|
🇺🇸
20.64.104.92
|
|
[Mon Jan 12 00:29:02.040639 2026] [:error] [pid 69223] [client 20.64.104.92:55342] [client 20.64.104 ...
show more
[Mon Jan 12 00:29:02.040639 2026] [:error] [pid 69223] [client 20.64.104.92:55342] [client 20.64.104.92] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/developmentserver/metadatauploader"] [unique_id "aWRATu0EtTJo5sTVopu-hgAAAAA"]
[Mon Jan 12 00:29:15.544429 2026] [:error] [pid 69227] [client 20.64.104.92:40142] [client 20.64.104.92] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [v
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇵🇱
95.214.55.246
|
|
[Sun Jan 11 23:54:27.044292 2026] [:error] [pid 68130] [client 95.214.55.246:56988] [client 95.214.5 ...
show more
[Sun Jan 11 23:54:27.044292 2026] [:error] [pid 68130] [client 95.214.55.246:56988] [client 95.214.55.246] ModSecurity: Access denied with code 400 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/etc/modsecurity/modsecurity.conf"] [line "88"] [id "200003"] [msg "Multipart request body failed strict validation: PE 0, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM 0, IQ 0, IP 1, IH 0, FL 0"] [hostname "63.250.44.172"] [uri "/"] [unique_id "aWQ4M4miMyMxMhuyQer7qwAAAAA"]
[Sun Jan 11 23:54:38.121837 2026] [:error] [pid 68198] [client 95.214.55.246:57002] [client 95.214.55.246] ModSecurity: Access denied with code 400 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/etc/modsecurity/modsecurity.conf"] [line "88"] [id "200003"] [msg "Multipart request body failed strict validation: PE 0, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM 0, IQ 0, IP 1, IH 0, FL 0"] [hostname "63.250.44.172"] [uri "/_next"] [unique_id "aWQ4PqqXg5UVdGwClZJfCAAAAAY"]
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
167.99.45.94
|
|
[Sun Jan 11 23:46:39.710797 2026] [:error] [pid 68379] [client 167.99.45.94:57294] [client 167.99.45 ...
show more
[Sun Jan 11 23:46:39.710797 2026] [:error] [pid 68379] [client 167.99.45.94:57294] [client 167.99.45.94] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/.env"] [unique_id "aWQ2X3wAcFJN7umGq9ryGwAAAAc"]
[Sun Jan 11 23:46:40.623903 2026] [:error] [pid 68133] [client 167.99.45.94:57322] [client 167.99.45.94] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "ap
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
130.12.180.122
|
|
[Sun Jan 11 22:23:57.793793 2026] [:error] [pid 68131] [client 130.12.180.122:50658] [client 130.12. ...
show more
[Sun Jan 11 22:23:57.793793 2026] [:error] [pid 68131] [client 130.12.180.122:50658] [client 130.12.180.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 56)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/"] [unique_id "aWQi_TTgq-J0nrzHNuKG7QAAAAE"]
[Sun Jan 11 22:26:58.575374 2026] [:error] [pid 68133] [client 130.12.180.122:47074] [client 130.12.180.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 56)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [t
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇬
156.146.57.130
|
|
[Sun Jan 11 19:08:03.304515 2026] [:error] [pid 62215] [client 156.146.57.130:3470] [client 156.146. ...
show more
[Sun Jan 11 19:08:03.304515 2026] [:error] [pid 62215] [client 156.146.57.130:3470] [client 156.146.57.130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "aislingmcnally.com"] [uri "/assets/kcfinder/browse.php"] [unique_id "aWP1E1723753pBH7Ej-V_wAAAAo"]
[Sun Jan 11 19:08:04.448314 2026] [:error] [pid 42003] [client 156.146.57.130:53323] [client 156.146.57.130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇷🇺
95.215.0.144
|
|
[Sun Jan 11 15:07:03.402241 2026] [:error] [pid 42001] [client 95.215.0.144:45974] [client 95.215.0. ...
show more
[Sun Jan 11 15:07:03.402241 2026] [:error] [pid 42001] [client 95.215.0.144:45974] [client 95.215.0.144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/"] [unique_id "aWO8l5m7c0SAcJTE4_KekgAAAAI"]
[Sun Jan 11 15:09:28.921130 2026] [:error] [pid 62215] [client 95.215.0.144:51552] [client 95.215.0.144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "applic
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇪
35.233.94.99
|
|
[Sun Jan 11 14:07:55.097876 2026] [:error] [pid 42000] [client 35.233.94.99:44986] [client 35.233.94 ...
show more
[Sun Jan 11 14:07:55.097876 2026] [:error] [pid 42000] [client 35.233.94.99:44986] [client 35.233.94.99] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/"] [unique_id "aWOuu3eisDDoGFWT61kXIgAAAAE"]
[Sun Jan 11 14:08:41.056012 2026] [:error] [pid 62206] [client 35.233.94.99:42496] [client 35.233.94.99] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "applic
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
195.178.110.18
|
|
[Sun Jan 11 12:39:50.347454 2026] [:error] [pid 62206] [client 195.178.110.18:42712] [client 195.178 ...
show more
[Sun Jan 11 12:39:50.347454 2026] [:error] [pid 62206] [client 195.178.110.18:42712] [client 195.178.110.18] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "aislingmcnally.com"] [uri "/.git/config"] [unique_id "aWOaFviAmZLNqyUmD67ITQAAAAg"]
[Sun Jan 11 12:39:50.347473 2026] [:error] [pid 62215] [client 195.178.110.18:42708] [client 195.178.110.18] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
64.23.236.70
|
|
[Sun Jan 11 12:13:58.492769 2026] [:error] [pid 42002] [client 64.23.236.70:47980] [client 64.23.236 ...
show more
[Sun Jan 11 12:13:58.492769 2026] [:error] [pid 42002] [client 64.23.236.70:47980] [client 64.23.236.70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/ab2g"] [unique_id "aWOUBi9tP4Lz2UkfqyaAeQAAAAM"]
[Sun Jan 11 12:13:58.582442 2026] [:error] [pid 42003] [client 64.23.236.70:47992] [client 64.23.236.70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "ap
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇬🇧
144.126.203.82
|
|
[Sun Jan 11 11:29:47.659879 2026] [:error] [pid 42002] [client 144.126.203.82:60756] [client 144.126 ...
show more
[Sun Jan 11 11:29:47.659879 2026] [:error] [pid 42002] [client 144.126.203.82:60756] [client 144.126.203.82] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/ab2g"] [unique_id "aWOJqy9tP4Lz2UkfqyaAdQAAAAM"]
[Sun Jan 11 11:29:48.213791 2026] [:error] [pid 42003] [client 144.126.203.82:60762] [client 144.126.203.82] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"]
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
195.178.110.190
|
|
[Sun Jan 11 10:02:04.104058 2026] [:error] [pid 42000] [client 195.178.110.190:60634] [client 195.17 ...
show more
[Sun Jan 11 10:02:04.104058 2026] [:error] [pid 42000] [client 195.178.110.190:60634] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/.git/config"] [unique_id "aWN1HHeisDDoGFWT61kXAwAAAAE"]
[Sun Jan 11 10:03:45.718066 2026] [:error] [pid 42355] [client 195.178.110.190:50232] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_C
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇰🇭
111.67.102.119
|
|
[Sun Jan 11 05:34:27.939112 2026] [:error] [pid 17451] [client 111.67.102.119:64670] [client 111.67. ...
show more
[Sun Jan 11 05:34:27.939112 2026] [:error] [pid 17451] [client 111.67.102.119:64670] [client 111.67.102.119] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "aislingmcnally.com"] [uri "/xmlrpc.php"] [unique_id "aWM2Y4ZzttbxgKfnNcToowAAAAc"]
[Sun Jan 11 05:34:28.648314 2026] [:error] [pid 17451] [client 111.67.102.119:64670] [client 111.67.102.119] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_C
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
172.203.234.251
|
|
[Sun Jan 11 05:33:58.187557 2026] [:error] [pid 12244] [client 172.203.234.251:32786] [client 172.20 ...
show more
[Sun Jan 11 05:33:58.187557 2026] [:error] [pid 12244] [client 172.203.234.251:32786] [client 172.203.234.251] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aWM2RqyxaRmLLS7_mexDoQAAAAA"]
[Sun Jan 11 05:34:04.917624 2026] [:error] [pid 12248] [client 172.203.234.251:49684] [client 172.203.234.251] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
20.163.33.22
|
|
[Sun Jan 11 03:06:04.433305 2026] [:error] [pid 12244] [client 20.163.33.22:36858] [client 20.163.33 ...
show more
[Sun Jan 11 03:06:04.433305 2026] [:error] [pid 12244] [client 20.163.33.22:36858] [client 20.163.33.22] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/autodiscover/autodiscover.json"] [unique_id "aWMTnKyxaRmLLS7_mexDlAAAAAA"]
[Sun Jan 11 03:06:12.943653 2026] [:error] [pid 12247] [client 20.163.33.22:37176] [client 20.163.33.22] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
62.171.139.212
|
|
[Sun Jan 11 02:18:38.760544 2026] [:error] [pid 12244] [client 62.171.139.212:38972] [client 62.171. ...
show more
[Sun Jan 11 02:18:38.760544 2026] [:error] [pid 12244] [client 62.171.139.212:38972] [client 62.171.139.212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/000000000000-reg.cfg"] [unique_id "aWMIfqyxaRmLLS7_mexDkgAAAAA"]
[Sun Jan 11 02:18:38.781521 2026] [:error] [pid 12246] [client 62.171.139.212:58312] [client 62.171.139.212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OW
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
135.237.125.155
|
|
[Sun Jan 11 01:53:42.172675 2026] [:error] [pid 14248] [client 135.237.125.155:45938] [client 135.23 ...
show more
[Sun Jan 11 01:53:42.172675 2026] [:error] [pid 14248] [client 135.237.125.155:45938] [client 135.237.125.155] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/actuator/health"] [unique_id "aWMCpneiwE7XcA-TNu0unwAAAAY"]
[Sun Jan 11 01:53:44.276070 2026] [:error] [pid 12244] [client 135.237.125.155:52514] [client 135.237.125.155] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWA
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
193.142.147.209
|
|
[Sun Jan 11 01:39:43.369117 2026] [:error] [pid 12248] [client 193.142.147.209:49894] [client 193.14 ...
show more
[Sun Jan 11 01:39:43.369117 2026] [:error] [pid 12248] [client 193.142.147.209:49894] [client 193.142.147.209] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 79)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/"] [unique_id "aWL_Xx_bG2-eRg1Xe2MK1wAAAAQ"]
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
148.153.56.83
|
|
[Sat Jan 10 11:41:01.335629 2026] [:error] [pid 1773425] [client 148.153.56.83:59088] [client 148.15 ...
show more
[Sat Jan 10 11:41:01.335629 2026] [:error] [pid 1773425] [client 148.153.56.83:59088] [client 148.153.56.83] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/kMk9"] [unique_id "aWI6zaQVPBZGY2-b0RjlwAAAAAU"]
[Sat Jan 10 11:41:01.380839 2026] [:error] [pid 1890525] [client 148.153.56.83:59098] [client 148.153.56.83] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"]
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇵🇱
95.214.55.71
|
|
[Sat Jan 10 11:14:53.617276 2026] [:error] [pid 1772961] [client 95.214.55.71:60830] [client 95.214. ...
show more
[Sat Jan 10 11:14:53.617276 2026] [:error] [pid 1772961] [client 95.214.55.71:60830] [client 95.214.55.71] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/"] [unique_id "aWI0rWuFwguJo1Q04-svfQAAAAA"]
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
20.65.193.230
|
|
[Sat Jan 10 08:39:40.476348 2026] [:error] [pid 1850943] [client 20.65.193.230:56204] [client 20.65. ...
show more
[Sat Jan 10 08:39:40.476348 2026] [:error] [pid 1850943] [client 20.65.193.230:56204] [client 20.65.193.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/version"] [unique_id "aWIQTHP7Ev17M5kyOErR6AAAAAg"]
[Sat Jan 10 08:39:41.336425 2026] [:error] [pid 1772961] [client 20.65.193.230:41196] [client 20.65.193.230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
96.126.106.7
|
|
[Sat Jan 10 07:32:28.024696 2026] [:error] [pid 1850506] [client 96.126.106.7:57866] [client 96.126. ...
show more
[Sat Jan 10 07:32:28.024696 2026] [:error] [pid 1850506] [client 96.126.106.7:57866] [client 96.126.106.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "aislingmcnally.com"] [uri "/"] [unique_id "aWIAjFJOnutu9iZkAB5KGQAAAAc"]
[Sat Jan 10 07:32:28.285750 2026] [:error] [pid 1772961] [client 96.126.106.7:58612] [client 96.126.106.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [t
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇷🇴
2.57.122.112
|
|
[Sat Jan 10 01:48:04.132095 2026] [:error] [pid 1773425] [client 2.57.122.112:44990] [client 2.57.12 ...
show more
[Sat Jan 10 01:48:04.132095 2026] [:error] [pid 1773425] [client 2.57.122.112:44990] [client 2.57.122.112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/.env"] [unique_id "aWGv1KQVPBZGY2-b0RjlkAAAAAU"]
[Sat Jan 10 01:48:04.325185 2026] [:error] [pid 1773425] [client 2.57.122.112:44990] [client 2.57.122.112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [ta
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
62.171.139.212
|
|
[Fri Jan 09 23:13:54.429278 2026] [:error] [pid 1637189] [client 62.171.139.212:54914] [client 62.17 ...
show more
[Fri Jan 09 23:13:54.429278 2026] [:error] [pid 1637189] [client 62.171.139.212:54914] [client 62.171.139.212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/001565000000.cfg"] [unique_id "aWGLst-0d2TxSxFaGIU_VwAAAAE"]
[Fri Jan 09 23:13:54.429446 2026] [:error] [pid 1637191] [client 62.171.139.212:54716] [client 62.171.139.212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OW
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇵🇱
185.241.208.170
|
|
[Fri Jan 09 18:57:59.890121 2026] [:error] [pid 1637201] [client 185.241.208.170:34492] [client 185. ...
show more
[Fri Jan 09 18:57:59.890121 2026] [:error] [pid 1637201] [client 185.241.208.170:34492] [client 185.241.208.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/.git/config"] [unique_id "aWFPt6KXRKdSz7srs294LgAAAAc"]
[Fri Jan 09 18:59:33.281333 2026] [:error] [pid 1637190] [client 185.241.208.170:50400] [client 185.241.208.170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OW
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
20.65.194.76
|
|
[Fri Jan 09 17:33:49.946821 2026] [:error] [pid 1657049] [client 20.65.194.76:46426] [client 20.65.1 ...
show more
[Fri Jan 09 17:33:49.946821 2026] [:error] [pid 1657049] [client 20.65.194.76:46426] [client 20.65.194.76] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/developmentserver/metadatauploader"] [unique_id "aWE7_XGUm2RMaxL57SjbhgAAAAo"]
[Fri Jan 09 17:33:51.332258 2026] [:error] [pid 1637188] [client 20.65.194.76:45024] [client 20.65.194.76] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"
...
show less
|
Bad Web Bot
Web App Attack
|