AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User iwle joined AbuseIPDB in February 2024 and has reported 73,000 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 209.38.69.12	9 hours ago	2026-10-29T06:48:17.210145 main.justuptowngames.com sshd-session[2027598]: Invalid user vpn from 209 ... show more 2026-10-29T06:48:17.210145 main.justuptowngames.com sshd-session[2027598]: Invalid user vpn from 209.38.69.12 port 34310 2026-10-29T06:50:27.825062 main.justuptowngames.com sshd-session[2029355]: Invalid user bot from 209.38.69.12 port 55674 2026-10-29T06:51:54.116202 main.justuptowngames.com sshd-session[2030449]: Invalid user debian from 209.38.69.12 port 42440 2026-10-29T06:53:13.563198 main.justuptowngames.com sshd-session[2031679]: Invalid user debian from 209.38.69.12 port 57714 2026-10-29T06:54:48.251834 main.justuptowngames.com sshd-session[2032883]: Invalid user dev from 209.38.69.12 port 44720 ... show less	Brute-Force SSH
🇨🇭 179.43.153.2	10 hours ago	2026-10-29T06:34:30.190436 main.justuptowngames.com sshd-session[2016259]: Invalid user dennis from ... show more 2026-10-29T06:34:30.190436 main.justuptowngames.com sshd-session[2016259]: Invalid user dennis from 179.43.153.2 port 35140 ... show less	Brute-Force SSH
🇮🇩 103.46.186.148	11 hours ago	[Thu Oct 29 05:52:56.312632 2026] [:error] [pid 3674:tid 3732] [client 103.46.186.148:44302] [client ... show more [Thu Oct 29 05:52:56.312632 2026] [:error] [pid 3674:tid 3732] [client 103.46.186.148:44302] [client 103.46.186.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 10 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 28)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.141.255.191"] [uri "/hello.world"] [unique_id "auMXeJ2jysUWRkKCatjfFgAAANU"] [Thu Oct 29 05:52:56.544163 2026] [:error] [pid 3674:tid 3726] [client 103.46.186.148:44302] [client 103.46.186.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 10 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 28)"] ... show less	Bad Web Bot Web App Attack
🇱🇹 77.90.185.129	11 hours ago	[Thu Oct 29 05:18:30.460357 2026] [:error] [pid 1432748:tid 1432797] [client 77.90.185.129:0] [clien ... show more [Thu Oct 29 05:18:30.460357 2026] [:error] [pid 1432748:tid 1432797] [client 77.90.185.129:0] [client 77.90.185.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^\|/)(?:\\\\.env(?:\\\\.[^/]*)?\|\\\\.git(?:/\|$)\|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak\|old\|save\|tmp\|swp\|~))?\|php-info\\\\.php\|phpversion\\\\.php\|info\\\\.php\|debug\\\\.php\|pinfo\\\\.php\|pi\\\\.php\|php\\\\.php\|i\\\\.php\|application_default_credentials\\\\.json\|(?:firebase\|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "autodiscover.iwle.com"] [uri "/.vscode/sftp.json"] [unique_id "auMPZt-i_sYl-Np2v-0xhQAAARU"] [Thu Oct 29 05:18:36.158462 2026] [:error] [pid 1497:tid 1655] [client 77.90.185.129:0] [client 77.90.185.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^\|/) ... show less	Bad Web Bot Web App Attack
🇺🇸 157.230.155.143	12 hours ago	[Thu Oct 29 04:36:12.618636 2026] [:error] [pid 3674:tid 3720] [client 157.230.155.143:0] [client 15 ... show more [Thu Oct 29 04:36:12.618636 2026] [:error] [pid 3674:tid 3720] [client 157.230.155.143:0] [client 157.230.155.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)^/(?:wp-admin(?:/\|$)\|wp-content(?:/\|$)\|wp-includes(?:/\|$)\|wp-login\\\\.php$\|wp-editor\\\\.php$\|wp-mail\\\\.php$\|xmlrpc\\\\.php$)" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "152"] [id "100114"] [msg "Local Policy: WordPress probe on non-WordPress site"] [severity "WARNING"] [tag "local/wordpress-probe"] [hostname "iwle.com"] [uri "/wp-login.php"] [unique_id "auMFfJ2jysUWRkKCatjeeAAAAMk"] [Thu Oct 29 04:36:15.881451 2026] [:error] [pid 1497:tid 1680] [client 157.230.155.143:50855] [client 157.230.155.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)^/(?:wp-admin(?:/\|$)\|wp-content(?:/\|$)\|wp-includes(?:/\|$)\|wp-login\\\\.php$\|wp-editor\\\\.php$\|wp-mail\\\\.php$\|xmlrpc\\\\.php$)" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/local_rul ... show less	Bad Web Bot Web App Attack
🇷🇴 2.57.122.238	12 hours ago	2026-10-29T04:17:43.357081 main.justuptowngames.com sshd-session[1904018]: Invalid user sol from 2.5 ... show more 2026-10-29T04:17:43.357081 main.justuptowngames.com sshd-session[1904018]: Invalid user sol from 2.57.122.238 port 51906 ... show less	Brute-Force SSH
🇨🇳 115.191.36.93	13 hours ago	2026-10-29T03:51:23.729404 main.justuptowngames.com proftpd[1882554]: session[1882554] 0.0.0.0 (115. ... show more 2026-10-29T03:51:23.729404 main.justuptowngames.com proftpd[1882554]: session[1882554] 0.0.0.0 (115.191.36.93[115.191.36.93]): USER root (Login failed): Incorrect password 2026-10-29T03:51:25.346905 main.justuptowngames.com proftpd[1882580]: session[1882580] 0.0.0.0 (115.191.36.93[115.191.36.93]): USER root (Login failed): Incorrect password 2026-10-29T03:51:27.065469 main.justuptowngames.com proftpd[1882589]: session[1882589] 0.0.0.0 (115.191.36.93[115.191.36.93]): USER root (Login failed): Incorrect password 2026-10-29T03:51:28.749272 main.justuptowngames.com proftpd[1882616]: session[1882616] 0.0.0.0 (115.191.36.93[115.191.36.93]): USER root (Login failed): Incorrect password 2026-10-29T03:51:30.397116 main.justuptowngames.com proftpd[1882644]: session[1882644] 0.0.0.0 (115.191.36.93[115.191.36.93]): USER root (Login failed): Incorrect password ... show less	Brute-Force FTP Brute-Force
🇺🇸 162.35.10.91	13 hours ago	2026-10-29T03:43:22.431508 main.justuptowngames.com proftpd[1875941]: session[1875941] 0.0.0.0 (162. ... show more 2026-10-29T03:43:22.431508 main.justuptowngames.com proftpd[1875941]: session[1875941] 0.0.0.0 (162.35.10.91[162.35.10.91]): USER root (Login failed): Incorrect password 2026-10-29T03:43:23.295928 main.justuptowngames.com proftpd[1875963]: session[1875963] 0.0.0.0 (162.35.10.91[162.35.10.91]): USER root (Login failed): Incorrect password 2026-10-29T03:43:24.167414 main.justuptowngames.com proftpd[1875967]: session[1875967] 0.0.0.0 (162.35.10.91[162.35.10.91]): USER root (Login failed): Incorrect password 2026-10-29T03:43:25.000763 main.justuptowngames.com proftpd[1875993]: session[1875993] 0.0.0.0 (162.35.10.91[162.35.10.91]): USER root (Login failed): Incorrect password 2026-10-29T03:43:25.817413 main.justuptowngames.com proftpd[1875996]: session[1875996] 0.0.0.0 (162.35.10.91[162.35.10.91]): USER root (Login failed): Incorrect password ... show less	Brute-Force FTP Brute-Force
🇺🇸 96.78.175.36	14 hours ago	2026-10-29T02:29:56.474099 main.justuptowngames.com sshd-session[1815679]: Invalid user webdav from ... show more 2026-10-29T02:29:56.474099 main.justuptowngames.com sshd-session[1815679]: Invalid user webdav from 96.78.175.36 port 34500 2026-10-29T02:36:03.251909 main.justuptowngames.com sshd-session[1820668]: Invalid user yh from 96.78.175.36 port 37846 2026-10-29T02:37:40.173803 main.justuptowngames.com sshd-session[1821898]: Invalid user mongodbe from 96.78.175.36 port 36224 2026-10-29T02:39:06.294111 main.justuptowngames.com sshd-session[1823247]: Invalid user CG05 from 96.78.175.36 port 47944 2026-10-29T02:40:26.022703 main.justuptowngames.com sshd-session[1824326]: Invalid user freddie from 96.78.175.36 port 47422 ... show less	Brute-Force SSH
🇧🇷 74.244.223.0	15 hours ago	2026-10-29T01:44:36.736047 main.justuptowngames.com sshd-session[1778585]: Invalid user myuser from ... show more 2026-10-29T01:44:36.736047 main.justuptowngames.com sshd-session[1778585]: Invalid user myuser from 74.244.223.0 port 18318 2026-10-29T01:47:07.502867 main.justuptowngames.com sshd-session[1780525]: Invalid user a from 74.244.223.0 port 48948 2026-10-29T01:49:05.512558 main.justuptowngames.com sshd-session[1782267]: Invalid user ahmed from 74.244.223.0 port 33698 2026-10-29T01:50:56.918120 main.justuptowngames.com sshd-session[1783703]: Invalid user john from 74.244.223.0 port 15190 2026-10-29T01:52:42.799949 main.justuptowngames.com sshd-session[1785022]: Invalid user ahmed from 74.244.223.0 port 34568 ... show less	Brute-Force SSH
🇵🇱 194.180.49.41	15 hours ago	[Thu Oct 29 01:35:28.332169 2026] [:error] [pid 3674:tid 3726] [client 194.180.49.41:43274] [client ... show more [Thu Oct 29 01:35:28.332169 2026] [:error] [pid 3674:tid 3726] [client 194.180.49.41:43274] [client 194.180.49.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^\|/)(?:\\\\.env(?:\\\\.[^/]*)?\|\\\\.git(?:/\|$)\|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak\|old\|save\|tmp\|swp\|~))?\|php-info\\\\.php\|phpversion\\\\.php\|info\\\\.php\|debug\\\\.php\|pinfo\\\\.php\|pi\\\\.php\|php\\\\.php\|i\\\\.php\|application_default_credentials\\\\.json\|(?:firebase\|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "63.141.255.191"] [uri "/.env"] [unique_id "auLbIJ2jysUWRkKCatjdPAAAAM8"] [Thu Oct 29 01:35:28.714619 2026] [:error] [pid 1432748:tid 1432787] [client 194.180.49.41:43282] [client 194.180.49.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^\|/)(?:\\\\.env( ... show less	Bad Web Bot Web App Attack
🇨🇭 179.43.153.2	15 hours ago	2026-10-29T01:13:36.937983 main.justuptowngames.com sshd-session[1753199]: Invalid user daniel from ... show more 2026-10-29T01:13:36.937983 main.justuptowngames.com sshd-session[1753199]: Invalid user daniel from 179.43.153.2 port 57918 ... show less	Brute-Force SSH
🇷🇴 2.57.122.208	15 hours ago	[Thu Oct 29 01:11:42.941402 2026] [:error] [pid 1495:tid 1701] [client 2.57.122.208:0] [client 2.57. ... show more [Thu Oct 29 01:11:42.941402 2026] [:error] [pid 1495:tid 1701] [client 2.57.122.208:0] [client 2.57.122.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^\|/)(?:\\\\.env(?:\\\\.[^/])?\|\\\\.git(?:/\|$)\|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak\|old\|save\|tmp\|swp\|~))?\|php-info\\\\.php\|phpversion\\\\.php\|info\\\\.php\|debug\\\\.php\|pinfo\\\\.php\|pi\\\\.php\|php\\\\.php\|i\\\\.php\|application_default_credentials\\\\.json\|(?:firebase\|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "ufscards.com"] [uri "/.env"] [unique_id "auLVjm_nWaB4nWg2d8dwJAAAABQ"] [Thu Oct 29 01:11:42.972182 2026] [:error] [pid 1495:tid 1705] [client 2.57.122.208:0] [client 2.57.122.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^\|/)(?:\\\\.env(?:\\\\.[^/])?\|\\\\. ... show less	Bad Web Bot Web App Attack
🇻🇳 124.158.13.141	16 hours ago	[Thu Oct 29 00:02:55.484347 2026] [:error] [pid 1495:tid 1675] [client 124.158.13.141:3067] [client ... show more [Thu Oct 29 00:02:55.484347 2026] [:error] [pid 1495:tid 1675] [client 124.158.13.141:3067] [client 124.158.13.141] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 10 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 28)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.141.255.191"] [uri "/hello.world"] [unique_id "auLFb2_nWaB4nWg2d8dvkwAAAAo"] [Thu Oct 29 00:02:56.398778 2026] [:error] [pid 1495:tid 1697] [client 124.158.13.141:3067] [client 124.158.13.141] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 10 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 28)"] [s ... show less	Bad Web Bot Web App Attack
🇨🇳 202.101.144.44	17 hours ago	2026-10-28T23:13:19.337029 main.justuptowngames.com sshd-session[1654783]: Invalid user loom from 20 ... show more 2026-10-28T23:13:19.337029 main.justuptowngames.com sshd-session[1654783]: Invalid user loom from 202.101.144.44 port 21939 2026-10-28T23:16:19.680160 main.justuptowngames.com sshd-session[1657094]: Invalid user maarch from 202.101.144.44 port 45128 2026-10-28T23:17:54.937082 main.justuptowngames.com sshd-session[1658284]: Invalid user whatever from 202.101.144.44 port 47722 2026-10-28T23:19:28.013268 main.justuptowngames.com sshd-session[1659705]: Invalid user fcosta from 202.101.144.44 port 42206 2026-10-28T23:21:01.237812 main.justuptowngames.com sshd-session[1660929]: Invalid user vastbase from 202.101.144.44 port 36692 ... show less	Brute-Force SSH
🇺🇸 75.112.23.30	17 hours ago	2026-10-28T23:06:34.896463 main.justuptowngames.com sshd-session[1649210]: Invalid user user56 from ... show more 2026-10-28T23:06:34.896463 main.justuptowngames.com sshd-session[1649210]: Invalid user user56 from 75.112.23.30 port 45154 2026-10-28T23:12:55.424406 main.justuptowngames.com sshd-session[1654255]: Invalid user hkodali from 75.112.23.30 port 38092 2026-10-28T23:14:48.308913 main.justuptowngames.com sshd-session[1655902]: Invalid user zhuning from 75.112.23.30 port 42466 2026-10-28T23:16:12.800418 main.justuptowngames.com sshd-session[1657011]: Invalid user bryan from 75.112.23.30 port 46112 2026-10-28T23:17:30.419562 main.justuptowngames.com sshd-session[1657986]: Invalid user mos from 75.112.23.30 port 35552 ... show less	Brute-Force SSH
🇹🇿 41.93.28.12	18 hours ago	2026-10-28T22:25:54.962752 main.justuptowngames.com sshd-session[1616346]: Invalid user root123 from ... show more 2026-10-28T22:25:54.962752 main.justuptowngames.com sshd-session[1616346]: Invalid user root123 from 41.93.28.12 port 49882 2026-10-28T22:30:17.521287 main.justuptowngames.com sshd-session[1619914]: Invalid user dnstt from 41.93.28.12 port 44892 2026-10-28T22:32:13.032917 main.justuptowngames.com sshd-session[1621343]: Invalid user roott from 41.93.28.12 port 33284 2026-10-28T22:34:01.539831 main.justuptowngames.com sshd-session[1622896]: Invalid user user27 from 41.93.28.12 port 33970 2026-10-28T22:35:50.739673 main.justuptowngames.com sshd-session[1624277]: Invalid user cuixuecheng from 41.93.28.12 port 54922 ... show less	Brute-Force SSH
🇨🇭 179.43.153.2	18 hours ago	2026-10-28T22:32:54.324423 main.justuptowngames.com sshd-session[1621863]: Invalid user barbara from ... show more 2026-10-28T22:32:54.324423 main.justuptowngames.com sshd-session[1621863]: Invalid user barbara from 179.43.153.2 port 60976 ... show less	Brute-Force SSH
🇱🇰 124.43.10.224	18 hours ago	2026-10-28T22:18:34.795512 main.justuptowngames.com sshd-session[1610350]: Invalid user dm from 124. ... show more 2026-10-28T22:18:34.795512 main.justuptowngames.com sshd-session[1610350]: Invalid user dm from 124.43.10.224 port 59132 2026-10-28T22:20:08.201076 main.justuptowngames.com sshd-session[1611563]: Invalid user mao from 124.43.10.224 port 57750 2026-10-28T22:21:44.275223 main.justuptowngames.com sshd-session[1612796]: Invalid user sanket from 124.43.10.224 port 56352 2026-10-28T22:23:24.978337 main.justuptowngames.com sshd-session[1614344]: Invalid user rooter from 124.43.10.224 port 54956 2026-10-28T22:24:50.647328 main.justuptowngames.com sshd-session[1615454]: Invalid user sandra from 124.43.10.224 port 53546 ... show less	Brute-Force SSH
🇻🇳 163.223.210.138	18 hours ago	2026-10-28T22:17:05.918149 main.justuptowngames.com sshd-session[1608982]: Invalid user sandra from ... show more 2026-10-28T22:17:05.918149 main.justuptowngames.com sshd-session[1608982]: Invalid user sandra from 163.223.210.138 port 58810 2026-10-28T22:19:28.987972 main.justuptowngames.com sshd-session[1611042]: Invalid user dm from 163.223.210.138 port 54992 2026-10-28T22:21:18.691701 main.justuptowngames.com sshd-session[1612485]: Invalid user sanket from 163.223.210.138 port 60290 2026-10-28T22:23:04.727603 main.justuptowngames.com sshd-session[1613889]: Invalid user rooter from 163.223.210.138 port 55334 2026-10-28T22:24:49.138512 main.justuptowngames.com sshd-session[1615427]: Invalid user mao from 163.223.210.138 port 34296 ... show less	Brute-Force SSH
🇳🇱 195.178.110.137	18 hours ago	[Wed Oct 28 22:23:10.475360 2026] [:error] [pid 1495:tid 1698] [client 195.178.110.137:35198] [clien ... show more [Wed Oct 28 22:23:10.475360 2026] [:error] [pid 1495:tid 1698] [client 195.178.110.137:35198] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^\|/)(?:\\\\.env(?:\\\\.[^/]*)?\|\\\\.git(?:/\|$)\|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak\|old\|save\|tmp\|swp\|~))?\|php-info\\\\.php\|phpversion\\\\.php\|info\\\\.php\|debug\\\\.php\|pinfo\\\\.php\|pi\\\\.php\|php\\\\.php\|i\\\\.php\|application_default_credentials\\\\.json\|(?:firebase\|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "63.141.255.191"] [uri "/_profiler/phpinfo"] [unique_id "auKuDm_nWaB4nWg2d8dvEwAAABE"] [Wed Oct 28 22:23:16.709791 2026] [:error] [pid 1495:tid 1667] [client 195.178.110.137:25476] [client 195.178.110.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^ ... show less	Bad Web Bot Web App Attack
🇱🇹 77.90.185.20	18 hours ago	2026-10-28T21:56:35.900969 main.justuptowngames.com sshd-session[1592145]: Invalid user view from 77 ... show more 2026-10-28T21:56:35.900969 main.justuptowngames.com sshd-session[1592145]: Invalid user view from 77.90.185.20 port 62738 2026-10-28T21:57:29.358984 main.justuptowngames.com sshd-session[1592839]: Invalid user ubuntu from 77.90.185.20 port 29294 2026-10-28T21:58:56.147093 main.justuptowngames.com sshd-session[1594189]: Invalid user dev from 77.90.185.20 port 45632 2026-10-28T21:59:06.732464 main.justuptowngames.com sshd-session[1594310]: Invalid user centos from 77.90.185.20 port 17642 2026-10-28T22:00:23.024654 main.justuptowngames.com sshd-session[1595313]: Invalid user ghost from 77.90.185.20 port 54848 ... show less	Brute-Force SSH
🇷🇴 2.57.122.202	19 hours ago	[Wed Oct 28 21:51:21.109040 2026] [:error] [pid 3674:tid 3731] [client 2.57.122.202:0] [client 2.57. ... show more [Wed Oct 28 21:51:21.109040 2026] [:error] [pid 3674:tid 3731] [client 2.57.122.202:0] [client 2.57.122.202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.justuptowngames.com"] [uri "/app/etc/local.xml"] [unique_id "auKmmZ2jysUWRkKCatjbrwAAANQ"] [Wed Oct 28 21:51:25.347421 2026] [:error] [pid 3674:tid 3728] [client 2.57.122.202:0] [client 2.57.122.202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [sev ... show less	Bad Web Bot Web App Attack
🇺🇸 20.12.229.252	19 hours ago	[Wed Oct 28 21:26:58.647437 2026] [proxy_fcgi:error] [pid 1495:tid 1702] [client 20.12.229.252:0] AH ... show more [Wed Oct 28 21:26:58.647437 2026] [proxy_fcgi:error] [pid 1495:tid 1702] [client 20.12.229.252:0] AH01071: Got error 'Primary script unknown' [Wed Oct 28 21:26:58.678292 2026] [proxy_fcgi:error] [pid 3674:tid 3728] [client 20.12.229.252:0] AH01071: Got error 'Primary script unknown' [Wed Oct 28 21:26:58.728108 2026] [proxy_fcgi:error] [pid 1495:tid 1701] [client 20.12.229.252:0] AH01071: Got error 'Primary script unknown' [Wed Oct 28 21:26:58.762431 2026] [proxy_fcgi:error] [pid 3674:tid 3709] [client 20.12.229.252:0] AH01071: Got error 'Primary script unknown' [Wed Oct 28 21:26:58.900797 2026] [proxy_fcgi:error] [pid 1495:tid 1699] [client 20.12.229.252:0] AH01071: Got error 'Primary script unknown' [Wed Oct 28 21:26:58.949174 2026] [proxy_fcgi:error] [pid 3674:tid 3724] [client 20.12.229.252:0] AH01071: Got error 'Primary script unknown' [Wed Oct 28 21:26:59.008378 2026] [proxy_fcgi:error] [pid 3674:tid 3733] [client 20.12.229.252:0] AH01071: Got error 'Primary script unknown' [Wed O ... show less	Bad Web Bot Brute-Force
🇳🇱 45.153.34.189	19 hours ago	[Wed Oct 28 21:18:51.698910 2026] [:error] [pid 3674:tid 3710] [client 45.153.34.189:59154] [client ... show more [Wed Oct 28 21:18:51.698910 2026] [:error] [pid 3674:tid 3710] [client 45.153.34.189:59154] [client 45.153.34.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^\|/)(?:\\\\.env(?:\\\\.[^/]*)?\|\\\\.git(?:/\|$)\|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak\|old\|save\|tmp\|swp\|~))?\|php-info\\\\.php\|phpversion\\\\.php\|info\\\\.php\|debug\\\\.php\|pinfo\\\\.php\|pi\\\\.php\|php\\\\.php\|i\\\\.php\|application_default_credentials\\\\.json\|(?:firebase\|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "63.141.255.191"] [uri "/.env"] [unique_id "auKe-52jysUWRkKCatjbawAAAMI"] [Wed Oct 28 21:18:51.999681 2026] [:error] [pid 1496:tid 1627] [client 45.153.34.189:59435] [client 45.153.34.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^\|/)(?:\\\\.env(?:\\\\ ... show less	Bad Web Bot Web App Attack