|
πΊπΈ
40.124.187.47
|
|
[Tue Oct 27 00:02:46.884231 2026] [security2:error] [pid 33558:tid 33673] [client 40.124.187.47:4578 ...
show more
[Tue Oct 27 00:02:46.884231 2026] [security2:error] [pid 33558:tid 33673] [client 40.124.187.47:45784] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/druid/index.html"] [unique_id "auAiZrbUq4w7_qrRzoXCCwAAAAk"]
...
show less
|
Web App Attack
|
|
π©πͺ
217.60.76.167
|
|
[Mon Oct 26 23:12:41.978392 2026] [security2:error] [pid 33572:tid 33720] [client 217.60.76.167:5160 ...
show more
[Mon Oct 26 23:12:41.978392 2026] [security2:error] [pid 33572:tid 33720] [client 217.60.76.167:51604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/.env"] [unique_id "auAWqZoSn_YbWkLYmR_4AwAAAIo"]
...
show less
|
Web App Attack
|
|
πΊπΈ
206.189.197.22
|
|
[Mon Oct 26 23:05:51.985590 2026] [security2:error] [pid 44516:tid 44554] [client 206.189.197.22:426 ...
show more
[Mon Oct 26 23:05:51.985590 2026] [security2:error] [pid 44516:tid 44554] [client 206.189.197.22:42664] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "auAVD94TUIGjdpXHJuFUKQAAAQo"]
...
show less
|
Web App Attack
|
|
πΊπΈ
159.89.83.113
|
|
[Mon Oct 26 23:04:13.346006 2026] [security2:error] [pid 44516:tid 44555] [client 159.89.83.113:4514 ...
show more
[Mon Oct 26 23:04:13.346006 2026] [security2:error] [pid 44516:tid 44555] [client 159.89.83.113:45148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "auAUrd4TUIGjdpXHJuFT4AAAAQs"]
...
show less
|
Web App Attack
|
|
πΈπ¬
129.226.213.201
|
|
[Mon Oct 26 22:32:37.460467 2026] [security2:error] [pid 44516:tid 44552] [client 129.226.213.201:39 ...
show more
[Mon Oct 26 22:32:37.460467 2026] [security2:error] [pid 44516:tid 44552] [client 129.226.213.201:39402] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/.env"] [unique_id "auANRd4TUIGjdpXHJuFQ5gAAAQg"]
...
show less
|
Web App Attack
|
|
πΊπΈ
4.249.17.209
|
|
[Mon Oct 26 21:51:53.126509 2026] [security2:error] [pid 33559:tid 33688] [client 4.249.17.209:46942 ...
show more
[Mon Oct 26 21:51:53.126509 2026] [security2:error] [pid 33559:tid 33688] [client 4.249.17.209:46942] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/actuator/health"] [unique_id "auADuU6mVcRx8LTczonZkQAAAFA"]
...
show less
|
Web App Attack
|
|
πΈπ¬
104.28.156.148
|
|
[Mon Oct 26 20:32:07.103526 2026] [security2:error] [pid 33558:tid 33700] [client 104.28.156.148:526 ...
show more
[Mon Oct 26 20:32:07.103526 2026] [security2:error] [pid 33558:tid 33700] [client 104.28.156.148:52664] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "api.ipify.org"] [uri "/"] [unique_id "at_xB7bUq4w7_qrRzoW51QAAABU"]
...
show less
|
Web App Attack
|
|
π¨π¦
137.184.163.155
|
|
[Mon Oct 26 20:23:13.053653 2026] [security2:error] [pid 33559:tid 33676] [client 137.184.163.155:43 ...
show more
[Mon Oct 26 20:23:13.053653 2026] [security2:error] [pid 33559:tid 33676] [client 137.184.163.155:43646] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "vpn.yorknation.com"] [uri "/.git/config"] [unique_id "at_u8U6mVcRx8LTczonW_AAAAEw"]
...
show less
|
Web App Attack
|
|
π°π·
43.164.131.148
|
|
[Mon Oct 26 20:14:15.467035 2026] [security2:error] [pid 33558:tid 33704] [client 43.164.131.148:380 ...
show more
[Mon Oct 26 20:14:15.467035 2026] [security2:error] [pid 33558:tid 33704] [client 43.164.131.148:38092] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 6)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "at_s17bUq4w7_qrRzoW5DQAAABc"]
...
show less
|
Web App Attack
|
|
π©πͺ
130.12.180.171
|
|
[Mon Oct 26 19:26:09.378829 2026] [security2:error] [pid 33558:tid 33640] [client 130.12.180.171:326 ...
show more
[Mon Oct 26 19:26:09.378829 2026] [security2:error] [pid 33558:tid 33640] [client 130.12.180.171:32672] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yorknation.com"] [uri "/.env"] [unique_id "at_hkbbUq4w7_qrRzoW3LgAAAAA"]
...
show less
|
Web App Attack
|
|
πΊπΈ
34.67.121.218
|
|
[Mon Oct 26 19:25:07.595091 2026] [security2:error] [pid 44516:tid 44555] [client 34.67.121.218:4910 ...
show more
[Mon Oct 26 19:25:07.595091 2026] [security2:error] [pid 44516:tid 44555] [client 34.67.121.218:49106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "odoo.yorknation.com"] [uri "/"] [unique_id "at_hU94TUIGjdpXHJuE9UwAAAQs"]
...
show less
|
Web App Attack
|
|
π©πͺ
167.94.146.56
|
|
[Mon Oct 26 18:41:52.284602 2026] [security2:error] [pid 33783:tid 33834] [client 167.94.146.56:2103 ...
show more
[Mon Oct 26 18:41:52.284602 2026] [security2:error] [pid 33783:tid 33834] [client 167.94.146.56:21034] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/phpinfo"] [unique_id "at_XMK_O46ekVNHfUgNdjwAAANc"]
...
show less
|
Web App Attack
|
|
π©πͺ
102.220.163.241
|
|
[Mon Oct 26 18:31:49.327854 2026] [security2:error] [pid 44516:tid 44565] [client 102.220.163.241:24 ...
show more
[Mon Oct 26 18:31:49.327854 2026] [security2:error] [pid 44516:tid 44565] [client 102.220.163.241:24502] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/.git/config"] [unique_id "at_U1d4TUIGjdpXHJuE4iQAAARU"]
...
show less
|
Web App Attack
|
|
πΊπΈ
40.80.203.118
|
|
[Mon Oct 26 17:59:43.664029 2026] [security2:error] [pid 44516:tid 44567] [client 40.80.203.118:5052 ...
show more
[Mon Oct 26 17:59:43.664029 2026] [security2:error] [pid 44516:tid 44567] [client 40.80.203.118:50528] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/portal/redlion"] [unique_id "at_NT94TUIGjdpXHJuEwkwAAARc"]
...
show less
|
Web App Attack
|
|
π³π±
94.154.43.99
|
|
[Mon Oct 26 17:58:00.496091 2026] [security2:error] [pid 44516:tid 44560] [client 94.154.43.99:18386 ...
show more
[Mon Oct 26 17:58:00.496091 2026] [security2:error] [pid 44516:tid 44560] [client 94.154.43.99:18386] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "at_M6N4TUIGjdpXHJuEwIgAAARA"], referer: http://73.88.79.72:80/
...
show less
|
Web App Attack
|
|
π©πͺ
130.12.180.164
|
|
[Mon Oct 26 17:57:33.864778 2026] [security2:error] [pid 44516:tid 44556] [client 130.12.180.164:311 ...
show more
[Mon Oct 26 17:57:33.864778 2026] [security2:error] [pid 44516:tid 44556] [client 130.12.180.164:31142] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "test2.yorknation.com"] [uri "/.env"] [unique_id "at_Mzd4TUIGjdpXHJuEwEwAAAQw"]
...
show less
|
Web App Attack
|
|
πΊπΈ
137.184.105.192
|
|
[Mon Oct 26 17:54:54.510557 2026] [security2:error] [pid 44516:tid 44568] [client 137.184.105.192:33 ...
show more
[Mon Oct 26 17:54:54.510557 2026] [security2:error] [pid 44516:tid 44568] [client 137.184.105.192:33764] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "at_MLt4TUIGjdpXHJuEvzgAAARg"]
...
show less
|
Web App Attack
|
|
π©πͺ
130.12.180.165
|
|
[Mon Oct 26 16:34:14.951989 2026] [security2:error] [pid 44516:tid 44549] [client 130.12.180.165:547 ...
show more
[Mon Oct 26 16:34:14.951989 2026] [security2:error] [pid 44516:tid 44549] [client 130.12.180.165:54746] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "learn.kiwiconsulting.yorknation.com"] [uri "/.env"] [unique_id "at-5Rt4TUIGjdpXHJuEhTwAAAQU"]
...
show less
|
Web App Attack
|
|
πΊπΈ
20.65.217.207
|
|
[Mon Oct 26 16:24:18.460378 2026] [security2:error] [pid 44516:tid 44545] [client 20.65.217.207:3430 ...
show more
[Mon Oct 26 16:24:18.460378 2026] [security2:error] [pid 44516:tid 44545] [client 20.65.217.207:34306] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 13)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/autodiscover/autodiscover.json"] [unique_id "at-28t4TUIGjdpXHJuEfWgAAAQE"]
...
show less
|
Web App Attack
|
|
π©πͺ
102.220.163.241
|
|
[Mon Oct 26 16:13:44.688367 2026] [security2:error] [pid 33572:tid 33728] [client 102.220.163.241:37 ...
show more
[Mon Oct 26 16:13:44.688367 2026] [security2:error] [pid 33572:tid 33728] [client 102.220.163.241:37506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/.env"] [unique_id "at-0eJoSn_YbWkLYmR_hpgAAAJI"]
...
show less
|
Web App Attack
|
|
πΊπΈ
34.67.121.218
|
|
[Mon Oct 26 15:47:49.616979 2026] [security2:error] [pid 33559:tid 33643] [client 34.67.121.218:5779 ...
show more
[Mon Oct 26 15:47:49.616979 2026] [security2:error] [pid 33559:tid 33643] [client 34.67.121.218:57798] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "vault.yorknation.com"] [uri "/"] [unique_id "at-uZU6mVcRx8LTczonHIAAAAEE"]
...
show less
|
Web App Attack
|
|
πΈπ¬
157.245.199.130
|
|
[Mon Oct 26 13:10:41.696231 2026] [security2:error] [pid 33558:tid 33698] [client 157.245.199.130:64 ...
show more
[Mon Oct 26 13:10:41.696231 2026] [security2:error] [pid 33558:tid 33698] [client 157.245.199.130:64772] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yorknation.com"] [uri "/images/images/cache.php"] [unique_id "at-JkbbUq4w7_qrRzoWZ1gAAABQ"], referer: www.google.com
...
show less
|
Web App Attack
|
|
πΊπΈ
66.132.195.165
|
|
[Mon Oct 26 12:11:07.478956 2026] [security2:error] [pid 33572:tid 33733] [client 66.132.195.165:420 ...
show more
[Mon Oct 26 12:11:07.478956 2026] [security2:error] [pid 33572:tid 33733] [client 66.132.195.165:42090] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/phpinfo"] [unique_id "at97m5oSn_YbWkLYmR_P1QAAAJc"]
...
show less
|
Web App Attack
|
|
π°π·
101.33.80.42
|
|
[Mon Oct 26 11:35:25.348503 2026] [security2:error] [pid 44516:tid 44558] [client 101.33.80.42:38968 ...
show more
[Mon Oct 26 11:35:25.348503 2026] [security2:error] [pid 44516:tid 44558] [client 101.33.80.42:38968] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 6)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "at9zPd4TUIGjdpXHJuHoAwAAAQ4"]
...
show less
|
Web App Attack
|
|
π©πͺ
130.12.180.167
|
|
[Mon Oct 26 11:12:47.244836 2026] [security2:error] [pid 33559:tid 33653] [client 130.12.180.167:556 ...
show more
[Mon Oct 26 11:12:47.244836 2026] [security2:error] [pid 33559:tid 33653] [client 130.12.180.167:55602] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "gateway.yorknation.com"] [uri "/.env"] [unique_id "at9t706mVcRx8LTczomzPAAAAEU"]
...
show less
|
Web App Attack
|