๐ซ๐ฎ
oh.mg
2026-09-24 00:29:13
(4 days ago)
[Thu Sep 24 02:29:13.512753 2026] [security2:error] [pid 3298464:tid 3298467] [client 43.175.168.101 ...
show more
[Thu Sep 24 02:29:13.512753 2026] [security2:error] [pid 3298464:tid 3298467] [client 43.175.168.101:54586] [client 43.175.168.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env"] [unique_id "arRu2XQFcf8_cSnJGvaB5QAAAcE"]
...
show less
Web App Attack
Bad Web Bot
๐จ๐ณ
Dominicwu
2026-09-20 22:04:22
(1 week ago)
TCP port scan against non-whitelisted ports; whitelist=80,443,23456,33333,33334,39090. Recent hits: ...
show more
TCP port scan against non-whitelisted ports; whitelist=80,443,23456,33333,33334,39090. Recent hits: dst_port=18443 src_port=30478; dst_port=18443 src_port=32540; dst_port=18443 src_port=32538; dst_port=18443 src_port=32590; dst_port=18443 src_port=32544; dst_port=18443 src_port=32536; dst_port=18443 src_port=32542; dst_port=18443 src_port=33058.
show less
Port Scan
๐ซ๐ฎ
oh.mg
2026-09-20 20:22:24
(1 week ago)
[Sun Sep 20 22:22:24.158775 2026] [security2:error] [pid 1133865:tid 1133869] [client 43.175.168.101 ...
show more
[Sun Sep 20 22:22:24.158775 2026] [security2:error] [pid 1133865:tid 1133869] [client 43.175.168.101:55084] [client 43.175.168.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.config/gcloud/credentials.db"] [unique_id "arBAgIfNyyE9p1V54l1ykAAAAII"]
[Sun Sep 20 22:22:24.158827 2026] [security2:error] [pid 1133820:tid 1133837] [client 43.175.168.101:55086] [client 43.175.168.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [
...
show less
Web App Attack
Bad Web Bot
๐จ๐ณ
Dominicwu
2026-09-19 14:08:55
(1 week ago)
TCP port scan against non-whitelisted ports; whitelist=80,443,23456,33333,33334,39090. Recent hits: ...
show more
TCP port scan against non-whitelisted ports; whitelist=80,443,23456,33333,33334,39090. Recent hits: dst_port=18443 src_port=46840; dst_port=18443 src_port=56312; dst_port=18443 src_port=56314; dst_port=18443 src_port=56308; dst_port=18443 src_port=58762; dst_port=18443 src_port=58804; dst_port=18443 src_port=58812; dst_port=18443 src_port=59342.
show less
Port Scan
๐ซ๐ฎ
oh.mg
2026-09-18 21:19:44
(1 week ago)
[Fri Sep 18 23:19:43.417820 2026] [security2:error] [pid 3899302:tid 3899314] [client 43.175.168.101 ...
show more
[Fri Sep 18 23:19:43.417820 2026] [security2:error] [pid 3899302:tid 3899314] [client 43.175.168.101:19888] [client 43.175.168.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "goatsea.tacobele.com"] [uri "/.git/HEAD"] [unique_id "aq2q78GsPiDHOd_MyIBVTwAAAQk"], referer: http://goatsea.tacobele.com:80/.git/HEAD
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-18 03:06:07
(1 week ago)
[Fri Sep 18 05:06:06.759495 2026] [security2:error] [pid 3366742:tid 3366763] [client 43.175.168.101 ...
show more
[Fri Sep 18 05:06:06.759495 2026] [security2:error] [pid 3366742:tid 3366763] [client 43.175.168.101:4070] [client 43.175.168.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.env.local"] [unique_id "aqyqnsBvPf9bC7Yg_mVFiQAAAVM"]
...
show less
Web App Attack
Bad Web Bot
๐จ๐ณ
Dominicwu
2026-09-17 18:45:30
(1 week ago)
TCP port scan against non-whitelisted ports; whitelist=80,443,23456,33333,33334,39090. Recent hits: ...
show more
TCP port scan against non-whitelisted ports; whitelist=80,443,23456,33333,33334,39090. Recent hits: dst_port=18443 src_port=41744; dst_port=18443 src_port=58186; dst_port=18443 src_port=1456; dst_port=18443 src_port=19194; dst_port=18443 src_port=23358; dst_port=18443 src_port=38938; dst_port=18443 src_port=50322; dst_port=18443 src_port=57376.
show less
Port Scan
๐ซ๐ฎ
oh.mg
2026-09-17 05:46:44
(1 week ago)
[Thu Sep 17 07:46:44.010429 2026] [security2:error] [pid 2545460:tid 2545489] [client 43.175.168.101 ...
show more
[Thu Sep 17 07:46:44.010429 2026] [security2:error] [pid 2545460:tid 2545489] [client 43.175.168.101:44690] [client 43.175.168.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.git/logs/HEAD"] [unique_id "aqt-xPs_AvTRZtaYDwguHwAAAMA"]
...
show less
Web App Attack
Bad Web Bot
๐จ๐ณ
Dominicwu
2026-09-15 18:35:31
(1 week ago)
TCP port scan against non-whitelisted ports; whitelist=80,443,23456,33333,33334,39090. Recent hits: ...
show more
TCP port scan against non-whitelisted ports; whitelist=80,443,23456,33333,33334,39090. Recent hits: dst_port=18443 src_port=2808; dst_port=18443 src_port=11406; dst_port=18443 src_port=12078; dst_port=18443 src_port=13436; dst_port=18443 src_port=14018; dst_port=18443 src_port=15570; dst_port=18443 src_port=16802; dst_port=18443 src_port=26738.
show less
Port Scan
๐ซ๐ฎ
oh.mg
2026-09-15 17:44:56
(1 week ago)
[Tue Sep 15 19:44:55.979642 2026] [security2:error] [pid 1572440:tid 1572445] [client 43.175.168.101 ...
show more
[Tue Sep 15 19:44:55.979642 2026] [security2:error] [pid 1572440:tid 1572445] [client 43.175.168.101:3934] [client 43.175.168.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/"] [unique_id "aqmEF5AyEnLG4SWRGuIF-gAAAAM"]
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-09-15 04:05:35
(1 week ago)
[Tue Sep 15 06:05:33.390247 2026] [security2:error] [pid 1618505:tid 1618515] [client 43.175.168.101 ...
show more
[Tue Sep 15 06:05:33.390247 2026] [security2:error] [pid 1618505:tid 1618515] [client 43.175.168.101:29106] [client 43.175.168.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "archive.mmn.on.ca"] [uri "/.git/config"] [unique_id "aqjEDcmXvNEB178oWIbd8AAAAIg"]
[Tue Sep 15 06:05:34.087152 2026] [security2:error] [pid 1618505:tid 1618511] [client 43.175.168.101:29106] [client 43.175.168.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10
...
show less
Web App Attack
Bad Web Bot