|
🇺🇸
172.71.174.229
|
|
[Mon Dec 29 21:43:44.222920 2025] [:error] [pid 1268258] [client 172.71.174.229:12400] [client 172.7 ...
show more
[Mon Dec 29 21:43:44.222920 2025] [:error] [pid 1268258] [client 172.71.174.229:12400] [client 172.71.174.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/new/.env.local"] [unique_id "aVL2EPn16GrmJjCboCm52gAAAAs"]
[Mon Dec 29 21:44:30.197199 2025] [:error] [pid 1269604] [client 172.71.174.229:10549] [client 172.71.174.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "O
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
172.71.175.63
|
|
[Mon Dec 29 21:44:26.800062 2025] [:error] [pid 1268336] [client 172.71.175.63:13811] [client 172.71 ...
show more
[Mon Dec 29 21:44:26.800062 2025] [:error] [pid 1268336] [client 172.71.175.63:13811] [client 172.71.175.63] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/main/.env"] [unique_id "aVL2Or0NmLsd-j6H2rc_CgAAAAI"]
[Mon Dec 29 21:44:27.169579 2025] [:error] [pid 1268336] [client 172.71.175.63:13811] [client 172.71.175.63] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
172.71.151.77
|
|
[Mon Dec 29 21:44:25.817062 2025] [:error] [pid 1268882] [client 172.71.151.77:13083] [client 172.71 ...
show more
[Mon Dec 29 21:44:25.817062 2025] [:error] [pid 1268882] [client 172.71.151.77:13083] [client 172.71.151.77] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/nginx/.env"] [unique_id "aVL2OS-se4di-k_jjYUvHwAAAAY"]
[Mon Dec 29 21:44:26.543112 2025] [:error] [pid 1268882] [client 172.71.151.77:13083] [client 172.71.151.77] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
104.23.170.157
|
|
[Mon Dec 29 21:43:51.866643 2025] [:error] [pid 1269007] [client 104.23.170.157:12007] [client 104.2 ...
show more
[Mon Dec 29 21:43:51.866643 2025] [:error] [pid 1269007] [client 104.23.170.157:12007] [client 104.23.170.157] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/docker/.env"] [unique_id "aVL2F191SWoVxP146mTWvQAAAAA"]
[Mon Dec 29 21:43:56.138093 2025] [:error] [pid 1269007] [client 104.23.170.157:12007] [client 104.23.170.157] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWAS
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
172.71.174.197
|
|
[Mon Dec 29 21:43:49.469348 2025] [:error] [pid 1268884] [client 172.71.174.197:13599] [client 172.7 ...
show more
[Mon Dec 29 21:43:49.469348 2025] [:error] [pid 1268884] [client 172.71.174.197:13599] [client 172.71.174.197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/cron/.env"] [unique_id "aVL2FZFVKnDZMLPsB6s_dQAAAAg"]
[Mon Dec 29 21:43:50.700764 2025] [:error] [pid 1268884] [client 172.71.174.197:13599] [client 172.71.174.197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
172.71.175.7
|
|
[Mon Dec 29 21:43:46.776009 2025] [:error] [pid 1268883] [client 172.71.175.7:12875] [client 172.71. ...
show more
[Mon Dec 29 21:43:46.776009 2025] [:error] [pid 1268883] [client 172.71.175.7:12875] [client 172.71.175.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/new/.env.staging"] [unique_id "aVL2EnuOpEb8IalWC599xQAAAAc"]
[Mon Dec 29 21:43:49.256481 2025] [:error] [pid 1268883] [client 172.71.175.7:12875] [client 172.71.175.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_C
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
162.159.113.2
|
|
[Mon Dec 29 21:43:32.563700 2025] [:error] [pid 1268882] [client 162.159.113.2:13744] [client 162.15 ...
show more
[Mon Dec 29 21:43:32.563700 2025] [:error] [pid 1268882] [client 162.159.113.2:13744] [client 162.159.113.2] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/app/.env"] [unique_id "aVL2BC-se4di-k_jjYUvHAAAAAY"]
[Mon Dec 29 21:43:36.931768 2025] [:error] [pid 1268882] [client 162.159.113.2:13744] [client 162.159.113.2] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
172.71.95.94
|
|
[Mon Dec 29 21:42:47.999312 2025] [:error] [pid 1268886] [client 172.71.95.94:12677] [client 172.71. ...
show more
[Mon Dec 29 21:42:47.999312 2025] [:error] [pid 1268886] [client 172.71.95.94:12677] [client 172.71.95.94] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/env/.env"] [unique_id "aVL115acgjK1EXxvi3lW-QAAAAw"]
[Mon Dec 29 21:43:23.587231 2025] [:error] [pid 1267557] [client 172.71.95.94:9986] [client 172.71.95.94] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
172.70.47.112
|
|
[Mon Dec 29 21:42:30.324232 2025] [:error] [pid 1268883] [client 172.70.47.112:11393] [client 172.70 ...
show more
[Mon Dec 29 21:42:30.324232 2025] [:error] [pid 1268883] [client 172.70.47.112:11393] [client 172.70.47.112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/.env"] [unique_id "aVL1xnuOpEb8IalWC599wQAAAAc"]
[Mon Dec 29 21:42:31.640278 2025] [:error] [pid 1268883] [client 172.70.47.112:11393] [client 172.70.47.112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇦🇺
170.64.193.67
|
|
[Mon Dec 29 20:55:17.998809 2025] [:error] [pid 1268257] [client 170.64.193.67:39546] [client 170.64 ...
show more
[Mon Dec 29 20:55:17.998809 2025] [:error] [pid 1268257] [client 170.64.193.67:39546] [client 170.64.193.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/"] [unique_id "aVLqtQTf_JzkLQz_WmT-PAAAAAk"]
[Mon Dec 29 20:55:18.729994 2025] [:error] [pid 1268251] [client 170.64.193.67:39550] [client 170.64.193.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 36)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [ta
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
172.210.68.2
|
|
[Mon Dec 29 20:07:52.122770 2025] [:error] [pid 1266868] [client 172.210.68.2:43506] [client 172.210 ...
show more
[Mon Dec 29 20:07:52.122770 2025] [:error] [pid 1266868] [client 172.210.68.2:43506] [client 172.210.68.2] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/developmentserver/metadatauploader"] [unique_id "aVLfmGczghqFGtadZz0IzAAAABs"]
[Mon Dec 29 20:08:03.211372 2025] [:error] [pid 1267521] [client 172.210.68.2:60242] [client 172.210.68.2] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇭🇰
156.245.246.155
|
|
[Mon Dec 29 19:56:51.005117 2025] [:error] [pid 1265874] [client 156.245.246.155:59889] [client 156. ...
show more
[Mon Dec 29 19:56:51.005117 2025] [:error] [pid 1265874] [client 156.245.246.155:59889] [client 156.245.246.155] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "arcanum.aislingmcnally.com"] [uri "/wp-comments-post.php"] [unique_id "aVLdAtLaXkKC0lKYgJLGTgAAAAA"], referer: https://arcanum.aislingmcnally.com
[Mon Dec 29 19:56:51.182881 2025] [:error] [pid 1265874] [client 156.245.246.155:59889] [client 156.245.246.155] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anoma
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇦🇺
170.64.138.153
|
|
[Mon Dec 29 19:27:22.838060 2025] [:error] [pid 1266867] [client 170.64.138.153:44672] [client 170.6 ...
show more
[Mon Dec 29 19:27:22.838060 2025] [:error] [pid 1266867] [client 170.64.138.153:44672] [client 170.64.138.153] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/"] [unique_id "aVLWGmNK66PKv0kmQp9oUwAAABo"]
[Mon Dec 29 19:27:23.521052 2025] [:error] [pid 1266864] [client 170.64.138.153:44686] [client 170.64.138.153] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 36)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"]
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇦🇺
134.199.169.27
|
|
[Mon Dec 29 18:45:22.322298 2025] [:error] [pid 1265624] [client 134.199.169.27:41988] [client 134.1 ...
show more
[Mon Dec 29 18:45:22.322298 2025] [:error] [pid 1265624] [client 134.199.169.27:41988] [client 134.199.169.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/"] [unique_id "aVLMQmwaTpG3USTs-hB56gAAAAk"]
[Mon Dec 29 18:45:23.039732 2025] [:error] [pid 1265882] [client 134.199.169.27:41996] [client 134.199.169.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 36)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"]
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇦🇺
170.64.160.6
|
|
[Mon Dec 29 18:16:23.556122 2025] [:error] [pid 1264240] [client 170.64.160.6:55310] [client 170.64. ...
show more
[Mon Dec 29 18:16:23.556122 2025] [:error] [pid 1264240] [client 170.64.160.6:55310] [client 170.64.160.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/"] [unique_id "aVLFdwBHba6jf284FnCErAAAAAc"]
[Mon Dec 29 18:16:24.257650 2025] [:error] [pid 1263106] [client 170.64.160.6:55324] [client 170.64.160.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 36)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "a
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇦🇺
209.38.16.104
|
|
[Mon Dec 29 16:33:00.208112 2025] [:error] [pid 1261801] [client 209.38.16.104:38822] [client 209.38 ...
show more
[Mon Dec 29 16:33:00.208112 2025] [:error] [pid 1261801] [client 209.38.16.104:38822] [client 209.38.16.104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/"] [unique_id "aVKtPFOx8YHOJbkLVb6gggAAAAA"]
[Mon Dec 29 16:33:00.894798 2025] [:error] [pid 1262590] [client 209.38.16.104:38834] [client 209.38.16.104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 36)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [ta
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇮🇳
139.59.12.30
|
|
[Mon Dec 29 16:21:15.250290 2025] [:error] [pid 1262140] [client 139.59.12.30:50465] [client 139.59. ...
show more
[Mon Dec 29 16:21:15.250290 2025] [:error] [pid 1262140] [client 139.59.12.30:50465] [client 139.59.12.30] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "squixl.com"] [uri "/"] [unique_id "aVKqe85ZoBdfVhY3x0YkvAAAAAE"]
[Mon Dec 29 16:21:16.922736 2025] [:error] [pid 1262143] [client 139.59.12.30:50683] [client 139.59.12.30] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "appli
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇦🇺
134.199.148.209
|
|
[Mon Dec 29 15:42:48.825800 2025] [:error] [pid 1261711] [client 134.199.148.209:58844] [client 134. ...
show more
[Mon Dec 29 15:42:48.825800 2025] [:error] [pid 1261711] [client 134.199.148.209:58844] [client 134.199.148.209] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/.env"] [unique_id "aVKheCPpQREUKFvpt-ZLHAAAAAw"]
[Mon Dec 29 15:42:50.281959 2025] [:error] [pid 1261801] [client 134.199.148.209:58870] [client 134.199.148.209] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇦🇺
170.64.223.210
|
|
[Mon Dec 29 15:08:17.235620 2025] [:error] [pid 1260506] [client 170.64.223.210:53428] [client 170.6 ...
show more
[Mon Dec 29 15:08:17.235620 2025] [:error] [pid 1260506] [client 170.64.223.210:53428] [client 170.64.223.210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/"] [unique_id "aVKZYVYw-IJCmPmaYol8vQAAACQ"]
[Mon Dec 29 15:08:19.910427 2025] [:error] [pid 1260509] [client 170.64.223.210:53430] [client 170.64.223.210] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 36)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"]
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
45.144.212.13
|
|
[Mon Dec 29 10:13:22.889721 2025] [:error] [pid 1252257] [client 45.144.212.13:45380] [client 45.144 ...
show more
[Mon Dec 29 10:13:22.889721 2025] [:error] [pid 1252257] [client 45.144.212.13:45380] [client 45.144.212.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/.git/config"] [unique_id "aVJUQqKYWC3CbmiKDbRqJwAAAAA"]
[Mon Dec 29 10:14:19.303028 2025] [:error] [pid 1253571] [client 45.144.212.13:56960] [client 45.144.212.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇲🇳
103.153.141.147
|
|
[Mon Dec 29 09:29:35.895629 2025] [:error] [pid 1252257] [client 103.153.141.147:60457] [client 103. ...
show more
[Mon Dec 29 09:29:35.895629 2025] [:error] [pid 1252257] [client 103.153.141.147:60457] [client 103.153.141.147] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 59)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/"] [unique_id "aVJJ_6KYWC3CbmiKDbRqGQAAAAA"]
[Mon Dec 29 09:29:39.354506 2025] [:error] [pid 1252661] [client 103.153.141.147:60668] [client 103.153.141.147] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇬
47.128.16.13
|
|
[Mon Dec 29 08:32:38.611378 2025] [:error] [pid 1252270] [client 47.128.16.13:58540] [client 47.128. ...
show more
[Mon Dec 29 08:32:38.611378 2025] [:error] [pid 1252270] [client 47.128.16.13:58540] [client 47.128.16.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/comeonin/admin-ajax.php"] [unique_id "aVI8phxp2ql-PzUVAwTfOgAAAAE"], referer: https://www.sourcemodding.com/blog/ctl-stories/valve-history/page/16/
[Mon Dec 29 08:32:38.616749 2025] [:error] [pid 1252257] [client 47.128.16.13:58392] [client 47.128.16.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
209.38.210.245
|
|
[Mon Dec 29 08:11:03.608476 2025] [:error] [pid 1251484] [client 209.38.210.245:27769] [client 209.3 ...
show more
[Mon Dec 29 08:11:03.608476 2025] [:error] [pid 1251484] [client 209.38.210.245:27769] [client 209.38.210.245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "aislingmcnally.com"] [uri "/"] [unique_id "aVI3l2qHEs7yjlNLD01F4AAAABY"]
[Mon Dec 29 08:11:04.215770 2025] [:error] [pid 1251480] [client 209.38.210.245:27575] [client 209.38.210.245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
135.237.125.195
|
|
[Mon Dec 29 06:17:29.299546 2025] [:error] [pid 1250734] [client 135.237.125.195:51980] [client 135. ...
show more
[Mon Dec 29 06:17:29.299546 2025] [:error] [pid 1250734] [client 135.237.125.195:51980] [client 135.237.125.195] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/actuator/health"] [unique_id "aVIc-X_6l72YGUclFhFTLQAAAAU"]
[Mon Dec 29 06:17:30.671227 2025] [:error] [pid 1250759] [client 135.237.125.195:36128] [client 135.237.125.195] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
4.150.190.180
|
|
[Mon Dec 29 06:03:41.897327 2025] [:error] [pid 1250731] [client 4.150.190.180:57158] [client 4.150. ...
show more
[Mon Dec 29 06:03:41.897327 2025] [:error] [pid 1250731] [client 4.150.190.180:57158] [client 4.150.190.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/autodiscover/autodiscover.json"] [unique_id "aVIZvSSCNa-1mCMFzWCqEAAAAAI"]
[Mon Dec 29 06:03:50.281386 2025] [:error] [pid 1250737] [client 4.150.190.180:51500] [client 4.150.190.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"
...
show less
|
Bad Web Bot
Web App Attack
|