|
🇩🇪
165.22.31.165
|
|
[Wed Dec 31 01:39:48.556836 2025] [:error] [pid 1297905] [client 165.22.31.165:58507] [client 165.22 ...
show more
[Wed Dec 31 01:39:48.556836 2025] [:error] [pid 1297905] [client 165.22.31.165:58507] [client 165.22.31.165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "aislingmcnally.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "aVR-5Fv5zSv3CzcI-WgTLAAAAAY"]
[Wed Dec 31 01:39:48.717602 2025] [:error] [pid 1297905] [client 165.22.31.165:58507] [client 165.22.31.165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
20.64.104.229
|
|
[Wed Dec 31 01:31:32.717189 2025] [:error] [pid 1297921] [client 20.64.104.229:53648] [client 20.64. ...
show more
[Wed Dec 31 01:31:32.717189 2025] [:error] [pid 1297921] [client 20.64.104.229:53648] [client 20.64.104.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/developmentserver/metadatauploader"] [unique_id "aVR89BAO6elJG-vnDlCFCwAAABY"]
[Wed Dec 31 01:31:49.913233 2025] [:error] [pid 1297596] [client 20.64.104.229:56366] [client 20.64.104.229] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITI
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
104.248.250.2
|
|
[Wed Dec 31 00:58:55.526061 2025] [:error] [pid 1297100] [client 104.248.250.2:55912] [client 104.24 ...
show more
[Wed Dec 31 00:58:55.526061 2025] [:error] [pid 1297100] [client 104.248.250.2:55912] [client 104.248.250.2] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/ab2g"] [unique_id "aVR1T4YsdMz0_72jwB9AMwAAAAk"]
[Wed Dec 31 00:58:56.137968 2025] [:error] [pid 1297108] [client 104.248.250.2:55924] [client 104.248.250.2] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"]
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
147.182.166.181
|
|
[Tue Dec 30 21:21:17.846690 2025] [:error] [pid 1291398] [client 147.182.166.181:53449] [client 147. ...
show more
[Tue Dec 30 21:21:17.846690 2025] [:error] [pid 1291398] [client 147.182.166.181:53449] [client 147.182.166.181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sourcemodding.com"] [uri "/"] [unique_id "aVRCTb5LRQlBtABprLK4XgAAAAw"]
[Tue Dec 30 21:21:21.026271 2025] [:error] [pid 1293182] [client 147.182.166.181:53530] [client 147.182.166.181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇬
47.128.16.157
|
|
[Tue Dec 30 20:24:21.246311 2025] [:error] [pid 1291834] [client 47.128.16.157:24418] [client 47.128 ...
show more
[Tue Dec 30 20:24:21.246311 2025] [:error] [pid 1291834] [client 47.128.16.157:24418] [client 47.128.16.157] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/comeonin/admin-ajax.php"] [unique_id "aVQ09Ww0KIQY82OGfL_9rgAAADw"], referer: https://www.sourcemodding.com/blog/ctl-stories/valve-history/page/14/
[Tue Dec 30 20:24:22.747882 2025] [:error] [pid 1291834] [client 47.128.16.157:24418] [client 47.128.16.157] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
141.98.80.113
|
|
[Tue Dec 30 19:22:57.842594 2025] [:error] [pid 1291816] [client 141.98.80.113:33070] [client 141.98 ...
show more
[Tue Dec 30 19:22:57.842594 2025] [:error] [pid 1291816] [client 141.98.80.113:33070] [client 141.98.80.113] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 24)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/"] [unique_id "aVQmkej41vWrBbftemwb7gAAACo"]
[Tue Dec 30 19:23:00.231701 2025] [:error] [pid 1291837] [client 141.98.80.113:3522] [client 141.98.80.113] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇬
47.128.111.145
|
|
[Tue Dec 30 18:36:19.226195 2025] [:error] [pid 1290334] [client 47.128.111.145:32320] [client 47.12 ...
show more
[Tue Dec 30 18:36:19.226195 2025] [:error] [pid 1290334] [client 47.128.111.145:32320] [client 47.128.111.145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/comeonin/admin-ajax.php"] [unique_id "aVQbo8qN8TmRtWG6tt6atQAAAAQ"], referer: https://www.sourcemodding.com/blog/ctl-stories/valve-history/page/14/
[Tue Dec 30 18:36:19.230940 2025] [:error] [pid 1291291] [client 47.128.111.145:32356] [client 47.128.111.145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
135.237.125.109
|
|
[Tue Dec 30 16:13:23.466827 2025] [:error] [pid 1288532] [client 135.237.125.109:50342] [client 135. ...
show more
[Tue Dec 30 16:13:23.466827 2025] [:error] [pid 1288532] [client 135.237.125.109:50342] [client 135.237.125.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/login"] [unique_id "aVP6I7h-ubikaZXfF8fGLQAAAAE"]
[Tue Dec 30 16:13:26.687448 2025] [:error] [pid 1288545] [client 135.237.125.109:50984] [client 135.237.125.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇦🇺
134.199.149.172
|
|
[Tue Dec 30 15:22:31.750025 2025] [:error] [pid 1285590] [client 134.199.149.172:34186] [client 134. ...
show more
[Tue Dec 30 15:22:31.750025 2025] [:error] [pid 1285590] [client 134.199.149.172:34186] [client 134.199.149.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/"] [unique_id "aVPuN8bunj1Wv5zFMPzP1gAAAAM"]
[Tue Dec 30 15:22:32.496421 2025] [:error] [pid 1287658] [client 134.199.149.172:34188] [client 134.199.149.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 36)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇦🇺
209.38.95.178
|
|
[Tue Dec 30 14:01:17.855403 2025] [:error] [pid 1286396] [client 209.38.95.178:44412] [client 209.38 ...
show more
[Tue Dec 30 14:01:17.855403 2025] [:error] [pid 1286396] [client 209.38.95.178:44412] [client 209.38.95.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/"] [unique_id "aVPbLcRbLE1_aZptFpH7nAAAAAk"]
[Tue Dec 30 14:01:18.621513 2025] [:error] [pid 1285590] [client 209.38.95.178:44426] [client 209.38.95.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 36)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [ta
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
162.243.7.61
|
|
[Tue Dec 30 11:15:08.217381 2025] [:error] [pid 1285066] [client 162.243.7.61:41426] [client 162.243 ...
show more
[Tue Dec 30 11:15:08.217381 2025] [:error] [pid 1285066] [client 162.243.7.61:41426] [client 162.243.7.61] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.172"] [uri "/.env"] [unique_id "aVO0PPgfWEY798Vw7_crkgAAAAM"]
[Tue Dec 30 11:15:08.831977 2025] [:error] [pid 1279420] [client 162.243.7.61:41446] [client 162.243.7.61] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
195.178.110.132
|
|
[Tue Dec 30 10:37:01.047813 2025] [:error] [pid 1283648] [client 195.178.110.132:37374] [client 195. ...
show more
[Tue Dec 30 10:37:01.047813 2025] [:error] [pid 1283648] [client 195.178.110.132:37374] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sourcemodding.com"] [uri "/.env"] [unique_id "aVOrTbSlQoqcWfp4u0MemwAAABM"]
[Tue Dec 30 10:37:01.479449 2025] [:error] [pid 1283649] [client 195.178.110.132:37378] [client 195.178.110.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇬
47.128.16.14
|
|
[Tue Dec 30 04:05:14.931631 2025] [:error] [pid 1276279] [client 47.128.16.14:12908] [client 47.128. ...
show more
[Tue Dec 30 04:05:14.931631 2025] [:error] [pid 1276279] [client 47.128.16.14:12908] [client 47.128.16.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/comeonin/admin-ajax.php"] [unique_id "aVNPeklxDkjtathsvQz7UAAAAAQ"], referer: https://www.sourcemodding.com/blog/tag/coding/
[Tue Dec 30 04:05:14.945166 2025] [:error] [pid 1276000] [client 47.128.16.14:12918] [client 47.128.16.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
206.189.233.36
|
|
[Tue Dec 30 03:34:44.297226 2025] [:error] [pid 1275282] [client 206.189.233.36:56008] [client 206.1 ...
show more
[Tue Dec 30 03:34:44.297226 2025] [:error] [pid 1275282] [client 206.189.233.36:56008] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "squixl.com"] [uri "/.DS_Store"] [unique_id "aVNIVG7paVfvBlbLwrOZZgAAAAE"]
[Tue Dec 30 03:34:45.304669 2025] [:error] [pid 1275993] [client 206.189.233.36:38394] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇭🇰
65.181.92.225
|
|
[Tue Dec 30 02:11:46.069587 2025] [:error] [pid 1275057] [client 65.181.92.225:35424] [client 65.181 ...
show more
[Tue Dec 30 02:11:46.069587 2025] [:error] [pid 1275057] [client 65.181.92.225:35424] [client 65.181.92.225] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/"] [unique_id "aVM04u0_SIKmKzBrOrBDFgAAABE"]
[Tue Dec 30 02:11:48.000935 2025] [:error] [pid 1274597] [client 65.181.92.225:38372] [client 65.181.92.225] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
85.11.167.4
|
|
[Tue Dec 30 01:38:08.795189 2025] [:error] [pid 1274597] [client 85.11.167.4:60834] [client 85.11.16 ...
show more
[Tue Dec 30 01:38:08.795189 2025] [:error] [pid 1274597] [client 85.11.167.4:60834] [client 85.11.167.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 46)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sourcemodding.com"] [uri "/"] [unique_id "aVMtANmxkhlSc4QpGWskDQAAAAg"], referer: https://sourcemodding.com
[Tue Dec 30 01:38:09.455057 2025] [:error] [pid 1274612] [client 85.11.167.4:60846] [client 85.11.167.4] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 46)"] [severity "CRITI
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
2.58.56.27
|
|
[Tue Dec 30 01:15:32.099597 2025] [:error] [pid 1273466] [client 2.58.56.27:50268] [client 2.58.56.2 ...
show more
[Tue Dec 30 01:15:32.099597 2025] [:error] [pid 1273466] [client 2.58.56.27:50268] [client 2.58.56.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "aislingmcnally.com"] [uri "/wp-plain.php"] [unique_id "aVMntGZk-uC2zB4H6ithyAAAAAc"], referer: www.google.com
[Tue Dec 30 01:15:32.323000 2025] [:error] [pid 1273466] [client 2.58.56.27:50268] [client 2.58.56.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇦🇺
170.64.217.1
|
|
[Tue Dec 30 00:28:52.239018 2025] [:error] [pid 1273446] [client 170.64.217.1:49664] [client 170.64. ...
show more
[Tue Dec 30 00:28:52.239018 2025] [:error] [pid 1273446] [client 170.64.217.1:49664] [client 170.64.217.1] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/"] [unique_id "aVMcxPjpRO3Ce_LOv2FQmgAAAAU"]
[Tue Dec 30 00:28:52.910677 2025] [:error] [pid 1273661] [client 170.64.217.1:49674] [client 170.64.217.1] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 36)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "a
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
172.71.98.217
|
|
[Mon Dec 29 21:44:46.525744 2025] [:error] [pid 1268849] [client 172.71.98.217:9460] [client 172.71. ...
show more
[Mon Dec 29 21:44:46.525744 2025] [:error] [pid 1268849] [client 172.71.98.217:9460] [client 172.71.98.217] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/.env.example"] [unique_id "aVL2Tgaf84ncgn3aATdaXAAAAAQ"]
[Mon Dec 29 21:45:16.741575 2025] [:error] [pid 1268849] [client 172.71.98.217:10632] [client 172.71.98.217] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CR
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
172.71.151.50
|
|
[Mon Dec 29 21:44:47.740009 2025] [:error] [pid 1269671] [client 172.71.151.50:13720] [client 172.71 ...
show more
[Mon Dec 29 21:44:47.740009 2025] [:error] [pid 1269671] [client 172.71.151.50:13720] [client 172.71.151.50] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 12)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/.env.old"] [unique_id "aVL2T51U35lE-Jj3KcriVQAAAAo"]
[Mon Dec 29 21:44:48.655331 2025] [:error] [pid 1269671] [client 172.71.151.50:13720] [client 172.71.151.50] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
172.71.151.215
|
|
[Mon Dec 29 21:44:48.011770 2025] [:error] [pid 1269670] [client 172.71.151.215:9867] [client 172.71 ...
show more
[Mon Dec 29 21:44:48.011770 2025] [:error] [pid 1269670] [client 172.71.151.215:9867] [client 172.71.151.215] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/.env_sample"] [unique_id "aVL2UIaLfgCse3o1BIgksQAAAAk"]
[Mon Dec 29 21:44:49.264506 2025] [:error] [pid 1269670] [client 172.71.151.215:9867] [client 172.71.151.215] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
172.71.102.235
|
|
[Mon Dec 29 21:43:09.396025 2025] [:error] [pid 1268884] [client 172.71.102.235:14015] [client 172.7 ...
show more
[Mon Dec 29 21:43:09.396025 2025] [:error] [pid 1268884] [client 172.71.102.235:14015] [client 172.71.102.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/api/.env"] [unique_id "aVL17ZFVKnDZMLPsB6s_dAAAAAg"]
[Mon Dec 29 21:44:43.044196 2025] [:error] [pid 1267557] [client 172.71.102.235:13711] [client 172.71.102.235] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_C
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
172.71.151.197
|
|
[Mon Dec 29 21:44:13.676076 2025] [:error] [pid 1267557] [client 172.71.151.197:13721] [client 172.7 ...
show more
[Mon Dec 29 21:44:13.676076 2025] [:error] [pid 1267557] [client 172.71.151.197:13721] [client 172.71.151.197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/mail/.env"] [unique_id "aVL2LbLnPBxoP4YQrQ-y0wAAABE"]
[Mon Dec 29 21:44:42.283091 2025] [:error] [pid 1268336] [client 172.71.151.197:12107] [client 172.71.151.197] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
172.71.175.12
|
|
[Mon Dec 29 21:43:44.006875 2025] [:error] [pid 1268849] [client 172.71.175.12:9616] [client 172.71. ...
show more
[Mon Dec 29 21:43:44.006875 2025] [:error] [pid 1268849] [client 172.71.175.12:9616] [client 172.71.175.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/new/.env"] [unique_id "aVL2EAaf84ncgn3aATdaVQAAAAQ"]
[Mon Dec 29 21:44:37.290901 2025] [:error] [pid 1269007] [client 172.71.175.12:11911] [client 172.71.175.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
172.71.183.182
|
|
[Mon Dec 29 21:44:33.704258 2025] [:error] [pid 1269673] [client 172.71.183.182:10882] [client 172.7 ...
show more
[Mon Dec 29 21:44:33.704258 2025] [:error] [pid 1269673] [client 172.71.183.182:10882] [client 172.71.183.182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sarahmcnally.com"] [uri "/development/.env"] [unique_id "aVL2QW6t9IpoJ0P_wUQvnQAAAAw"]
[Mon Dec 29 21:44:33.859087 2025] [:error] [pid 1269673] [client 172.71.183.182:10882] [client 172.71.183.182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver
...
show less
|
Bad Web Bot
Web App Attack
|