🇺🇸
37.19.207.89
02 Aug 2024
[Fri Aug 02 16:11:25.967691 2024] [:error] [pid 265811:tid 265878] [client 37.19.207.89:44004] [clie ...
show more
[Fri Aug 02 16:11:25.967691 2024] [:error] [pid 265811:tid 265878] [client 37.19.207.89:44004] [client 37.19.207.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "62.197.121.143"] [uri "/"] [unique_id "ZqzpDVDrMZ4JsZVp2J5Z7AAAABU"]
[Fri Aug 02 16:16:26.233845 2024] [:error] [pid 265812:tid 265978] [client 37.19.207.89:60406] [client 37.19.207.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRI
...
show less
Hacking
Web App Attack
🇩🇪
159.223.22.132
31 Jul 2024
[Thu Aug 01 00:36:47.672099 2024] [proxy_fcgi:error] [pid 265812:tid 265999] [client 159.223.22.132: ...
show more
[Thu Aug 01 00:36:47.672099 2024] [proxy_fcgi:error] [pid 265812:tid 265999] [client 159.223.22.132:39180] AH01071: Got error 'Primary script unknown'
[Thu Aug 01 00:36:53.857434 2024] [proxy_fcgi:error] [pid 353963:tid 354004] [client 159.223.22.132:39214] AH01071: Got error 'Primary script unknown'
[Thu Aug 01 00:36:57.593378 2024] [proxy_fcgi:error] [pid 265813:tid 266002] [client 159.223.22.132:45086] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
Web App Attack
🇩🇪
209.38.216.247
31 Jul 2024
[Wed Jul 31 03:36:50.911230 2024] [proxy_fcgi:error] [pid 265812:tid 265983] [client 209.38.216.247: ...
show more
[Wed Jul 31 03:36:50.911230 2024] [proxy_fcgi:error] [pid 265812:tid 265983] [client 209.38.216.247:53310] AH01071: Got error 'Primary script unknown'
[Wed Jul 31 03:36:59.100832 2024] [proxy_fcgi:error] [pid 265812:tid 265993] [client 209.38.216.247:52250] AH01071: Got error 'Primary script unknown'
[Wed Jul 31 03:37:01.176882 2024] [proxy_fcgi:error] [pid 265812:tid 265999] [client 209.38.216.247:52274] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
Web App Attack
🇺🇸
172.235.150.214
30 Jul 2024
[Tue Jul 30 12:10:00.361354 2024] [proxy_fcgi:error] [pid 265811:tid 265875] [client 172.235.150.214 ...
show more
[Tue Jul 30 12:10:00.361354 2024] [proxy_fcgi:error] [pid 265811:tid 265875] [client 172.235.150.214:60798] AH01071: Got error 'Primary script unknown'
[Tue Jul 30 12:10:07.018115 2024] [proxy_fcgi:error] [pid 265811:tid 265881] [client 172.235.150.214:57900] AH01071: Got error 'Primary script unknown'
[Tue Jul 30 12:10:08.878267 2024] [proxy_fcgi:error] [pid 265811:tid 265858] [client 172.235.150.214:57924] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
Web App Attack
🇨🇭
179.43.167.18
20 Jul 2024
[Sat Jul 20 02:10:32.554345 2024] [:error] [pid 1408879:tid 1409033] [client 179.43.167.18:42442] [c ...
show more
[Sat Jul 20 02:10:32.554345 2024] [:error] [pid 1408879:tid 1409033] [client 179.43.167.18:42442] [client 179.43.167.18] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "chrypox.asuscomm.com"] [uri "/"] [unique_id "ZpsAeALxK9YBN-C-Mw6RdwAAAE4"]
[Sat Jul 20 02:11:02.160527 2024] [:error] [pid 1408879:tid 1409037] [client 179.43.167.18:36678] [client 179.43.167.18] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"]
...
show less
Hacking
Web App Attack
🇧🇪
85.27.5.5
16 Jul 2024
[Tue Jul 16 16:04:01.205341 2024] [:error] [pid 1408880:tid 1409046] [client 85.27.5.5:13973] [clien ...
show more
[Tue Jul 16 16:04:01.205341 2024] [:error] [pid 1408880:tid 1409046] [client 85.27.5.5:13973] [client 85.27.5.5] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "zm.chrypox.be"] [uri "/"] [unique_id "ZpZ90Yl4VfigQqznbnlkGQAAAJU"]
[Tue Jul 16 16:04:01.330553 2024] [:error] [pid 1408880:tid 1409048] [client 85.27.5.5:13973] [client 85.27.5.5] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [v
...
show less
Hacking
Web App Attack
🇧🇪
2a02:2788:6b4:37:fc91:4d39:fbe9:8b38
16 Jul 2024
[Tue Jul 16 15:26:36.899382 2024] [:error] [pid 1418844:tid 1418895] [client 2a02:2788:6b4:37:fc91:4 ...
show more
[Tue Jul 16 15:26:36.899382 2024] [:error] [pid 1418844:tid 1418895] [client 2a02:2788:6b4:37:fc91:4d39:fbe9:8b38:42562] [client 2a02:2788:6b4:37:fc91:4d39:fbe9:8b38] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "zm.chrypox.be"] [uri "/"] [unique_id "ZpZ1DAHXpmKhGVH5cPXEegAAANU"]
[Tue Jul 16 15:26:37.462362 2024] [:error] [pid 1418844:tid 1418894] [client 2a02:2788:6b4:37:fc91:4d39:fbe9:8b38:42562] [client 2a02:2788:6b4:37:fc91:4d39:fbe9:8b38] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"]
...
show less
Hacking
Web App Attack
🇩🇪
109.199.108.62
14 Jul 2024
[Sun Jul 14 02:07:21.505919 2024] [:error] [pid 1408879:tid 1409021] [client 109.199.108.62:60117] [ ...
show more
[Sun Jul 14 02:07:21.505919 2024] [:error] [pid 1408879:tid 1409021] [client 109.199.108.62:60117] [client 109.199.108.62] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "62.197.121.143"] [uri "/.env"] [unique_id "ZpMWswLxK9YBN-C-Mw6QmAAAAEg"]
[Sun Jul 14 02:53:55.383416 2024] [:error] [pid 1408879:tid 1409039] [client 109.199.108.62:53878] [client 109.199.108.62] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"]
...
show less
Hacking
Web App Attack
🇫🇷
86.238.176.128
10 Jul 2024
[Wed Jul 10 19:02:59.711583 2024] [:error] [pid 4300:tid 4379] [client 86.238.176.128:60258] [client ...
show more
[Wed Jul 10 19:02:59.711583 2024] [:error] [pid 4300:tid 4379] [client 86.238.176.128:60258] [client 86.238.176.128] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "62.197.121.143"] [uri "/"] [unique_id "Zo6-w9Pjj7u8J7K1yZoUQgAAAEI"]
[Wed Jul 10 19:03:01.262403 2024] [:error] [pid 4301:tid 4461] [client 86.238.176.128:60272] [client 86.238.176.128] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRIT
...
show less
Hacking
Web App Attack
🇺🇸
37.19.207.89
06 Jul 2024
[Sat Jul 06 07:02:12.701154 2024] [:error] [pid 5587:tid 5712] [client 37.19.207.89:21652] [client 3 ...
show more
[Sat Jul 06 07:02:12.701154 2024] [:error] [pid 5587:tid 5712] [client 37.19.207.89:21652] [client 37.19.207.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "62.197.121.143"] [uri "/"] [unique_id "ZojP0-w32eweoicSLE1ktQAAAIA"]
[Sat Jul 06 07:07:00.114188 2024] [:error] [pid 5584:tid 5748] [client 37.19.207.89:27212] [client 37.19.207.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"]
...
show less
Hacking
Web App Attack
🇰🇷
210.94.114.151
05 Jul 2024
[Fri Jul 05 14:36:47.116156 2024] [:error] [pid 5587:tid 5714] [client 210.94.114.151:48208] [client ...
show more
[Fri Jul 05 14:36:47.116156 2024] [:error] [pid 5587:tid 5714] [client 210.94.114.151:48208] [client 210.94.114.151] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "62.197.121.143"] [uri "/phpinfo"] [unique_id "Zofo3uw32eweoicSLE1kpAAAAIE"]
[Fri Jul 05 14:37:28.573729 2024] [:error] [pid 170830:tid 170995] [client 210.94.114.151:39084] [client 210.94.114.151] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [sev
...
show less
Hacking
Web App Attack
🇩🇪
77.90.7.23
04 Jul 2024
[Thu Jul 04 16:36:50.858880 2024] [:error] [pid 5584:tid 5726] [client 77.90.7.23:46048] [client 77. ...
show more
[Thu Jul 04 16:36:50.858880 2024] [:error] [pid 5584:tid 5726] [client 77.90.7.23:46048] [client 77.90.7.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "example.com"] [uri "/"] [unique_id "ZoazghV30HnWSrXij0zPdgAAAE4"]
[Thu Jul 04 16:36:55.132788 2024] [:error] [pid 5584:tid 5731] [client 77.90.7.23:46062] [client 77.90.7.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_
...
show less
Hacking
Web App Attack
🇩🇪
77.90.7.23
03 Jul 2024
[Wed Jul 03 14:13:39.605470 2024] [:error] [pid 5587:tid 5764] [client 77.90.7.23:39656] [client 77. ...
show more
[Wed Jul 03 14:13:39.605470 2024] [:error] [pid 5587:tid 5764] [client 77.90.7.23:39656] [client 77.90.7.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "example.com"] [uri "/"] [unique_id "ZoVAc-w32eweoicSLE1kRQAAAJc"]
[Wed Jul 03 14:13:47.423006 2024] [:error] [pid 5583:tid 5720] [client 77.90.7.23:39982] [client 77.90.7.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_
...
show less
Hacking
Web App Attack
🇩🇪
77.90.7.23
02 Jul 2024
[Tue Jul 02 10:45:22.173543 2024] [:error] [pid 5584:tid 5756] [client 77.90.7.23:58122] [client 77. ...
show more
[Tue Jul 02 10:45:22.173543 2024] [:error] [pid 5584:tid 5756] [client 77.90.7.23:58122] [client 77.90.7.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "example.com"] [uri "/"] [unique_id "ZoO-IhV30HnWSrXij0zPHwAAAFg"]
[Tue Jul 02 10:45:46.154440 2024] [:error] [pid 5584:tid 5681] [client 77.90.7.23:55520] [client 77.90.7.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_
...
show less
Hacking
Web App Attack
🇲🇦
105.154.195.249
01 Jul 2024
[Tue Jul 02 01:53:56.123794 2024] [:error] [pid 170830:tid 170989] [client 105.154.195.249:64755] [c ...
show more
[Tue Jul 02 01:53:56.123794 2024] [:error] [pid 170830:tid 170989] [client 105.154.195.249:64755] [client 105.154.195.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "chry.chrypox.be"] [uri "/.env"] [unique_id "ZoNBlOYYf2hWw-OleRkdRAAAAMY"]
[Tue Jul 02 01:53:56.777931 2024] [:error] [pid 5584:tid 5750] [client 105.154.195.249:64805] [client 105.154.195.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [s
...
show less
Hacking
Web App Attack
🇺🇸
146.190.144.74
01 Jul 2024
[Mon Jul 01 17:02:13.790970 2024] [proxy_fcgi:error] [pid 170830:tid 170996] [client 146.190.144.74: ...
show more
[Mon Jul 01 17:02:13.790970 2024] [proxy_fcgi:error] [pid 170830:tid 170996] [client 146.190.144.74:47058] AH01071: Got error 'Primary script unknown'
[Mon Jul 01 17:02:52.823358 2024] [proxy_fcgi:error] [pid 170830:tid 171004] [client 146.190.144.74:48962] AH01071: Got error 'Primary script unknown'
[Mon Jul 01 17:02:53.288180 2024] [proxy_fcgi:error] [pid 5587:tid 5722] [client 146.190.144.74:40516] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
Web App Attack
🇵🇦
141.98.83.197
30 Jun 2024
[Sun Jun 30 08:26:39.520252 2024] [cgid:error] [pid 475579:tid 475734] [client 141.98.83.197:40062] ...
show more
[Sun Jun 30 08:26:39.520252 2024] [cgid:error] [pid 475579:tid 475734] [client 141.98.83.197:40062] AH01264: script not found or unable to stat: /var/www/cgi-bin/skk_set.cgi
[Sun Jun 30 09:02:35.683817 2024] [cgid:error] [pid 475579:tid 475739] [client 141.98.83.197:47434] AH01264: script not found or unable to stat: /var/www/cgi-bin/skk_set.cgi
...
show less
Hacking
Web App Attack
🇪🇸
5.183.103.248
24 Jun 2024
[Tue Jun 25 00:24:42.883219 2024] [:error] [pid 81653:tid 81705] [client 5.183.103.248:55168] [clien ...
show more
[Tue Jun 25 00:24:42.883219 2024] [:error] [pid 81653:tid 81705] [client 5.183.103.248:55168] [client 5.183.103.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "example.com"] [uri "/"] [unique_id "ZnnyKvjHQGSwSLerkOtqTwAAANA"]
[Tue Jun 25 00:24:49.713623 2024] [:error] [pid 5301:tid 5433] [client 5.183.103.248:50482] [client 5.183.103.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"
...
show less
Hacking
Web App Attack
🇬🇧
167.71.128.16
23 Jun 2024
[Sun Jun 23 04:31:03.783923 2024] [proxy_fcgi:error] [pid 1133331:tid 1133499] [client 167.71.128.16 ...
show more
[Sun Jun 23 04:31:03.783923 2024] [proxy_fcgi:error] [pid 1133331:tid 1133499] [client 167.71.128.16:41066] AH01071: Got error 'Primary script unknown'
[Sun Jun 23 04:31:11.722479 2024] [proxy_fcgi:error] [pid 1136782:tid 1136824] [client 167.71.128.16:34496] AH01071: Got error 'Primary script unknown'
[Sun Jun 23 04:31:22.860224 2024] [proxy_fcgi:error] [pid 1133330:tid 1133477] [client 167.71.128.16:56166] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
Web App Attack
🇩🇪
206.189.57.162
22 Jun 2024
[Sat Jun 22 17:47:10.111532 2024] [:error] [pid 543813:tid 543935] [client 206.189.57.162:38026] [cl ...
show more
[Sat Jun 22 17:47:10.111532 2024] [:error] [pid 543813:tid 543935] [client 206.189.57.162:38026] [client 206.189.57.162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "62.197.121.143"] [uri "/aaa9"] [unique_id "Znbx_hiisZuInrYjLJQWQAAAAA8"]
[Sat Jun 22 17:47:12.112906 2024] [:error] [pid 544320:tid 544362] [client 206.189.57.162:38038] [client 206.189.57.162] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [se
...
show less
Hacking
Web App Attack
🇬🇧
157.245.36.108
21 Jun 2024
[Fri Jun 21 06:46:10.992169 2024] [:error] [pid 543813:tid 543898] [client 157.245.36.108:51908] [cl ...
show more
[Fri Jun 21 06:46:10.992169 2024] [:error] [pid 543813:tid 543898] [client 157.245.36.108:51908] [client 157.245.36.108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "62.197.121.143"] [uri "/.DS_Store"] [unique_id "ZnUFkhiisZuInrYjLJQWFAAAAAQ"]
[Fri Jun 21 06:46:12.136631 2024] [:error] [pid 543813:tid 543907] [client 157.245.36.108:51916] [client 157.245.36.108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"
...
show less
Hacking
Web App Attack
🇯🇵
34.84.251.25
14 Jun 2024
[Fri Jun 14 08:52:27.644372 2024] [proxy_fcgi:error] [pid 7637:tid 7756] [client 34.84.251.25:57259] ...
show more
[Fri Jun 14 08:52:27.644372 2024] [proxy_fcgi:error] [pid 7637:tid 7756] [client 34.84.251.25:57259] AH01071: Got error 'Primary script unknown'
[Fri Jun 14 09:21:51.121458 2024] [proxy_fcgi:error] [pid 7635:tid 7805] [client 34.84.251.25:56928] AH01071: Got error 'Primary script unknown'
[Fri Jun 14 09:46:20.198190 2024] [proxy_fcgi:error] [pid 12341:tid 12373] [client 34.84.251.25:52389] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
Web App Attack
🇺🇸
43.153.105.19
14 Jun 2024
[Fri Jun 14 02:56:16.220239 2024] [:error] [pid 12341:tid 12388] [client 43.153.105.19:57936] [clien ...
show more
[Fri Jun 14 02:56:16.220239 2024] [:error] [pid 12341:tid 12388] [client 43.153.105.19:57936] [client 43.153.105.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "62.197.121.143"] [uri "/.env"] [unique_id "ZmuVMI6elDkILguWKQaflQAAANM"]
[Fri Jun 14 02:56:28.312117 2024] [:error] [pid 12341:tid 12390] [client 43.153.105.19:55424] [client 43.153.105.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "
...
show less
Hacking
Web App Attack
🇳🇱
91.92.247.64
09 Jun 2024
[Sun Jun 09 22:30:41.799931 2024] [:error] [pid 96181:tid 96212] [client 91.92.247.64:50220] [client ...
show more
[Sun Jun 09 22:30:41.799931 2024] [:error] [pid 96181:tid 96212] [client 91.92.247.64:50220] [client 91.92.247.64] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "62.197.121.143"] [uri "/admin/.git/config"] [unique_id "ZmYQ8BvYEmmDnK7EaxZD2AAAAMM"]
[Sun Jun 09 22:30:42.712886 2024] [:error] [pid 95507:tid 95666] [client 91.92.247.64:50222] [client 91.92.247.64] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [s
...
show less
Hacking
Web App Attack
🇺🇸
37.19.207.89
08 Jun 2024
[Sun Jun 09 00:04:31.832734 2024] [:error] [pid 95506:tid 95583] [client 37.19.207.89:41498] [client ...
show more
[Sun Jun 09 00:04:31.832734 2024] [:error] [pid 95506:tid 95583] [client 37.19.207.89:41498] [client 37.19.207.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "62.197.121.143"] [uri "/"] [unique_id "ZmTVb-SpaKc9QGq8I1JFgAAAAEA"]
[Sun Jun 09 00:38:19.069838 2024] [:error] [pid 95507:tid 95672] [client 37.19.207.89:59464] [client 37.19.207.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICA
...
show less
Hacking
Web App Attack