|
π©πͺ
130.12.180.167
|
|
[Mon Oct 26 11:12:47.244836 2026] [security2:error] [pid 33559:tid 33653] [client 130.12.180.167:556 ...
show more
[Mon Oct 26 11:12:47.244836 2026] [security2:error] [pid 33559:tid 33653] [client 130.12.180.167:55602] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "gateway.yorknation.com"] [uri "/.env"] [unique_id "at9t706mVcRx8LTczomzPAAAAEU"]
...
show less
|
Web App Attack
|
|
π©πͺ
130.12.180.175
|
|
[Mon Oct 26 11:12:28.353964 2026] [security2:error] [pid 33558:tid 33673] [client 130.12.180.175:514 ...
show more
[Mon Oct 26 11:12:28.353964 2026] [security2:error] [pid 33558:tid 33673] [client 130.12.180.175:51460] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "vpn.yorknation.com"] [uri "/.env"] [unique_id "at9t3LbUq4w7_qrRzoWQpQAAAAk"]
...
show less
|
Web App Attack
|
|
π©πͺ
130.12.180.176
|
|
[Mon Oct 26 10:30:05.093207 2026] [security2:error] [pid 33558:tid 33642] [client 130.12.180.176:377 ...
show more
[Mon Oct 26 10:30:05.093207 2026] [security2:error] [pid 33558:tid 33642] [client 130.12.180.176:37776] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "forum.yorknation.com"] [uri "/.env"] [unique_id "at9j7bbUq4w7_qrRzoWOFgAAAAE"]
...
show less
|
Web App Attack
|
|
πΊπΈ
40.74.211.249
|
|
[Mon Oct 26 10:08:26.596421 2026] [security2:error] [pid 44516:tid 44551] [client 40.74.211.249:3547 ...
show more
[Mon Oct 26 10:08:26.596421 2026] [security2:error] [pid 44516:tid 44551] [client 40.74.211.249:35478] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/developmentserver/metadatauploader"] [unique_id "at9e2t4TUIGjdpXHJuHYtwAAAQc"]
...
show less
|
Web App Attack
|
|
π³π±
34.90.69.58
|
|
[Mon Oct 26 08:06:02.832088 2026] [security2:error] [pid 33783:tid 33822] [client 34.90.69.58:49986] ...
show more
[Mon Oct 26 08:06:02.832088 2026] [security2:error] [pid 33783:tid 33822] [client 34.90.69.58:49986] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "partner.yorknation.com"] [uri "/"] [unique_id "at9CKq_O46ekVNHfUgM2swAAAMs"]
...
show less
|
Web App Attack
|
|
πΊπΈ
48.217.66.50
|
|
[Mon Oct 26 07:59:10.356967 2026] [security2:error] [pid 44516:tid 44550] [client 48.217.66.50:56530 ...
show more
[Mon Oct 26 07:59:10.356967 2026] [security2:error] [pid 44516:tid 44550] [client 48.217.66.50:56530] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/owa/auth/x.js"] [unique_id "at9Ajt4TUIGjdpXHJuG96wAAAQY"]
...
show less
|
Web App Attack
|
|
πΊπΈ
20.98.137.2
|
|
[Mon Oct 26 06:54:13.669754 2026] [security2:error] [pid 33783:tid 33812] [client 20.98.137.2:53806] ...
show more
[Mon Oct 26 06:54:13.669754 2026] [security2:error] [pid 33783:tid 33812] [client 20.98.137.2:53806] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "at8xVa_O46ekVNHfUgMzjwAAAME"]
...
show less
|
Web App Attack
|
|
π§π·
43.157.156.190
|
|
[Mon Oct 26 06:12:52.271523 2026] [security2:error] [pid 44516:tid 44549] [client 43.157.156.190:535 ...
show more
[Mon Oct 26 06:12:52.271523 2026] [security2:error] [pid 44516:tid 44549] [client 43.157.156.190:53550] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 6)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "at8npN4TUIGjdpXHJuGzqwAAAQU"]
...
show less
|
Web App Attack
|
|
πΊπΈ
40.124.80.46
|
|
[Mon Oct 26 06:05:17.745046 2026] [security2:error] [pid 33558:tid 33646] [client 40.124.80.46:34928 ...
show more
[Mon Oct 26 06:05:17.745046 2026] [security2:error] [pid 33558:tid 33646] [client 40.124.80.46:34928] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/owa/auth/logon.aspx"] [unique_id "at8l3bbUq4w7_qrRzoV9ggAAAAM"]
...
show less
|
Web App Attack
|
|
π·π΄
92.118.39.93
|
|
[Mon Oct 26 05:58:12.811735 2026] [security2:error] [pid 44516:tid 44566] [client 92.118.39.93:36508 ...
show more
[Mon Oct 26 05:58:12.811735 2026] [security2:error] [pid 44516:tid 44566] [client 92.118.39.93:36508] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "vpn.yorknation.com"] [uri "/.git/HEAD"] [unique_id "at8kNN4TUIGjdpXHJuGyGQAAARY"]
...
show less
|
Web App Attack
|
|
πΊπΈ
147.182.183.163
|
|
[Mon Oct 26 05:47:00.687923 2026] [security2:error] [pid 33572:tid 33718] [client 147.182.183.163:55 ...
show more
[Mon Oct 26 05:47:00.687923 2026] [security2:error] [pid 33572:tid 33718] [client 147.182.183.163:55980] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 33)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/hello.world"] [unique_id "at8hlJoSn_YbWkLYmR-3WgAAAIg"]
...
show less
|
Web App Attack
|
|
π§πͺ
130.211.75.101
|
|
[Mon Oct 26 05:44:28.528548 2026] [security2:error] [pid 33572:tid 33718] [client 130.211.75.101:587 ...
show more
[Mon Oct 26 05:44:28.528548 2026] [security2:error] [pid 33572:tid 33718] [client 130.211.75.101:58792] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "forum.yorknation.com"] [uri "/"] [unique_id "at8g_JoSn_YbWkLYmR-3OAAAAIg"]
...
show less
|
Web App Attack
|
|
π³π±
34.90.69.58
|
|
[Mon Oct 26 05:17:24.377367 2026] [security2:error] [pid 33572:tid 33708] [client 34.90.69.58:50342] ...
show more
[Mon Oct 26 05:17:24.377367 2026] [security2:error] [pid 33572:tid 33708] [client 34.90.69.58:50342] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "partner.yorknation.com"] [uri "/"] [unique_id "at8apJoSn_YbWkLYmR-2JgAAAIQ"]
...
show less
|
Web App Attack
|
|
π―π΅
34.146.179.240
|
|
[Mon Oct 26 05:04:28.820082 2026] [security2:error] [pid 33559:tid 33641] [client 34.146.179.240:390 ...
show more
[Mon Oct 26 05:04:28.820082 2026] [security2:error] [pid 33559:tid 33641] [client 34.146.179.240:39048] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yorknation.com"] [uri "/"] [unique_id "at8XnE6mVcRx8LTczomgIwAAAEA"]
...
show less
|
Web App Attack
|
|
π³π±
104.28.163.200
|
|
[Mon Oct 26 04:54:40.110467 2026] [security2:error] [pid 33783:tid 33821] [client 104.28.163.200:180 ...
show more
[Mon Oct 26 04:54:40.110467 2026] [security2:error] [pid 33783:tid 33821] [client 104.28.163.200:18061] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "probe.ccc.us.kg"] [uri "/"] [unique_id "at8VUK_O46ekVNHfUgMvswAAAMo"]
...
show less
|
Web App Attack
|
|
π³π±
104.28.159.210
|
|
[Mon Oct 26 04:24:06.244999 2026] [security2:error] [pid 44516:tid 44551] [client 104.28.159.210:301 ...
show more
[Mon Oct 26 04:24:06.244999 2026] [security2:error] [pid 44516:tid 44551] [client 104.28.159.210:30176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "probe.ccc.us.kg"] [uri "/"] [unique_id "at8OJt4TUIGjdpXHJuGo9wAAAQc"]
...
show less
|
Web App Attack
|
|
π©πͺ
130.12.180.164
|
|
[Mon Oct 26 04:17:15.346229 2026] [security2:error] [pid 33572:tid 33725] [client 130.12.180.164:570 ...
show more
[Mon Oct 26 04:17:15.346229 2026] [security2:error] [pid 33572:tid 33725] [client 130.12.180.164:57010] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.yorknation.com"] [uri "/.env"] [unique_id "at8Mi5oSn_YbWkLYmR-ztAAAAI8"]
...
show less
|
Web App Attack
|
|
π©πͺ
130.12.180.163
|
|
[Mon Oct 26 04:16:13.412391 2026] [security2:error] [pid 33783:tid 33823] [client 130.12.180.163:469 ...
show more
[Mon Oct 26 04:16:13.412391 2026] [security2:error] [pid 33783:tid 33823] [client 130.12.180.163:46994] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mail.yorknation.com"] [uri "/.env"] [unique_id "at8MTa_O46ekVNHfUgMvCQAAAMw"]
...
show less
|
Web App Attack
|
|
π©πͺ
130.12.180.170
|
|
[Mon Oct 26 04:16:13.280488 2026] [security2:error] [pid 33783:tid 33816] [client 130.12.180.170:554 ...
show more
[Mon Oct 26 04:16:13.280488 2026] [security2:error] [pid 33783:tid 33816] [client 130.12.180.170:55464] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "toastdev.yorknation.com"] [uri "/.env"] [unique_id "at8MTa_O46ekVNHfUgMvCAAAAMU"]
...
show less
|
Web App Attack
|
|
π³π±
104.28.155.217
|
|
[Mon Oct 26 04:05:41.015522 2026] [security2:error] [pid 33559:tid 33682] [client 104.28.155.217:655 ...
show more
[Mon Oct 26 04:05:41.015522 2026] [security2:error] [pid 33559:tid 33682] [client 104.28.155.217:65504] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "probe.ccc.us.kg"] [uri "/"] [unique_id "at8J1U6mVcRx8LTczomeWgAAAE4"]
...
show less
|
Web App Attack
|
|
πΈπ¬
34.143.251.207
|
|
[Mon Oct 26 03:58:54.376932 2026] [security2:error] [pid 44516:tid 44563] [client 34.143.251.207:502 ...
show more
[Mon Oct 26 03:58:54.376932 2026] [security2:error] [pid 44516:tid 44563] [client 34.143.251.207:50216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yorknation.com"] [uri "/"] [unique_id "at8IPt4TUIGjdpXHJuGnRgAAARM"]
...
show less
|
Web App Attack
|
|
πΈπ¬
136.85.111.54
|
|
[Mon Oct 26 03:36:39.760509 2026] [security2:error] [pid 33559:tid 33716] [client 136.85.111.54:3351 ...
show more
[Mon Oct 26 03:36:39.760509 2026] [security2:error] [pid 33559:tid 33716] [client 136.85.111.54:33518] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "support.yorknation.com"] [uri "/"] [unique_id "at8DB06mVcRx8LTczomdbgAAAFg"]
...
show less
|
Web App Attack
|
|
π³π±
104.28.155.239
|
|
[Mon Oct 26 03:32:58.207911 2026] [security2:error] [pid 33558:tid 33684] [client 104.28.155.239:522 ...
show more
[Mon Oct 26 03:32:58.207911 2026] [security2:error] [pid 33558:tid 33684] [client 104.28.155.239:52286] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "probe.ccc.us.kg"] [uri "/"] [unique_id "at8CKrbUq4w7_qrRzoV2aQAAAA0"]
...
show less
|
Web App Attack
|
|
π§πͺ
35.195.171.225
|
|
[Mon Oct 26 02:51:09.689299 2026] [security2:error] [pid 33558:tid 33702] [client 35.195.171.225:437 ...
show more
[Mon Oct 26 02:51:09.689299 2026] [security2:error] [pid 33558:tid 33702] [client 35.195.171.225:43782] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "at74XbbUq4w7_qrRzoV0NwAAABY"]
...
show less
|
Web App Attack
|
|
π©πͺ
167.94.146.60
|
|
[Mon Oct 26 02:46:04.932661 2026] [security2:error] [pid 33559:tid 33641] [client 167.94.146.60:3161 ...
show more
[Mon Oct 26 02:46:04.932661 2026] [security2:error] [pid 33559:tid 33641] [client 167.94.146.60:31610] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/phpinfo.php"] [unique_id "at73LE6mVcRx8LTczomcGAAAAEA"]
...
show less
|
Web App Attack
|