๐ซ๐ฎ
oh.mg
2026-09-17 05:46:48
(2 days ago)
[Thu Sep 17 07:46:46.088925 2026] [security2:error] [pid 2561496:tid 2561499] [client 43.174.54.152: ...
show more
[Thu Sep 17 07:46:46.088925 2026] [security2:error] [pid 2561496:tid 2561499] [client 43.174.54.152:6588] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.backup"] [unique_id "aqt-xjoUTaKDQrfI3YThlwAAAAE"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-15 20:03:58
(3 days ago)
[Tue Sep 15 22:03:57.703502 2026] [security2:error] [pid 1786150:tid 1786158] [client 43.174.54.152: ...
show more
[Tue Sep 15 22:03:57.703502 2026] [security2:error] [pid 1786150:tid 1786158] [client 43.174.54.152:23746] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/frontend/.env"] [unique_id "aqmkreFT2vgEN1qk5nOYGgAAAAY"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-13 16:18:16
(6 days ago)
[Sun Sep 13 18:18:16.408316 2026] [security2:error] [pid 2470899:tid 2470911] [client 43.174.54.152: ...
show more
[Sun Sep 13 18:18:16.408316 2026] [security2:error] [pid 2470899:tid 2470911] [client 43.174.54.152:62282] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/temp/.env"] [unique_id "aqbMyD8EXXBoujGKTbYuXQAAAIo"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-12 06:53:19
(1 week ago)
[Sat Sep 12 08:53:19.378189 2026] [security2:error] [pid 3476535:tid 3476550] [client 43.174.54.152: ...
show more
[Sat Sep 12 08:53:19.378189 2026] [security2:error] [pid 3476535:tid 3476550] [client 43.174.54.152:24038] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/config.php.bak"] [unique_id "aqT239S06pZIhRSejXImxgAAAE0"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-10 22:39:56
(1 week ago)
[Fri Sep 11 00:39:56.080579 2026] [security2:error] [pid 2019224:tid 2019235] [client 43.174.54.152: ...
show more
[Fri Sep 11 00:39:56.080579 2026] [security2:error] [pid 2019224:tid 2019235] [client 43.174.54.152:53894] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.git/config"] [unique_id "aqMxvHN1-2PSd3XGnsRS_gAAAAk"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-10 21:32:27
(1 week ago)
[Thu Sep 10 23:32:24.123444 2026] [security2:error] [pid 1238472:tid 1238486] [client 43.174.54.152: ...
show more
[Thu Sep 10 23:32:24.123444 2026] [security2:error] [pid 1238472:tid 1238486] [client 43.174.54.152:16648] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/cache/.env"] [unique_id "aqMh6L258GJ9UpwLbuuiVwAAAMQ"]
[Thu Sep 10 23:32:26.426994 2026] [security2:error] [pid 1238472:tid 1238507] [client 43.174.54.152:16648] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-de
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-22 14:57:01
(1 month ago)
[Wed Jul 22 16:57:00.249075 2026] [security2:error] [pid 1838180:tid 1838188] [client 43.174.54.152: ...
show more
[Wed Jul 22 16:57:00.249075 2026] [security2:error] [pid 1838180:tid 1838188] [client 43.174.54.152:7540] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.production;/style.css"] [unique_id "amDaPBeigPkgJ13ozf1CTQAAAEY"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-21 15:23:06
(1 month ago)
[Tue Jul 21 17:22:50.368461 2026] [security2:error] [pid 1623422:tid 1623429] [client 43.174.54.152: ...
show more
[Tue Jul 21 17:22:50.368461 2026] [security2:error] [pid 1623422:tid 1623429] [client 43.174.54.152:12958] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env "] [unique_id "al-OyqMezROJTsGRdRJolwAAAMU"]
[Tue Jul 21 17:23:03.751446 2026] [security2:error] [pid 1623279:tid 1623281] [client 43.174.54.152:49380] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-15 01:21:58
(2 months ago)
[Wed Jul 15 03:21:45.623368 2026] [security2:error] [pid 377466:tid 377487] [client 43.174.54.152:50 ...
show more
[Wed Jul 15 03:21:45.623368 2026] [security2:error] [pid 377466:tid 377487] [client 43.174.54.152:50186] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env"] [unique_id "albgqUyW8R1RYQFOUb4e9AAAAFM"]
[Wed Jul 15 03:21:57.337107 2026] [security2:error] [pid 378614:tid 378635] [client 43.174.54.152:60236] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-08 12:27:48
(2 months ago)
[Wed Jul 08 14:27:48.319793 2026] [security2:error] [pid 3271571:tid 3271598] [client 43.174.54.152: ...
show more
[Wed Jul 08 14:27:48.319793 2026] [security2:error] [pid 3271571:tid 3271598] [client 43.174.54.152:30358] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env_copy"] [unique_id "ak5CRNCHXNdaCSvGfe2nyQAAAVg"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-08 11:19:20
(2 months ago)
[Wed Jul 08 13:19:19.674554 2026] [security2:error] [pid 3271572:tid 3271604] [client 43.174.54.152: ...
show more
[Wed Jul 08 13:19:19.674554 2026] [security2:error] [pid 3271572:tid 3271604] [client 43.174.54.152:32362] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/app/.env.production"] [unique_id "ak4yN8IKtQBW0g3VfkXHgQAAAYM"]
[Wed Jul 08 13:19:20.072831 2026] [security2:error] [pid 3271572:tid 3271608] [client 43.174.54.152:33162] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-27 00:30:45
(2 months ago)
[Sat Jun 27 02:30:44.249815 2026] [security2:error] [pid 1186652:tid 1186669] [client 43.174.54.152: ...
show more
[Sat Jun 27 02:30:44.249815 2026] [security2:error] [pid 1186652:tid 1186669] [client 43.174.54.152:61322] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.docker/.env"] [unique_id "aj8ZtL0rhKnQ-7mK9sK9PAAAAI4"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-26 16:35:05
(2 months ago)
[Fri Jun 26 18:34:58.669632 2026] [security2:error] [pid 1100093:tid 1100144] [client 43.174.54.152: ...
show more
[Fri Jun 26 18:34:58.669632 2026] [security2:error] [pid 1100093:tid 1100144] [client 43.174.54.152:57028] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/client/.env"] [unique_id "aj6qMoCIBKPHeahwCab9pAAAAVY"]
[Fri Jun 26 18:35:04.809431 2026] [security2:error] [pid 1100092:tid 1100118] [client 43.174.54.152:11740] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-d
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-24 04:54:08
(2 months ago)
[Wed Jun 24 06:54:07.063449 2026] [security2:error] [pid 679694:tid 679707] [client 43.174.54.152:62 ...
show more
[Wed Jun 24 06:54:07.063449 2026] [security2:error] [pid 679694:tid 679707] [client 43.174.54.152:62820] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/"] [unique_id "ajti7910C_gxMBjEvyifkwAAAIs"]
[Wed Jun 24 06:54:08.082906 2026] [security2:error] [pid 679694:tid 679714] [client 43.174.54.152:62820] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "an
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-20 02:16:30
(2 months ago)
[Sat Jun 20 04:16:26.098385 2026] [security2:error] [pid 4113103:tid 4113128] [client 43.174.54.152: ...
show more
[Sat Jun 20 04:16:26.098385 2026] [security2:error] [pid 4113103:tid 4113128] [client 43.174.54.152:23240] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.aws/credentials"] [unique_id "ajX3-r--iHvQlip58hN_VwAAAFU"]
[Sat Jun 20 04:16:26.750973 2026] [security2:error] [pid 4116258:tid 4116282] [client 43.174.54.152:24174] [client 43.174.54.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.1
...
show less
Web App Attack
Bad Web Bot