๐ซ๐ฎ
oh.mg
2026-09-18 03:06:10
(1 day ago)
[Fri Sep 18 05:06:08.025147 2026] [security2:error] [pid 3366714:tid 3366727] [client 43.175.119.174 ...
show more
[Fri Sep 18 05:06:08.025147 2026] [security2:error] [pid 3366714:tid 3366727] [client 43.175.119.174:46853] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.test"] [unique_id "aqyqoLOesLPT6iUF9LgkowAAAQs"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-17 05:46:47
(2 days ago)
[Thu Sep 17 07:46:45.389246 2026] [security2:error] [pid 2545460:tid 2545500] [client 43.175.119.174 ...
show more
[Thu Sep 17 07:46:45.389246 2026] [security2:error] [pid 2545460:tid 2545500] [client 43.175.119.174:14786] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.dockerfile"] [unique_id "aqt-xfs_AvTRZtaYDwguMAAAAMs"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-15 20:05:47
(3 days ago)
[Tue Sep 15 22:05:46.838591 2026] [security2:error] [pid 1785658:tid 1785667] [client 43.175.119.174 ...
show more
[Tue Sep 15 22:05:46.838591 2026] [security2:error] [pid 1785658:tid 1785667] [client 43.175.119.174:42594] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/phpversion.php"] [unique_id "aqmlGsUEzZ2NJcY-otU9qwAAAMc"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-14 09:24:05
(5 days ago)
[Mon Sep 14 11:24:04.641596 2026] [security2:error] [pid 1030596:tid 1030599] [client 43.175.119.174 ...
show more
[Mon Sep 14 11:24:04.641596 2026] [security2:error] [pid 1030596:tid 1030599] [client 43.175.119.174:21655] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/shared/.env"] [unique_id "aqe9NBR7QvbpCDMAFnsbtgAAAIE"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-13 16:17:03
(6 days ago)
[Sun Sep 13 18:17:00.122296 2026] [security2:error] [pid 2781165:tid 2781174] [client 43.175.119.174 ...
show more
[Sun Sep 13 18:17:00.122296 2026] [security2:error] [pid 2781165:tid 2781174] [client 43.175.119.174:49020] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/dist/.env"] [unique_id "aqbMfOjdc6vORKctszb00QAAAMc"]
[Sun Sep 13 18:17:03.138447 2026] [security2:error] [pid 2470899:tid 2470919] [client 43.175.119.174:5519] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-10 21:30:57
(1 week ago)
[Thu Sep 10 23:30:48.714879 2026] [security2:error] [pid 1213289:tid 1213322] [client 43.175.119.174 ...
show more
[Thu Sep 10 23:30:48.714879 2026] [security2:error] [pid 1213289:tid 1213322] [client 43.175.119.174:35090] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.sample"] [unique_id "aqMhiOOTQl0m8bD3gAn3VwAAAJY"]
[Thu Sep 10 23:30:57.333607 2026] [security2:error] [pid 1185482:tid 1185494] [client 43.175.119.174:11650] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10
...
show less
Web App Attack
Bad Web Bot
๐ฌ๐ง
Dominicwu
2026-07-28 07:16:24
(1 month ago)
43.175.119.174 - - [28/Jul/2026:07:12:29 +0000] "GET / HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT ...
show more
43.175.119.174 - - [28/Jul/2026:07:12:29 +0000] "GET / HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0"
43.175.119.174 - - [28/Jul/2026:07:12:29 +0000] "GET / HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36"
43.175.119.174 - - [28/Jul/2026:07:12:30 +0000] "GET / HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0"
43.175.119.174 - - [28/Jul/2026:07:12:33 +0000] "GET / HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:90.0) Gecko/20100101 Firefox/90.0"
43.175.119.174 - - [28/Jul/2026:07:12:34 +0000] "GET / HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
43.175.119.174 - - [28/Jul/2026:07:12:57 +0000] "GET / HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36"
43.175
...
show less
Web App Attack
๐ซ๐ฎ
oh.mg
2026-07-22 14:57:04
(1 month ago)
[Wed Jul 22 16:57:02.412435 2026] [security2:error] [pid 1838180:tid 1838182] [client 43.175.119.174 ...
show more
[Wed Jul 22 16:57:02.412435 2026] [security2:error] [pid 1838180:tid 1838182] [client 43.175.119.174:35045] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env"] [unique_id "amDaPheigPkgJ13ozf1CVAAAAEA"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-21 15:23:01
(1 month ago)
[Tue Jul 21 17:22:58.142567 2026] [security2:error] [pid 1623279:tid 1623305] [client 43.175.119.174 ...
show more
[Tue Jul 21 17:22:58.142567 2026] [security2:error] [pid 1623279:tid 1623305] [client 43.175.119.174:54998] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/database.sql"] [unique_id "al-O0vpKdhoK3P5h0KxNygAAAFg"]
[Tue Jul 21 17:23:00.288255 2026] [security2:error] [pid 1623422:tid 1623435] [client 43.175.119.174:6235] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-07-08 12:28:50
(2 months ago)
[Wed Jul 08 14:28:12.111456 2026] [security2:error] [pid 3271572:tid 3271615] [client 43.175.119.174 ...
show more
[Wed Jul 08 14:28:12.111456 2026] [security2:error] [pid 3271572:tid 3271615] [client 43.175.119.174:60403] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/application/.env"] [unique_id "ak5CXMIKtQBW0g3VfkXQZgAAAY4"]
[Wed Jul 08 14:28:50.501261 2026] [security2:error] [pid 3271572:tid 3271601] [client 43.175.119.174:18406] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-27 13:32:59
(2 months ago)
[Sat Jun 27 15:32:59.656000 2026] [security2:error] [pid 1303465:tid 1303483] [client 43.175.119.174 ...
show more
[Sat Jun 27 15:32:59.656000 2026] [security2:error] [pid 1303465:tid 1303483] [client 43.175.119.174:38589] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.testing"] [unique_id "aj_RC5kgm66WTSyYct_RKwAAANA"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-26 22:42:10
(2 months ago)
[Sat Jun 27 00:42:07.527838 2026] [security2:error] [pid 1186615:tid 1186628] [client 43.175.119.174 ...
show more
[Sat Jun 27 00:42:07.527838 2026] [security2:error] [pid 1186615:tid 1186628] [client 43.175.119.174:10811] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.dockerignore"] [unique_id "aj8AP29rjDtGFjNjqE97FQAAAEs"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-26 16:35:09
(2 months ago)
[Fri Jun 26 18:35:09.195964 2026] [security2:error] [pid 1100092:tid 1100102] [client 43.175.119.174 ...
show more
[Fri Jun 26 18:35:09.195964 2026] [security2:error] [pid 1100092:tid 1100102] [client 43.175.119.174:29891] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/terraform.tfstate.backup"] [unique_id "aj6qPcygMkVcZXbKcfjwFwAAAEc"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-26 03:29:45
(2 months ago)
[Fri Jun 26 05:29:34.558327 2026] [security2:error] [pid 1041399:tid 1041424] [client 43.175.119.174 ...
show more
[Fri Jun 26 05:29:34.558327 2026] [security2:error] [pid 1041399:tid 1041424] [client 43.175.119.174:29431] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.save"] [unique_id "aj3yHguvOLsAkxJRn19aswAAABc"]
[Fri Jun 26 05:29:45.295594 2026] [security2:error] [pid 1029963:tid 1029986] [client 43.175.119.174:31696] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-06-24 04:54:35
(2 months ago)
[Wed Jun 24 06:54:33.941074 2026] [security2:error] [pid 679725:tid 679743] [client 43.175.119.174:6 ...
show more
[Wed Jun 24 06:54:33.941074 2026] [security2:error] [pid 679725:tid 679743] [client 43.175.119.174:62249] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.uat"] [unique_id "ajtjCW1hyrwjtA0l7BU64gAAAFA"]
[Wed Jun 24 06:54:35.244780 2026] [security2:error] [pid 679725:tid 679741] [client 43.175.119.174:62249] [client 43.175.119.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.10.0-dev
...
show less
Web App Attack
Bad Web Bot