thefoofighter - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User thefoofighter joined AbuseIPDB in February 2024 and has reported 18,537 IP addresses.

Standing (weight) is good.

INACTIVE USER

IP	Date	Comment	Categories
🇺🇸 107.170.15.232	09 Jan 2026	[Fri Jan 09 16:09:47.826628 2026] [:error] [pid 1637192] [client 107.170.15.232:37972] [client 107.1 ... show more [Fri Jan 09 16:09:47.826628 2026] [:error] [pid 1637192] [client 107.170.15.232:37972] [client 107.170.15.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/ab2g"] [unique_id "aWEoS7-puZ31K-9QudKv-QAAAAQ"] [Fri Jan 09 16:09:48.091268 2026] [:error] [pid 1637191] [client 107.170.15.232:37988] [client 107.170.15.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3. ... show less	Bad Web Bot Web App Attack
🇺🇸 198.211.114.216	09 Jan 2026	[Fri Jan 09 14:44:04.184274 2026] [:error] [pid 1631915] [client 198.211.114.216:33400] [client 198. ... show more [Fri Jan 09 14:44:04.184274 2026] [:error] [pid 1631915] [client 198.211.114.216:33400] [client 198.211.114.216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/ab2g"] [unique_id "aWEUNHjbnJHjv1qhIAoEjwAAAAk"] [Fri Jan 09 14:44:04.460246 2026] [:error] [pid 1628039] [client 198.211.114.216:33414] [client 198.211.114.216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/ ... show less	Bad Web Bot Web App Attack
🇩🇪 164.92.164.177	09 Jan 2026	[Fri Jan 09 10:14:11.753658 2026] [:error] [pid 1628040] [client 164.92.164.177:41370] [client 164.9 ... show more [Fri Jan 09 10:14:11.753658 2026] [:error] [pid 1628040] [client 164.92.164.177:41370] [client 164.92.164.177] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/.env"] [unique_id "aWDU89RTP8Exlob6VJu24QAAAAM"] [Fri Jan 09 10:14:12.933687 2026] [:error] [pid 1628039] [client 164.92.164.177:41380] [client 164.92.164.177] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3. ... show less	Bad Web Bot Web App Attack
🇮🇳 13.205.53.9	09 Jan 2026	[Fri Jan 09 08:48:06.372805 2026] [:error] [pid 1628039] [client 13.205.53.9:36719] [client 13.205.5 ... show more [Fri Jan 09 08:48:06.372805 2026] [:error] [pid 1628039] [client 13.205.53.9:36719] [client 13.205.53.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "aislingmcnally.com"] [uri "/wp-content/downloads/AislingMcNallyResume.pdf"] [unique_id "aWDAxjq6Ei2I_LwnEpwtaAAAAAI"] [Fri Jan 09 08:48:07.158099 2026] [:error] [pid 1631915] [client 13.205.53.9:23388] [client 13.205.53.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severit ... show less	Bad Web Bot Web App Attack
🇫🇷 185.177.72.60	09 Jan 2026	[Fri Jan 09 08:26:25.507158 2026] [:error] [pid 1628222] [client 185.177.72.60:17380] [client 185.17 ... show more [Fri Jan 09 08:26:25.507158 2026] [:error] [pid 1628222] [client 185.177.72.60:17380] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "aislingmcnally.com"] [uri "/.env"] [unique_id "aWC7seJO7eiGMpiplhTlogAAAAY"] [Fri Jan 09 08:26:26.007768 2026] [:error] [pid 1628042] [client 185.177.72.60:31044] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3 ... show less	Bad Web Bot Web App Attack
🇫🇷 185.177.72.62	09 Jan 2026	[Fri Jan 09 07:36:45.826154 2026] [:error] [pid 1628040] [client 185.177.72.62:38654] [client 185.17 ... show more [Fri Jan 09 07:36:45.826154 2026] [:error] [pid 1628040] [client 185.177.72.62:38654] [client 185.177.72.62] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "aislingmcnally.com"] [uri "/.env"] [unique_id "aWCwDdRTP8Exlob6VJu21QAAAAM"] [Fri Jan 09 07:36:48.336153 2026] [:error] [pid 1628041] [client 185.177.72.62:38668] [client 185.177.72.62] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3 ... show less	Bad Web Bot Web App Attack
🇮🇳 198.38.81.1	09 Jan 2026	[Fri Jan 09 06:53:24.053088 2026] [:error] [pid 1628037] [client 198.38.81.1:47970] [client 198.38.8 ... show more [Fri Jan 09 06:53:24.053088 2026] [:error] [pid 1628037] [client 198.38.81.1:47970] [client 198.38.81.1] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.aislingmcnally.com"] [uri "/.env"] [unique_id "aWCl5P_3rmn62MxjjTlsPgAAAAA"] [Fri Jan 09 06:53:24.169336 2026] [:error] [pid 1628039] [client 198.38.81.1:48016] [client 198.38.81.1] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] ... show less	Bad Web Bot Web App Attack
🇺🇸 162.240.77.133	09 Jan 2026	[Fri Jan 09 05:15:58.513036 2026] [:error] [pid 1628222] [client 162.240.77.133:58712] [client 162.2 ... show more [Fri Jan 09 05:15:58.513036 2026] [:error] [pid 1628222] [client 162.240.77.133:58712] [client 162.240.77.133] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/"] [unique_id "aWCPDuJO7eiGMpiplhTllQAAAAY"] [Fri Jan 09 05:15:58.650655 2026] [:error] [pid 1628039] [client 162.240.77.133:58762] [client 162.240.77.133] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] ... show less	Bad Web Bot Web App Attack
🇺🇸 146.190.135.237	09 Jan 2026	[Fri Jan 09 04:36:01.802896 2026] [:error] [pid 1630116] [client 146.190.135.237:60188] [client 146. ... show more [Fri Jan 09 04:36:01.802896 2026] [:error] [pid 1630116] [client 146.190.135.237:60188] [client 146.190.135.237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/.env"] [unique_id "aWCFscIuOyZEdSLMptGQdgAAAAc"] [Fri Jan 09 04:36:01.973616 2026] [:error] [pid 1628042] [client 146.190.135.237:60212] [client 146.190.135.237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/ ... show less	Bad Web Bot Web App Attack
🇵🇱 95.214.55.246	09 Jan 2026	[Fri Jan 09 02:44:18.387741 2026] [:error] [pid 1628038] [client 95.214.55.246:55254] [client 95.214 ... show more [Fri Jan 09 02:44:18.387741 2026] [:error] [pid 1628038] [client 95.214.55.246:55254] [client 95.214.55.246] ModSecurity: Access denied with code 400 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/etc/modsecurity/modsecurity.conf"] [line "88"] [id "200003"] [msg "Multipart request body failed strict validation: PE 0, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM 0, IQ 0, IP 1, IH 0, FL 0"] [hostname "63.250.44.173"] [uri "/"] [unique_id "aWBrgsgXxjNysW4coMVICgAAAAE"] [Fri Jan 09 02:44:21.146009 2026] [:error] [pid 1628039] [client 95.214.55.246:55268] [client 95.214.55.246] ModSecurity: Access denied with code 400 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/etc/modsecurity/modsecurity.conf"] [line "88"] [id "200003"] [msg "Multipart request body failed strict validation: PE 0, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM 0, IQ 0, IP 1, IH 0, FL 0"] [hostname "63.250.44.173"] [uri "/_next"] [unique_id "aWBrhTq6Ei2I_LwnEpwtRwAAAAI"] ... show less	Bad Web Bot Web App Attack
🇸🇬 152.42.161.138	09 Jan 2026	[Fri Jan 09 00:22:39.867937 2026] [:error] [pid 1627253] [client 152.42.161.138:42372] [client 152.4 ... show more [Fri Jan 09 00:22:39.867937 2026] [:error] [pid 1627253] [client 152.42.161.138:42372] [client 152.42.161.138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/ab2g"] [unique_id "aWBKT9WvaNpLP2HL3R6fjwAAAAM"] [Fri Jan 09 00:22:40.661776 2026] [:error] [pid 1627254] [client 152.42.161.138:42378] [client 152.42.161.138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3. ... show less	Bad Web Bot Web App Attack
🇺🇸 20.98.128.249	08 Jan 2026	[Thu Jan 08 22:08:31.489639 2026] [:error] [pid 1623680] [client 20.98.128.249:57116] [client 20.98. ... show more [Thu Jan 08 22:08:31.489639 2026] [:error] [pid 1623680] [client 20.98.128.249:57116] [client 20.98.128.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/autodiscover/autodiscover.json"] [unique_id "aWAq31p4Dv0J1Kdm_Me7uQAAAAQ"] [Thu Jan 08 22:08:34.015230 2026] [:error] [pid 1623678] [client 20.98.128.249:48966] [client 20.98.128.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL" ... show less	Bad Web Bot Web App Attack
🇩🇪 207.154.219.79	08 Jan 2026	[Thu Jan 08 13:08:05.247309 2026] [:error] [pid 1621968] [client 207.154.219.79:26933] [client 207.1 ... show more [Thu Jan 08 13:08:05.247309 2026] [:error] [pid 1621968] [client 207.154.219.79:26933] [client 207.154.219.79] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "aislingmcnally.com"] [uri "/"] [unique_id "aV-sNSSeVTgnVueSUEpu-QAAAD8"] [Thu Jan 08 13:08:05.877582 2026] [:error] [pid 1621969] [client 207.154.219.79:15595] [client 207.154.219.79] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 12)"] [severity "CRITICAL"] [ver "OWASP_CRS/3. ... show less	Bad Web Bot Web App Attack
🇫🇷 185.177.72.61	08 Jan 2026	[Thu Jan 08 12:04:49.879826 2026] [:error] [pid 1621972] [client 185.177.72.61:5034] [client 185.177 ... show more [Thu Jan 08 12:04:49.879826 2026] [:error] [pid 1621972] [client 185.177.72.61:5034] [client 185.177.72.61] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "aislingmcnally.com"] [uri "/.env"] [unique_id "aV-dYRjVg4NrnCTyGO4m3wAAAEM"] [Thu Jan 08 12:04:52.431597 2026] [:error] [pid 1621973] [client 185.177.72.61:5050] [client 185.177.72.61] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2 ... show less	Bad Web Bot Web App Attack
🇫🇷 84.247.171.77	08 Jan 2026	[Thu Jan 08 11:39:20.520960 2026] [:error] [pid 1621881] [client 84.247.171.77:41562] [client 84.247 ... show more [Thu Jan 08 11:39:20.520960 2026] [:error] [pid 1621881] [client 84.247.171.77:41562] [client 84.247.171.77] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/cronlab/.env"] [unique_id "aV-XaIL3-PLF9Wz35aCszQAAAAM"] [Thu Jan 08 11:39:20.683915 2026] [:error] [pid 1621881] [client 84.247.171.77:41562] [client 84.247.171.77] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/ ... show less	Bad Web Bot Web App Attack
🇺🇸 40.124.175.136	08 Jan 2026	[Thu Jan 08 11:16:32.604765 2026] [:error] [pid 1621519] [client 40.124.175.136:58388] [client 40.12 ... show more [Thu Jan 08 11:16:32.604765 2026] [:error] [pid 1621519] [client 40.124.175.136:58388] [client 40.124.175.136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/developmentserver/metadatauploader"] [unique_id "aV-SEPE2JueIjzILVIa5sAAAAAQ"] [Thu Jan 08 11:16:54.297547 2026] [:error] [pid 1617349] [client 40.124.175.136:35746] [client 40.124.175.136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "C ... show less	Bad Web Bot Web App Attack
🇺🇸 47.89.154.16	08 Jan 2026	[Thu Jan 08 09:11:59.882754 2026] [:error] [pid 1616573] [client 47.89.154.16:58550] [client 47.89.1 ... show more [Thu Jan 08 09:11:59.882754 2026] [:error] [pid 1616573] [client 47.89.154.16:58550] [client 47.89.154.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/dns-query"] [unique_id "aV90307x50hpEUdXUIbsYQAAAAE"] [Thu Jan 08 09:11:59.950045 2026] [:error] [pid 1616573] [client 47.89.154.16:58550] [client 47.89.154.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2 ... show less	Bad Web Bot Web App Attack
🇬🇧 144.126.229.26	08 Jan 2026	[Thu Jan 08 04:22:49.037334 2026] [:error] [pid 1614918] [client 144.126.229.26:52704] [client 144.1 ... show more [Thu Jan 08 04:22:49.037334 2026] [:error] [pid 1614918] [client 144.126.229.26:52704] [client 144.126.229.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/.env"] [unique_id "aV8xGQ46AYhsZ4DsxaNk7QAAAAE"] [Thu Jan 08 04:22:49.918286 2026] [:error] [pid 1614919] [client 144.126.229.26:52728] [client 144.126.229.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3. ... show less	Bad Web Bot Web App Attack
🇹🇼 61.228.240.101	08 Jan 2026	[Thu Jan 08 00:19:14.460032 2026] [:error] [pid 1614096] [client 61.228.240.101:41150] [client 61.22 ... show more [Thu Jan 08 00:19:14.460032 2026] [:error] [pid 1614096] [client 61.228.240.101:41150] [client 61.228.240.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.baidu.com"] [uri "/"] [unique_id "aV74AtB7Mg-FPJ_TocgdggAAAAA"] [Thu Jan 08 00:19:15.178404 2026] [:error] [pid 1614098] [client 61.228.240.101:41166] [client 61.228.240.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2" ... show less	Bad Web Bot Web App Attack
🇦🇺 209.38.87.131	07 Jan 2026	[Wed Jan 07 22:53:26.278280 2026] [:error] [pid 1611678] [client 209.38.87.131:53044] [client 209.38 ... show more [Wed Jan 07 22:53:26.278280 2026] [:error] [pid 1611678] [client 209.38.87.131:53044] [client 209.38.87.131] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/ab2g"] [unique_id "aV7j5vMkloxrCWUWe0BQ_AAAAAY"] [Wed Jan 07 22:53:27.217055 2026] [:error] [pid 1612273] [client 209.38.87.131:53056] [client 209.38.87.131] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] ... show less	Bad Web Bot Web App Attack
🇺🇸 34.239.129.3	07 Jan 2026	[Wed Jan 07 22:01:26.439295 2026] [:error] [pid 1609595] [client 34.239.129.3:35100] [client 34.239. ... show more [Wed Jan 07 22:01:26.439295 2026] [:error] [pid 1609595] [client 34.239.129.3:35100] [client 34.239.129.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/.git/config"] [unique_id "aV7XttprnZEcyJCtXrDqWgAAAAg"] [Wed Jan 07 22:01:26.439439 2026] [:error] [pid 1609907] [client 34.239.129.3:52816] [client 34.239.129.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2 ... show less	Bad Web Bot Web App Attack
🇺🇸 20.80.83.148	07 Jan 2026	[Wed Jan 07 21:36:35.561430 2026] [:error] [pid 1609907] [client 20.80.83.148:52204] [client 20.80.8 ... show more [Wed Jan 07 21:36:35.561430 2026] [:error] [pid 1609907] [client 20.80.83.148:52204] [client 20.80.83.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/actuator/health"] [unique_id "aV7R4_dgqXpA6byxHheCXwAAAAU"] [Wed Jan 07 21:36:39.167177 2026] [:error] [pid 1609339] [client 20.80.83.148:42456] [client 20.80.83.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3 ... show less	Bad Web Bot Web App Attack
🇺🇸 9.234.8.54	07 Jan 2026	[Wed Jan 07 19:50:54.183184 2026] [:error] [pid 1609519] [client 9.234.8.54:57290] [client 9.234.8.5 ... show more [Wed Jan 07 19:50:54.183184 2026] [:error] [pid 1609519] [client 9.234.8.54:57290] [client 9.234.8.54] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/ReportServer"] [unique_id "aV65HvvnArBwIrxIGhSdjAAAAAA"] [Wed Jan 07 19:50:56.421846 2026] [:error] [pid 1609339] [client 9.234.8.54:32920] [client 9.234.8.54] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag ... show less	Bad Web Bot Web App Attack
🇺🇸 165.227.184.247	07 Jan 2026	[Wed Jan 07 19:19:51.217927 2026] [:error] [pid 1610097] [client 165.227.184.247:32800] [client 165. ... show more [Wed Jan 07 19:19:51.217927 2026] [:error] [pid 1610097] [client 165.227.184.247:32800] [client 165.227.184.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/.env"] [unique_id "aV6x1wb9Auwqh39T3qN8yAAAAAI"] [Wed Jan 07 19:19:51.756799 2026] [:error] [pid 1610543] [client 165.227.184.247:32828] [client 165.227.184.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/ ... show less	Bad Web Bot Web App Attack
🇨🇭 35.216.189.16	07 Jan 2026	[Wed Jan 07 17:40:38.045090 2026] [:error] [pid 1609343] [client 35.216.189.16:43448] [client 35.216 ... show more [Wed Jan 07 17:40:38.045090 2026] [:error] [pid 1609343] [client 35.216.189.16:43448] [client 35.216.189.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/"] [unique_id "aV6alpLihxlGNhLCvBA3KQAAAA4"] [Wed Jan 07 17:40:43.127715 2026] [:error] [pid 1609341] [client 35.216.189.16:39310] [client 35.216.189.16] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [ta ... show less	Bad Web Bot Web App Attack