1100092:tid 1100115] [client 43.174.32.249:3848] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.dist"] [unique_id "aj6qJsygMkVcZXbKcfjvoAAAAFE"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-26 03:29:42
(2 months ago)
[Fri Jun 26 05:29:36.804419 2026] [security2:error] [pid 1041399:tid 1041416] [client 43.174.32.249: ...
show more
[Fri Jun 26 05:29:36.804419 2026] [security2:error] [pid 1041399:tid 1041416] [client 43.174.32.249:28764] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/admin-panel/.env"] [unique_id "aj3yIAuvOLsAkxJRn19atAAAAA8"]
[Fri Jun 26 05:29:41.445859 2026] [security2:error] [pid 1041399:tid 1041404] [client 43.174.32.249:28764] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.1
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-20 02:16:36
(2 months ago)
[Sat Jun 20 04:16:31.123712 2026] [security2:error] [pid 4116258:tid 4116262] [client 43.174.32.249: ...
show more
[Sat Jun 20 04:16:31.123712 2026] [security2:error] [pid 4116258:tid 4116262] [client 43.174.32.249:13702] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/BACK/.env"] [unique_id "ajX3_06tU4M-weX3vElLIwAAAMI"]
[Sat Jun 20 04:16:31.558392 2026] [security2:error] [pid 4116258:tid 4116283] [client 43.174.32.249:13702] [client 43.174.32.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-14 04:32:09
(3 months ago)
43.174.32.249 - - [14/Jun/2026:06:32:07 +0200] "GET /config.ini HTTP/1.1" 403 2251 "-" "Mozilla/5.0 ...
show more
43.174.32.249 - - [14/Jun/2026:06:32:07 +0200] "GET /config.ini HTTP/1.1" 403 2251 "-" "Mozilla/5.0 (Linux; Android 5.0.1; SCH-R970 Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Mobile Safari/537.36"
43.174.32.249 - - [14/Jun/2026:06:32:07 +0200] "GET /mysqldump.sql HTTP/1.1" 403 882 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/74.0.3729.169 Chrome/74.0.3729.169 Safari/537.36"
43.174.32.249 - - [14/Jun/2026:06:32:08 +0200] "GET /debug.log HTTP/1.1" 403 561 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/28.0.1469.0 Safari/537.36"
43.174.32.249 - - [14/Jun/2026:06:32:08 +0200] "GET /config/database.yml HTTP/1.1" 403 882 "-" "Mozilla/5.0 (Linux; Android 9; CLT-L29 Build/HUAWEICLT-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36 OPR/48.1.2331.132804"
43.174.32.249 - - [14/Jun/2026:06:32:08 +0200] "GET /log/debug.log HTTP/1.1" 403 561 "-" "CSS
...
show less
Bad Web Bot
Web App Attack