|
🇺🇸
108.162.246.47
|
|
[Tue Jan 06 08:41:45.242285 2026] [:error] [pid 1579227] [client 108.162.246.47:12234] [client 108.1 ...
show more
[Tue Jan 06 08:41:45.242285 2026] [:error] [pid 1579227] [client 108.162.246.47:12234] [client 108.162.246.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/cron/.env"] [unique_id "aVzKyYIQSrRq3y2uMKp0oQAAAAw"]
[Tue Jan 06 08:42:26.266723 2026] [:error] [pid 1580310] [client 108.162.246.47:13296] [client 108.162.246.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
162.159.120.188
|
|
[Tue Jan 06 08:42:23.737581 2026] [:error] [pid 1578010] [client 162.159.120.188:10122] [client 162. ...
show more
[Tue Jan 06 08:42:23.737581 2026] [:error] [pid 1578010] [client 162.159.120.188:10122] [client 162.159.120.188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/main/.env"] [unique_id "aVzK70b_oA_osQ1rMxfeAwAAAAA"]
[Tue Jan 06 08:42:27.181262 2026] [:error] [pid 1578010] [client 162.159.120.188:10122] [client 162.159.120.188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OW
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
162.159.120.152
|
|
[Tue Jan 06 08:41:44.163760 2026] [:error] [pid 1578011] [client 162.159.120.152:9691] [client 162.1 ...
show more
[Tue Jan 06 08:41:44.163760 2026] [:error] [pid 1578011] [client 162.159.120.152:9691] [client 162.159.120.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/conf/.env"] [unique_id "aVzKyMHbr-jSRUSVY3AC2QAAAAE"]
[Tue Jan 06 08:42:24.935473 2026] [:error] [pid 1579225] [client 162.159.120.152:13073] [client 162.159.120.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWA
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
104.23.170.157
|
|
[Tue Jan 06 08:40:20.218088 2026] [:error] [pid 1579227] [client 104.23.170.157:10919] [client 104.2 ...
show more
[Tue Jan 06 08:40:20.218088 2026] [:error] [pid 1579227] [client 104.23.170.157:10919] [client 104.23.170.157] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/env/.env"] [unique_id "aVzKdIIQSrRq3y2uMKp0nQAAAAw"]
[Tue Jan 06 08:42:15.520742 2026] [:error] [pid 1578439] [client 104.23.170.157:14188] [client 104.23.170.157] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_C
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
172.70.47.158
|
|
[Tue Jan 06 08:42:06.463707 2026] [:error] [pid 1578231] [client 172.70.47.158:12629] [client 172.70 ...
show more
[Tue Jan 06 08:42:06.463707 2026] [:error] [pid 1578231] [client 172.70.47.158:12629] [client 172.70.47.158] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/mailer/.env"] [unique_id "aVzK3gByKn-A61MYAjFk6wAAAAk"]
[Tue Jan 06 08:42:07.140915 2026] [:error] [pid 1578231] [client 172.70.47.158:12629] [client 172.70.47.158] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CR
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
198.41.227.180
|
|
[Tue Jan 06 08:42:02.600590 2026] [:error] [pid 1580310] [client 198.41.227.180:13219] [client 198.4 ...
show more
[Tue Jan 06 08:42:02.600590 2026] [:error] [pid 1580310] [client 198.41.227.180:13219] [client 198.41.227.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/laravel/.env"] [unique_id "aVzK2sgkzExrYSEDDXqsVQAAAAQ"]
[Tue Jan 06 08:42:03.220080 2026] [:error] [pid 1580310] [client 198.41.227.180:13219] [client 198.41.227.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWA
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
172.70.46.19
|
|
[Tue Jan 06 08:41:48.158251 2026] [:error] [pid 1580310] [client 172.70.46.19:9433] [client 172.70.4 ...
show more
[Tue Jan 06 08:41:48.158251 2026] [:error] [pid 1580310] [client 172.70.46.19:9433] [client 172.70.46.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/docker/app/.env"] [unique_id "aVzKzMgkzExrYSEDDXqsUwAAAAQ"]
[Tue Jan 06 08:41:48.788518 2026] [:error] [pid 1580310] [client 172.70.46.19:9433] [client 172.70.46.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
162.159.113.3
|
|
[Tue Jan 06 08:41:26.007803 2026] [:error] [pid 1578439] [client 162.159.113.3:11742] [client 162.15 ...
show more
[Tue Jan 06 08:41:26.007803 2026] [:error] [pid 1578439] [client 162.159.113.3:11742] [client 162.159.113.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/new/.env.production"] [unique_id "aVzKtl-NAUum8I7qn58VLgAAAAY"]
[Tue Jan 06 08:41:26.629205 2026] [:error] [pid 1578439] [client 162.159.113.3:11742] [client 162.159.113.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
172.70.46.198
|
|
[Tue Jan 06 08:41:20.035887 2026] [:error] [pid 1578011] [client 172.70.46.198:13803] [client 172.70 ...
show more
[Tue Jan 06 08:41:20.035887 2026] [:error] [pid 1578011] [client 172.70.46.198:13803] [client 172.70.46.198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/new/.env"] [unique_id "aVzKsMHbr-jSRUSVY3AC1wAAAAE"]
[Tue Jan 06 08:41:20.631127 2026] [:error] [pid 1578011] [client 172.70.46.198:13803] [client 172.70.46.198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
172.70.46.18
|
|
[Tue Jan 06 08:40:54.790273 2026] [:error] [pid 1578289] [client 172.70.46.18:13881] [client 172.70. ...
show more
[Tue Jan 06 08:40:54.790273 2026] [:error] [pid 1578289] [client 172.70.46.18:13881] [client 172.70.46.18] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/api/.env"] [unique_id "aVzKloviyKykYBzoEvU5iwAAAAM"]
[Tue Jan 06 08:41:19.118871 2026] [:error] [pid 1578015] [client 172.70.46.18:11160] [client 172.70.46.18] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
104.23.166.86
|
|
[Tue Jan 06 08:40:17.436796 2026] [:error] [pid 1579225] [client 104.23.166.86:10058] [client 104.23 ...
show more
[Tue Jan 06 08:40:17.436796 2026] [:error] [pid 1579225] [client 104.23.166.86:10058] [client 104.23.166.86] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/.env"] [unique_id "aVzKcUWbcttul1Q9plF4JAAAAAs"]
[Tue Jan 06 08:40:18.179394 2026] [:error] [pid 1579225] [client 104.23.166.86:10058] [client 104.23.166.86] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
134.209.4.8
|
|
[Tue Jan 06 08:05:19.725777 2026] [:error] [pid 1578011] [client 134.209.4.8:60028] [client 134.209. ...
show more
[Tue Jan 06 08:05:19.725777 2026] [:error] [pid 1578011] [client 134.209.4.8:60028] [client 134.209.4.8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/.env"] [unique_id "aVzCP8Hbr-jSRUSVY3ACZQAAAAE"]
[Tue Jan 06 08:05:19.933618 2026] [:error] [pid 1578015] [client 134.209.4.8:60048] [client 134.209.4.8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "ap
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇵🇱
79.137.71.25
|
|
[Tue Jan 06 02:14:45.375647 2026] [:error] [pid 1575838] [client 79.137.71.25:46538] [client 79.137. ...
show more
[Tue Jan 06 02:14:45.375647 2026] [:error] [pid 1575838] [client 79.137.71.25:46538] [client 79.137.71.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sourcemodding.com"] [uri "/.env.save"] [unique_id "aVxwFTqawrvFglOYNpftdgAAAAg"]
[Tue Jan 06 02:14:45.376883 2026] [:error] [pid 1576065] [client 79.137.71.25:46554] [client 79.137.71.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇬
47.128.96.209
|
|
[Tue Jan 06 00:30:57.687951 2026] [:error] [pid 1574620] [client 47.128.96.209:43986] [client 47.128 ...
show more
[Tue Jan 06 00:30:57.687951 2026] [:error] [pid 1574620] [client 47.128.96.209:43986] [client 47.128.96.209] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/comeonin/admin-ajax.php"] [unique_id "aVxXwb01HflK8KHmlUTF3wAAAAU"], referer: https://www.sourcemodding.com/blog/tag/model-viewer/
[Tue Jan 06 00:30:57.892242 2026] [:error] [pid 1574620] [client 47.128.96.209:43986] [client 47.128.96.209] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbou
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
20.65.193.183
|
|
[Mon Jan 05 23:30:13.624532 2026] [:error] [pid 1572277] [client 20.65.193.183:36650] [client 20.65. ...
show more
[Mon Jan 05 23:30:13.624532 2026] [:error] [pid 1572277] [client 20.65.193.183:36650] [client 20.65.193.183] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/developmentserver/metadatauploader"] [unique_id "aVxJhbyeM1HRbAyI9vK3TgAAAAk"]
[Mon Jan 05 23:30:18.692859 2026] [:error] [pid 1572284] [client 20.65.193.183:57350] [client 20.65.193.183] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITI
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
193.38.248.172
|
|
[Mon Jan 05 22:37:50.473308 2026] [:error] [pid 1570187] [client 193.38.248.172:65499] [client 193.3 ...
show more
[Mon Jan 05 22:37:50.473308 2026] [:error] [pid 1570187] [client 193.38.248.172:65499] [client 193.38.248.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/"] [unique_id "aVw9Pnijp9jgmC23K-zQ7gAAAAE"]
[Mon Jan 05 22:38:50.315557 2026] [:error] [pid 1545356] [client 193.38.248.172:52394] [client 193.38.248.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"]
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
85.11.167.4
|
|
[Mon Jan 05 19:04:42.399747 2026] [:error] [pid 1563579] [client 85.11.167.4:38202] [client 85.11.16 ...
show more
[Mon Jan 05 19:04:42.399747 2026] [:error] [pid 1563579] [client 85.11.167.4:38202] [client 85.11.167.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 46)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sourcemodding.com"] [uri "/"] [unique_id "aVwLSmdpOgsbVa42xjoSUQAAAAw"], referer: https://sourcemodding.com
[Mon Jan 05 19:04:42.925613 2026] [:error] [pid 1548816] [client 85.11.167.4:38204] [client 85.11.167.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 46)"] [severity "CRITI
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇭🇰
156.59.198.136
|
|
[Mon Jan 05 18:56:39.927515 2026] [:error] [pid 1562346] [client 156.59.198.136:52636] [client 156.5 ...
show more
[Mon Jan 05 18:56:39.927515 2026] [:error] [pid 1562346] [client 156.59.198.136:52636] [client 156.59.198.136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/comeonin/admin-ajax.php"] [unique_id "aVwJZ7juoUcWA1VCZxb-vAAAAAA"]
[Mon Jan 05 18:57:27.660768 2026] [:error] [pid 1559139] [client 156.59.198.136:28428] [client 156.59.198.136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CR
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
144.91.109.68
|
|
[Mon Jan 05 18:31:57.610780 2026] [:error] [pid 1541901] [client 144.91.109.68:57616] [client 144.91 ...
show more
[Mon Jan 05 18:31:57.610780 2026] [:error] [pid 1541901] [client 144.91.109.68:57616] [client 144.91.109.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sourcemodding.com"] [uri "/.env"] [unique_id "aVwDnbyqInrk_HAbwsRgCwAAAAo"]
[Mon Jan 05 18:31:57.710840 2026] [:error] [pid 1559139] [client 144.91.109.68:57668] [client 144.91.109.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
159.89.4.102
|
|
[Mon Jan 05 18:19:04.888106 2026] [:error] [pid 1545351] [client 159.89.4.102:39514] [client 159.89. ...
show more
[Mon Jan 05 18:19:04.888106 2026] [:error] [pid 1545351] [client 159.89.4.102:39514] [client 159.89.4.102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/ab2g"] [unique_id "aVwAmCTShqJNcYRoqrONyAAAAAQ"]
[Mon Jan 05 18:19:05.505050 2026] [:error] [pid 1543256] [client 159.89.4.102:39524] [client 159.89.4.102] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇬
129.212.237.72
|
|
[Mon Jan 05 13:21:49.992484 2026] [:error] [pid 1536556] [client 129.212.237.72:60566] [client 129.2 ...
show more
[Mon Jan 05 13:21:49.992484 2026] [:error] [pid 1536556] [client 129.212.237.72:60566] [client 129.212.237.72] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/.env"] [unique_id "aVu67UCI5J9nT91B_043HgAAAAM"]
[Mon Jan 05 13:21:51.185150 2026] [:error] [pid 1535685] [client 129.212.237.72:60582] [client 129.212.237.72] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇬
172.70.92.134
|
|
[Mon Jan 05 10:05:44.485631 2026] [:error] [pid 1531045] [client 172.70.92.134:12002] [client 172.70 ...
show more
[Mon Jan 05 10:05:44.485631 2026] [:error] [pid 1531045] [client 172.70.92.134:12002] [client 172.70.92.134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/.env"] [unique_id "aVuM-DdE_1nWqNPBerbyQgAAAAI"]
[Mon Jan 05 10:05:44.563126 2026] [:error] [pid 1528517] [client 172.70.92.134:12006] [client 172.70.92.134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇬
172.70.142.203
|
|
[Mon Jan 05 10:05:44.456851 2026] [:error] [pid 1531078] [client 172.70.142.203:10863] [client 172.7 ...
show more
[Mon Jan 05 10:05:44.456851 2026] [:error] [pid 1531078] [client 172.70.142.203:10863] [client 172.70.142.203] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/.env.save"] [unique_id "aVuM-DrU5Tmc7PwXdYGu3wAAAAU"]
[Mon Jan 05 10:05:44.460361 2026] [:error] [pid 1531079] [client 172.70.142.203:10864] [client 172.70.142.203] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇵🇱
162.158.172.123
|
|
[Mon Jan 05 07:57:33.119922 2026] [:error] [pid 1528411] [client 162.158.172.123:12760] [client 162. ...
show more
[Mon Jan 05 07:57:33.119922 2026] [:error] [pid 1528411] [client 162.158.172.123:12760] [client 162.158.172.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sarahmcnally.com"] [uri "/.env.save.1"] [unique_id "aVtu7cM3_WTKiYaefYvMogAAABM"]
[Mon Jan 05 07:57:39.365555 2026] [:error] [pid 1528455] [client 162.158.172.123:14329] [client 162.158.172.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [v
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
172.70.131.10
|
|
[Mon Jan 05 07:57:32.591857 2026] [:error] [pid 1528410] [client 172.70.131.10:11849] [client 172.70 ...
show more
[Mon Jan 05 07:57:32.591857 2026] [:error] [pid 1528410] [client 172.70.131.10:11849] [client 172.70.131.10] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sarahmcnally.com"] [uri "/images/.env"] [unique_id "aVtu7DjC2Qv4foGHdlBQcgAAABI"]
[Mon Jan 05 07:57:37.895544 2026] [:error] [pid 1528414] [client 172.70.131.10:12550] [client 172.70.131.10] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWAS
...
show less
|
Bad Web Bot
Web App Attack
|