|
π¨π³
118.196.122.122
|
|
[Sun Oct 18 08:10:01.972387 2026] [security2:error] [pid 33178:tid 33333] [client 118.196.122.122:43 ...
show more
[Sun Oct 18 08:10:01.972387 2026] [security2:error] [pid 33178:tid 33333] [client 118.196.122.122:43790] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 33)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/hello.world"] [unique_id "atS3GUbwSaG52eOwXTkMogAAAFc"]
...
show less
|
Web App Attack
|
|
π©πͺ
130.12.180.165
|
|
[Sun Oct 18 06:49:39.850144 2026] [security2:error] [pid 33178:tid 33282] [client 130.12.180.165:431 ...
show more
[Sun Oct 18 06:49:39.850144 2026] [security2:error] [pid 33178:tid 33282] [client 130.12.180.165:43120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mail.yorknation.com"] [uri "/.env"] [unique_id "atSkQ0bwSaG52eOwXTkIyAAAAEM"]
...
show less
|
Web App Attack
|
|
π©πͺ
130.12.180.166
|
|
[Sun Oct 18 06:49:08.852104 2026] [security2:error] [pid 34473:tid 34507] [client 130.12.180.166:548 ...
show more
[Sun Oct 18 06:49:08.852104 2026] [security2:error] [pid 34473:tid 34507] [client 130.12.180.166:54844] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "php.yorknation.com"] [uri "/.env"] [unique_id "atSkJMxxH3-aCWf708nAkgAAAQY"]
...
show less
|
Web App Attack
|
|
πΊπΈ
154.54.100.187
|
|
[Sun Oct 18 05:37:49.661489 2026] [security2:error] [pid 34473:tid 34523] [client 154.54.100.187:596 ...
show more
[Sun Oct 18 05:37:49.661489 2026] [security2:error] [pid 34473:tid 34523] [client 154.54.100.187:59672] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "test2.yorknation.com"] [uri "/.git/config"] [unique_id "atSTbcxxH3-aCWf708m5egAAARY"]
...
show less
|
Web App Attack
|
|
π§πͺ
34.38.226.144
|
|
[Sun Oct 18 03:03:22.839774 2026] [security2:error] [pid 34473:tid 34515] [client 34.38.226.144:2640 ...
show more
[Sun Oct 18 03:03:22.839774 2026] [security2:error] [pid 34473:tid 34515] [client 34.38.226.144:26406] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "atRvOsxxH3-aCWf708mrIQAAAQ4"]
...
show less
|
Web App Attack
|
|
π§π·
34.95.194.28
|
|
[Sun Oct 18 02:30:28.430493 2026] [security2:error] [pid 33361:tid 33403] [client 34.95.194.28:60436 ...
show more
[Sun Oct 18 02:30:28.430493 2026] [security2:error] [pid 33361:tid 33403] [client 34.95.194.28:60436] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "pt.yorknation.com"] [uri "/"] [unique_id "atRnhIZqdNs3IVKQhEWHKgAAAM4"]
...
show less
|
Web App Attack
|
|
π§πͺ
34.156.100.247
|
|
[Sun Oct 18 00:35:03.133854 2026] [security2:error] [pid 3874:tid 3912] [client 34.156.100.247:23964 ...
show more
[Sun Oct 18 00:35:03.133854 2026] [security2:error] [pid 3874:tid 3912] [client 34.156.100.247:23964] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "atRMd6uFDYnMyYcrObaYrQAAAQo"]
...
show less
|
Web App Attack
|
|
π§π·
43.135.211.148
|
|
[Sun Oct 18 00:12:49.258936 2026] [security2:error] [pid 804:tid 916] [client 43.135.211.148:59278] ...
show more
[Sun Oct 18 00:12:49.258936 2026] [security2:error] [pid 804:tid 916] [client 43.135.211.148:59278] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 6)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "atRHQfrrMHg3y5cl7tGIwQAAAAc"]
...
show less
|
Web App Attack
|
|
πΊπΈ
8.234.25.9
|
|
[Sat Oct 17 23:02:36.303334 2026] [security2:error] [pid 3874:tid 3918] [client 8.234.25.9:34680] Mo ...
show more
[Sat Oct 17 23:02:36.303334 2026] [security2:error] [pid 3874:tid 3918] [client 8.234.25.9:34680] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yorknation.com"] [uri "/"] [unique_id "atQ2zKuFDYnMyYcrObaQSgAAARA"]
...
show less
|
Web App Attack
|
|
πΊπΈ
35.229.61.193
|
|
[Sat Oct 17 22:27:58.879374 2026] [security2:error] [pid 3874:tid 3917] [client 35.229.61.193:40256] ...
show more
[Sat Oct 17 22:27:58.879374 2026] [security2:error] [pid 3874:tid 3917] [client 35.229.61.193:40256] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "test2.yorknation.com"] [uri "/"] [unique_id "atQurquFDYnMyYcrObaMygAAAQ8"], referer: https://test2.yorknation.com/
...
show less
|
Web App Attack
|
|
π°π·
43.133.253.253
|
|
[Sat Oct 17 21:23:13.713660 2026] [security2:error] [pid 805:tid 960] [client 43.133.253.253:40604] ...
show more
[Sat Oct 17 21:23:13.713660 2026] [security2:error] [pid 805:tid 960] [client 43.133.253.253:40604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 6)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "atQfgXh7UyYfYrQ4FReHHAAAAFU"]
...
show less
|
Web App Attack
|
|
πΊπΈ
135.119.19.134
|
|
[Sat Oct 17 21:19:17.607408 2026] [security2:error] [pid 3874:tid 3917] [client 135.119.19.134:35976 ...
show more
[Sat Oct 17 21:19:17.607408 2026] [security2:error] [pid 3874:tid 3917] [client 135.119.19.134:35976] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "atQelauFDYnMyYcrObaGzwAAAQ8"]
...
show less
|
Web App Attack
|
|
πΊπΈ
135.119.19.244
|
|
[Sat Oct 17 21:02:57.990208 2026] [security2:error] [pid 805:tid 947] [client 135.119.19.244:35368] ...
show more
[Sat Oct 17 21:02:57.990208 2026] [security2:error] [pid 805:tid 947] [client 135.119.19.244:35368] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/version"] [unique_id "atQawXh7UyYfYrQ4FReGbQAAAFE"]
...
show less
|
Web App Attack
|
|
π©πͺ
172.71.148.46
|
|
[Sat Oct 17 20:06:05.375963 2026] [security2:error] [pid 3874:tid 3921] [client 172.71.148.46:11901] ...
show more
[Sat Oct 17 20:06:05.375963 2026] [security2:error] [pid 3874:tid 3921] [client 172.71.148.46:11901] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yorknation.com"] [uri "/admin/config.php.bak"] [unique_id "atQNbauFDYnMyYcrObaAlwAAARM"]
...
show less
|
Web App Attack
|
|
π©πͺ
172.71.148.47
|
|
[Sat Oct 17 20:06:05.371172 2026] [security2:error] [pid 1372:tid 1402] [client 172.71.148.47:12062] ...
show more
[Sat Oct 17 20:06:05.371172 2026] [security2:error] [pid 1372:tid 1402] [client 172.71.148.47:12062] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yorknation.com"] [uri "/rezerv.sql"] [unique_id "atQNbcuQURgVe_CRkl1OEAAAAMI"]
...
show less
|
Web App Attack
|
|
π©πͺ
172.71.148.27
|
|
[Sat Oct 17 20:06:05.335378 2026] [security2:error] [pid 3874:tid 3906] [client 172.71.148.27:11636] ...
show more
[Sat Oct 17 20:06:05.335378 2026] [security2:error] [pid 3874:tid 3906] [client 172.71.148.27:11636] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yorknation.com"] [uri "/database.sql"] [unique_id "atQNbauFDYnMyYcrObaAlgAAAQQ"]
...
show less
|
Web App Attack
|
|
π©πͺ
172.71.148.26
|
|
[Sat Oct 17 20:06:05.328141 2026] [security2:error] [pid 3874:tid 3919] [client 172.71.148.26:10740] ...
show more
[Sat Oct 17 20:06:05.328141 2026] [security2:error] [pid 3874:tid 3919] [client 172.71.148.26:10740] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yorknation.com"] [uri "/config.php.bak"] [unique_id "atQNbauFDYnMyYcrObaAlQAAARE"]
...
show less
|
Web App Attack
|
|
π²πΎ
60.52.34.196
|
|
[Sat Oct 17 19:31:43.085029 2026] [security2:error] [pid 813:tid 950] [client 60.52.34.196:37394] Mo ...
show more
[Sat Oct 17 19:31:43.085029 2026] [security2:error] [pid 813:tid 950] [client 60.52.34.196:37394] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/.env"] [unique_id "atQFXyfWloLlPJQLepeyJAAAAIo"]
...
show less
|
Web App Attack
|
|
πΊπΈ
20.40.218.187
|
|
[Sat Oct 17 18:57:33.871420 2026] [security2:error] [pid 1372:tid 1402] [client 20.40.218.187:58186] ...
show more
[Sat Oct 17 18:57:33.871420 2026] [security2:error] [pid 1372:tid 1402] [client 20.40.218.187:58186] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 13)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/autodiscover/autodiscover.json"] [unique_id "atP9XcuQURgVe_CRkl1LgwAAAMI"]
...
show less
|
Web App Attack
|
|
πΊπΈ
43.153.10.13
|
|
[Sat Oct 17 17:23:29.448811 2026] [security2:error] [pid 3874:tid 3926] [client 43.153.10.13:39386] ...
show more
[Sat Oct 17 17:23:29.448811 2026] [security2:error] [pid 3874:tid 3926] [client 43.153.10.13:39386] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 6)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "atPnUauFDYnMyYcrObZqywAAARg"]
...
show less
|
Web App Attack
|
|
πΊπΈ
52.248.43.126
|
|
[Sat Oct 17 15:24:59.619364 2026] [security2:error] [pid 805:tid 920] [client 52.248.43.126:48372] M ...
show more
[Sat Oct 17 15:24:59.619364 2026] [security2:error] [pid 805:tid 920] [client 52.248.43.126:48372] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "atPLi3h7UyYfYrQ4FRdxzAAAAEY"]
...
show less
|
Web App Attack
|
|
πΊπΈ
34.10.122.162
|
|
[Sat Oct 17 14:04:06.002418 2026] [security2:error] [pid 1372:tid 1401] [client 34.10.122.162:55712] ...
show more
[Sat Oct 17 14:04:06.002418 2026] [security2:error] [pid 1372:tid 1401] [client 34.10.122.162:55712] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yorknation.com"] [uri "/.git/config"] [unique_id "atO4lcuQURgVe_CRkl07agAAAME"]
...
show less
|
Web App Attack
|
|
πΊπΈ
20.65.178.72
|
|
[Sat Oct 17 13:17:19.033196 2026] [security2:error] [pid 3874:tid 3916] [client 20.65.178.72:33452] ...
show more
[Sat Oct 17 13:17:19.033196 2026] [security2:error] [pid 3874:tid 3916] [client 20.65.178.72:33452] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/manager/text/list"] [unique_id "atOtn6uFDYnMyYcrObY6kwAAAQ4"]
...
show less
|
Web App Attack
|
|
πΊπΈ
47.251.42.6
|
|
[Sat Oct 17 11:32:16.590958 2026] [security2:error] [pid 804:tid 961] [client 47.251.42.6:35318] Mod ...
show more
[Sat Oct 17 11:32:16.590958 2026] [security2:error] [pid 804:tid 961] [client 47.251.42.6:35318] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 48)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "atOVAPrrMHg3y5cl7tFZCQAAABc"]
...
show less
|
Web App Attack
|
|
π¨π³
121.41.164.242
|
|
[Sat Oct 17 11:09:54.666742 2026] [security2:error] [pid 805:tid 945] [client 121.41.164.242:48894] ...
show more
[Sat Oct 17 11:09:54.666742 2026] [security2:error] [pid 805:tid 945] [client 121.41.164.242:48894] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/api/2.0/mlflow/experiments/list"] [unique_id "atOPwnh7UyYfYrQ4FRdhMwAAAFA"]
...
show less
|
Web App Attack
|