|
🇳🇱
195.24.236.78
|
|
[Wed Jan 07 14:14:55.876139 2026] [:error] [pid 1606540] [client 195.24.236.78:60337] [client 195.24 ...
show more
[Wed Jan 07 14:14:55.876139 2026] [:error] [pid 1606540] [client 195.24.236.78:60337] [client 195.24.236.78] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sourcemodding.com"] [uri "/wp-plain.php"] [unique_id "aV5qX_BbrcpSXrPgrMIDTQAAAAg"], referer: www.google.com
[Wed Jan 07 14:14:56.220998 2026] [:error] [pid 1606540] [client 195.24.236.78:60337] [client 195.24.236.78] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
165.227.14.4
|
|
[Wed Jan 07 08:41:36.087887 2026] [:error] [pid 1600603] [client 165.227.14.4:47668] [client 165.227 ...
show more
[Wed Jan 07 08:41:36.087887 2026] [:error] [pid 1600603] [client 165.227.14.4:47668] [client 165.227.14.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/ab2g"] [unique_id "aV4cQFL8Rpj6AYdVCQcgoQAAAEY"]
[Wed Jan 07 08:41:36.181037 2026] [:error] [pid 1600595] [client 165.227.14.4:47684] [client 165.227.14.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇭🇰
119.8.243.182
|
|
[Wed Jan 07 05:48:47.506960 2026] [:error] [pid 1597696] [client 119.8.243.182:49373] [client 119.8. ...
show more
[Wed Jan 07 05:48:47.506960 2026] [:error] [pid 1597696] [client 119.8.243.182:49373] [client 119.8.243.182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/img/blog/tuts/thumbs/wip_tut001.webp"] [unique_id "aV3zvyFMlFyw3cPmZPIxdwAAAAQ"]
[Wed Jan 07 05:48:47.642519 2026] [:error] [pid 1597698] [client 119.8.243.182:49409] [client 119.8.243.182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [sever
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
20.163.16.228
|
|
[Wed Jan 07 05:28:55.577266 2026] [:error] [pid 1597273] [client 20.163.16.228:52942] [client 20.163 ...
show more
[Wed Jan 07 05:28:55.577266 2026] [:error] [pid 1597273] [client 20.163.16.228:52942] [client 20.163.16.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/developmentserver/metadatauploader"] [unique_id "aV3vF5D3tOs7Uyk0o-qiOQAAAAA"]
[Wed Jan 07 05:28:56.192351 2026] [:error] [pid 1597298] [client 20.163.16.228:44858] [client 20.163.16.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITI
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
104.248.123.85
|
|
[Wed Jan 07 05:10:09.862456 2026] [:error] [pid 1596334] [client 104.248.123.85:38346] [client 104.2 ...
show more
[Wed Jan 07 05:10:09.862456 2026] [:error] [pid 1596334] [client 104.248.123.85:38346] [client 104.248.123.85] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/comeonin/admin-ajax.php"] [unique_id "aV3qsRvWfWXEDwjLGJSgwgAAAAI"], referer: https://www.sourcemodding.com/
[Wed Jan 07 05:10:09.880236 2026] [:error] [pid 1597071] [client 104.248.123.85:38336] [client 104.248.123.85] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score E
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
20.15.163.139
|
|
[Wed Jan 07 03:33:53.577100 2026] [:error] [pid 1596117] [client 20.15.163.139:49196] [client 20.15. ...
show more
[Wed Jan 07 03:33:53.577100 2026] [:error] [pid 1596117] [client 20.15.163.139:49196] [client 20.15.163.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/version"] [unique_id "aV3UIbc3Ie5XW14JsCeyagAAAAM"]
[Wed Jan 07 03:34:02.647100 2026] [:error] [pid 1595519] [client 20.15.163.139:49880] [client 20.15.163.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇮🇳
194.195.112.120
|
|
[Wed Jan 07 02:28:53.955528 2026] [:error] [pid 1593835] [client 194.195.112.120:48954] [client 194. ...
show more
[Wed Jan 07 02:28:53.955528 2026] [:error] [pid 1593835] [client 194.195.112.120:48954] [client 194.195.112.120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 56)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sourcemodding.com"] [uri "/"] [unique_id "aV3E5UVIRbUoNlyKMJ2v-gAAAAY"]
[Wed Jan 07 02:28:54.827714 2026] [:error] [pid 1595520] [client 194.195.112.120:48968] [client 194.195.112.120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
37.187.133.42
|
|
[Wed Jan 07 01:14:38.241311 2026] [:error] [pid 1593831] [client 37.187.133.42:35636] [client 37.187 ...
show more
[Wed Jan 07 01:14:38.241311 2026] [:error] [pid 1593831] [client 37.187.133.42:35636] [client 37.187.133.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "squixl.com"] [uri "/.env"] [unique_id "aV2zfqEHhKJu_GIdAM4mngAAAAI"]
[Wed Jan 07 01:14:38.371538 2026] [:error] [pid 1594787] [client 37.187.133.42:35640] [client 37.187.133.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [ta
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
13.222.161.79
|
|
[Tue Jan 06 23:19:43.177316 2026] [:error] [pid 1590743] [client 13.222.161.79:33908] [client 13.222 ...
show more
[Tue Jan 06 23:19:43.177316 2026] [:error] [pid 1590743] [client 13.222.161.79:33908] [client 13.222.161.79] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 56)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "aislingmcnally.com"] [uri "/"] [unique_id "aV2YjyI5btkc95lNN3knCwAAABc"]
[Tue Jan 06 23:19:43.870533 2026] [:error] [pid 1591013] [client 13.222.161.79:33920] [client 13.222.161.79] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
172.71.131.191
|
|
[Tue Jan 06 23:08:36.902921 2026] [:error] [pid 1590743] [client 172.71.131.191:13058] [client 172.7 ...
show more
[Tue Jan 06 23:08:36.902921 2026] [:error] [pid 1590743] [client 172.71.131.191:13058] [client 172.71.131.191] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sarahmcnally.com"] [uri "/.env.example"] [unique_id "aV2V9CI5btkc95lNN3knBQAAABc"]
[Tue Jan 06 23:08:38.693479 2026] [:error] [pid 1590743] [client 172.71.131.191:13058] [client 172.71.131.191] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
104.23.229.100
|
|
[Tue Jan 06 23:08:31.170530 2026] [:error] [pid 1591362] [client 104.23.229.100:14212] [client 104.2 ...
show more
[Tue Jan 06 23:08:31.170530 2026] [:error] [pid 1591362] [client 104.23.229.100:14212] [client 104.23.229.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sarahmcnally.com"] [uri "/.env"] [unique_id "aV2V70u1WbORRmVfK1K7YAAAAAU"]
[Tue Jan 06 23:08:38.387693 2026] [:error] [pid 1591362] [client 104.23.229.100:14212] [client 104.23.229.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_C
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
141.101.68.114
|
|
[Tue Jan 06 23:08:34.082562 2026] [:error] [pid 1591532] [client 141.101.68.114:11873] [client 141.1 ...
show more
[Tue Jan 06 23:08:34.082562 2026] [:error] [pid 1591532] [client 141.101.68.114:11873] [client 141.101.68.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sarahmcnally.com"] [uri "/dev/.env"] [unique_id "aV2V8oWKdF5PpF44T5-u_wAAAAE"]
[Tue Jan 06 23:08:38.049031 2026] [:error] [pid 1591532] [client 141.101.68.114:11873] [client 141.101.68.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWA
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
104.23.225.36
|
|
[Tue Jan 06 23:08:31.844221 2026] [:error] [pid 1590987] [client 104.23.225.36:10977] [client 104.23 ...
show more
[Tue Jan 06 23:08:31.844221 2026] [:error] [pid 1590987] [client 104.23.225.36:10977] [client 104.23.225.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sarahmcnally.com"] [uri "/.env.save"] [unique_id "aV2V7_ostJ9Sr66pQugUlAAAAAI"]
[Tue Jan 06 23:08:36.309540 2026] [:error] [pid 1590987] [client 104.23.225.36:10977] [client 104.23.225.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
172.71.123.19
|
|
[Tue Jan 06 23:08:33.399189 2026] [:error] [pid 1590761] [client 172.71.123.19:12221] [client 172.71 ...
show more
[Tue Jan 06 23:08:33.399189 2026] [:error] [pid 1590761] [client 172.71.123.19:12221] [client 172.71.123.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sarahmcnally.com"] [uri "/api/.env"] [unique_id "aV2V8apSDfsFsLuUw1Fh0QAAACM"]
[Tue Jan 06 23:08:34.384949 2026] [:error] [pid 1590761] [client 172.71.123.19:12221] [client 172.71.123.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_C
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
54.83.166.185
|
|
[Tue Jan 06 22:33:38.150040 2026] [:error] [pid 1590761] [client 54.83.166.185:54212] [client 54.83. ...
show more
[Tue Jan 06 22:33:38.150040 2026] [:error] [pid 1590761] [client 54.83.166.185:54212] [client 54.83.166.185] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 56)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.squixl.com"] [uri "/"] [unique_id "aV2NwqpSDfsFsLuUw1FhsAAAACM"]
[Tue Jan 06 22:33:38.942973 2026] [:error] [pid 1590743] [client 54.83.166.185:54220] [client 54.83.166.185] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [t
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇵🇱
172.64.198.66
|
|
[Tue Jan 06 22:28:57.290673 2026] [:error] [pid 1590898] [client 172.64.198.66:13402] [client 172.64 ...
show more
[Tue Jan 06 22:28:57.290673 2026] [:error] [pid 1590898] [client 172.64.198.66:13402] [client 172.64.198.66] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sarahmcnally.com"] [uri "/.env.production"] [unique_id "aV2MqUPhEgLqRkaUoe8XVAAAAAE"]
[Tue Jan 06 22:28:57.312455 2026] [:error] [pid 1590769] [client 172.64.198.66:13398] [client 172.64.198.66] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇵🇱
162.158.102.97
|
|
[Tue Jan 06 22:28:57.295200 2026] [:error] [pid 1590756] [client 162.158.102.97:13898] [client 162.1 ...
show more
[Tue Jan 06 22:28:57.295200 2026] [:error] [pid 1590756] [client 162.158.102.97:13898] [client 162.158.102.97] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sarahmcnally.com"] [uri "/.env.save"] [unique_id "aV2MqexJbN6eMxx2oY_wrgAAAB4"]
[Tue Jan 06 22:28:57.306724 2026] [:error] [pid 1590737] [client 162.158.102.97:13893] [client 162.158.102.97] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OW
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
20.150.194.114
|
|
[Tue Jan 06 21:29:45.015572 2026] [:error] [pid 1589382] [client 20.150.194.114:44560] [client 20.15 ...
show more
[Tue Jan 06 21:29:45.015572 2026] [:error] [pid 1589382] [client 20.150.194.114:44560] [client 20.150.194.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/login"] [unique_id "aV1-yaLGqO9oZN8MWngGiAAAAAY"]
[Tue Jan 06 21:29:52.829086 2026] [:error] [pid 1588226] [client 20.150.194.114:48380] [client 20.150.194.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
130.12.180.177
|
|
[Tue Jan 06 18:53:47.788458 2026] [:error] [pid 1588226] [client 130.12.180.177:44558] [client 130.1 ...
show more
[Tue Jan 06 18:53:47.788458 2026] [:error] [pid 1588226] [client 130.12.180.177:44558] [client 130.12.180.177] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 56)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/"] [unique_id "aV1aOwbsctPe23LVBgFGJQAAACY"]
[Tue Jan 06 18:53:53.705599 2026] [:error] [pid 1588227] [client 130.12.180.177:50250] [client 130.12.180.177] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 56)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇬
152.42.161.138
|
|
[Tue Jan 06 18:43:41.750058 2026] [:error] [pid 1588993] [client 152.42.161.138:34844] [client 152.4 ...
show more
[Tue Jan 06 18:43:41.750058 2026] [:error] [pid 1588993] [client 152.42.161.138:34844] [client 152.42.161.138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/ab2g"] [unique_id "aV1X3cW8BKnFLen8cJxBxQAAAAA"]
[Tue Jan 06 18:43:42.534454 2026] [:error] [pid 1588199] [client 152.42.161.138:34860] [client 152.42.161.138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
20.118.202.145
|
|
[Tue Jan 06 16:47:12.278555 2026] [:error] [pid 1586585] [client 20.118.202.145:33478] [client 20.11 ...
show more
[Tue Jan 06 16:47:12.278555 2026] [:error] [pid 1586585] [client 20.118.202.145:33478] [client 20.118.202.145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/autodiscover/autodiscover.json"] [unique_id "aV08kNNC4wGO5LJ-kAVUOQAAAAc"]
[Tue Jan 06 16:47:33.828525 2026] [:error] [pid 1587409] [client 20.118.202.145:36658] [client 20.118.202.145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITI
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
167.71.120.207
|
|
[Tue Jan 06 15:48:40.506342 2026] [:error] [pid 1586580] [client 167.71.120.207:35820] [client 167.7 ...
show more
[Tue Jan 06 15:48:40.506342 2026] [:error] [pid 1586580] [client 167.71.120.207:35820] [client 167.71.120.207] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/.env"] [unique_id "aV0u2IXCP2rbTieVZw4-nQAAAAM"]
[Tue Jan 06 15:48:40.662157 2026] [:error] [pid 1586817] [client 167.71.120.207:35840] [client 167.71.120.207] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
204.76.203.8
|
|
[Tue Jan 06 13:09:29.696540 2026] [:error] [pid 1584940] [client 204.76.203.8:56348] [client 204.76. ...
show more
[Tue Jan 06 13:09:29.696540 2026] [:error] [pid 1584940] [client 204.76.203.8:56348] [client 204.76.203.8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/"] [unique_id "aV0JiUq01HLWnNFtTritmgAAAAY"]
[Tue Jan 06 13:09:30.141576 2026] [:error] [pid 1583520] [client 204.76.203.8:56360] [client 204.76.203.8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "a
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
161.97.92.68
|
|
[Tue Jan 06 11:27:11.902263 2026] [:error] [pid 1582906] [client 161.97.92.68:52379] [client 161.97. ...
show more
[Tue Jan 06 11:27:11.902263 2026] [:error] [pid 1582906] [client 161.97.92.68:52379] [client 161.97.92.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 13)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/.env"] [unique_id "aVzxjzWL4FR7yFNw_XCn2QAAAAc"]
[Tue Jan 06 11:27:12.606423 2026] [:error] [pid 1582965] [client 161.97.92.68:52546] [client 161.97.92.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [ta
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
104.23.172.13
|
|
[Tue Jan 06 08:40:39.551354 2026] [:error] [pid 1579227] [client 104.23.172.13:10175] [client 104.23 ...
show more
[Tue Jan 06 08:40:39.551354 2026] [:error] [pid 1579227] [client 104.23.172.13:10175] [client 104.23.172.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/env/.env"] [unique_id "aVzKh4IQSrRq3y2uMKp0ngAAAAw"]
[Tue Jan 06 08:43:30.787626 2026] [:error] [pid 1579227] [client 104.23.172.13:13913] [client 104.23.172.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3
...
show less
|
Bad Web Bot
Web App Attack
|