|
🇺🇸
45.45.237.97
|
|
[Sun Nov 01 07:11:03.940720 2026] [security2:error] [pid 3548312:tid 3548312] [client 45.45.237.97:0 ...
show more
[Sun Nov 01 07:11:03.940720 2026] [security2:error] [pid 3548312:tid 3548312] [client 45.45.237.97:0] [client 45.45.237.97] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.git/config"] [unique_id "aubmB4aEsM7PCfYa59hzHQAAAAI"]
[Sun Nov 01 07:11:04.119334 2026] [security2:error] [pid 3542874:tid 3542874] [client 45.45.237.97:0] [client 45.45.237.97] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [seve
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
93.123.109.247
|
|
[Sun Nov 01 06:51:52.630204 2026] [security2:error] [pid 3505903:tid 3505903] [client 93.123.109.247 ...
show more
[Sun Nov 01 06:51:52.630204 2026] [security2:error] [pid 3505903:tid 3505903] [client 93.123.109.247:0] [client 93.123.109.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.env"] [unique_id "aubhiB8oxL10oxwisqyH5wAAAAo"]
[Sun Nov 01 06:51:52.637277 2026] [security2:error] [pid 3535011:tid 3535011] [client 93.123.109.247:0] [client 93.123.109.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [sev
...
show less
|
Hacking
Web App Attack
|
|
🇨🇦
143.110.217.244
|
|
[Sun Nov 01 06:47:48.684444 2026] [security2:error] [pid 3535100:tid 3535100] [client 143.110.217.24 ...
show more
[Sun Nov 01 06:47:48.684444 2026] [security2:error] [pid 3535100:tid 3535100] [client 143.110.217.244:0] [client 143.110.217.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.DS_Store"] [unique_id "aubglOqCtIQ-_C6tqkHvfQAAAB8"]
[Sun Nov 01 06:47:49.697618 2026] [security2:error] [pid 3535096:tid 3535096] [client 143.110.217.244:0] [client 143.110.217.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score:
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
165.22.34.189
|
|
[Sun Nov 01 06:47:49.316699 2026] [security2:error] [pid 3536784:tid 3536784] [client 165.22.34.189: ...
show more
[Sun Nov 01 06:47:49.316699 2026] [security2:error] [pid 3536784:tid 3536784] [client 165.22.34.189:0] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.DS_Store"] [unique_id "aubglYvd1OBxvq17XpKoCgAAAAA"]
[Sun Nov 01 06:47:50.308112 2026] [security2:error] [pid 3535094:tid 3535094] [client 165.22.34.189:0] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [se
...
show less
|
Hacking
Web App Attack
|
|
🇷🇴
2.57.122.208
|
|
[Sun Nov 01 06:47:00.103677 2026] [security2:error] [pid 3535094:tid 3535094] [client 2.57.122.208:3 ...
show more
[Sun Nov 01 06:47:00.103677 2026] [security2:error] [pid 3535094:tid 3535094] [client 2.57.122.208:36308] [client 2.57.122.208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "onderdelen.fambus.nl"] [uri "/.env"] [unique_id "aubgZIFUDWldU9ODwZ6wgAAAABk"]
[Sun Nov 01 06:47:00.144793 2026] [security2:error] [pid 3535094:tid 3535094] [client 2.57.122.208:36308] [client 2.57.122.208] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [
...
show less
|
Hacking
Web App Attack
|
|
🇩🇪
213.209.159.133
|
|
[Sun Nov 01 06:07:45.361721 2026] [security2:error] [pid 3426324:tid 3426324] [client 213.209.159.13 ...
show more
[Sun Nov 01 06:07:45.361721 2026] [security2:error] [pid 3426324:tid 3426324] [client 213.209.159.133:0] [client 213.209.159.133] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.fambus.nl"] [uri "/.env"] [unique_id "aubXMX63tmdMEDRmOWUysgAAABM"]
[Sun Nov 01 06:07:46.377169 2026] [security2:error] [pid 3426332:tid 3426332] [client 213.209.159.133:0] [client 213.209.159.133] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [sev
...
show less
|
Hacking
Web App Attack
|
|
🇨🇦
34.19.173.10
|
|
[Sun Nov 01 06:02:40.642588 2026] [security2:error] [pid 3426320:tid 3426320] [client 34.19.173.10:5 ...
show more
[Sun Nov 01 06:02:40.642588 2026] [security2:error] [pid 3426320:tid 3426320] [client 34.19.173.10:54830] [client 34.19.173.10] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "onderdelen.fambus.nl"] [uri "/"] [unique_id "aubWAO9jAOWejvWOKC6--QAAAA8"]
[Sun Nov 01 06:02:40.829803 2026] [security2:error] [pid 3426320:tid 3426320] [client 34.19.173.10:54830] [client 34.19.173.10] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [seve
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
184.105.247.194
|
|
[Sun Nov 01 05:08:23.419305 2026] [security2:error] [pid 3426319:tid 3426319] [client 184.105.247.19 ...
show more
[Sun Nov 01 05:08:23.419305 2026] [security2:error] [pid 3426319:tid 3426319] [client 184.105.247.194:18132] [client 184.105.247.194] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "aubJR9nekU9WHHIB9lnRdgAAAA4"]
[Sun Nov 01 05:25:08.575519 2026] [security2:error] [pid 3423487:tid 3423487] [client 184.105.247.194:12858] [client 184.105.247.194] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
165.227.195.85
|
|
[Sun Nov 01 05:36:23.997674 2026] [security2:error] [pid 3471590:tid 3471590] [client 165.227.195.85 ...
show more
[Sun Nov 01 05:36:23.997674 2026] [security2:error] [pid 3471590:tid 3471590] [client 165.227.195.85:57600] [client 165.227.195.85] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ziggo.fambus.nl"] [uri "/"] [unique_id "aubP13BpfTAGWGBdq9NrJgAAAAA"], referer: https://ziggo.fambus.nl/
[Sun Nov 01 05:36:24.128245 2026] [security2:error] [pid 3471590:tid 3471590] [client 165.227.195.85:57600] [client 165.227.195.85] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly
...
show less
|
Hacking
Web App Attack
|
|
🇫🇷
185.177.72.69
|
|
[Sun Nov 01 05:18:45.805386 2026] [security2:error] [pid 3426335:tid 3426335] [client 185.177.72.69: ...
show more
[Sun Nov 01 05:18:45.805386 2026] [security2:error] [pid 3426335:tid 3426335] [client 185.177.72.69:0] [client 185.177.72.69] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.fambus.nl"] [uri "/.git/config"] [unique_id "aubLtXxps2kYjWk-LryUNgAAACA"]
[Sun Nov 01 05:18:45.847940 2026] [security2:error] [pid 3426335:tid 3426335] [client 185.177.72.69:0] [client 185.177.72.69] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [seve
...
show less
|
Hacking
Web App Attack
|
|
🇩🇪
34.32.105.134
|
|
[Sun Nov 01 04:12:51.383350 2026] [security2:error] [pid 3418927:tid 3418927] [client 34.32.105.134: ...
show more
[Sun Nov 01 04:12:51.383350 2026] [security2:error] [pid 3418927:tid 3418927] [client 34.32.105.134:0] [client 34.32.105.134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.git/config"] [unique_id "aua8Q43w0--sCM2a1MTI8gAAAAc"]
[Sun Nov 01 04:12:52.017805 2026] [security2:error] [pid 3419634:tid 3419634] [client 34.32.105.134:0] [client 34.32.105.134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [
...
show less
|
Hacking
Web App Attack
|
|
🇫🇷
185.177.72.205
|
|
[Sun Nov 01 04:00:19.328620 2026] [security2:error] [pid 3374786:tid 3374786] [client 185.177.72.205 ...
show more
[Sun Nov 01 04:00:19.328620 2026] [security2:error] [pid 3374786:tid 3374786] [client 185.177.72.205:0] [client 185.177.72.205] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/info.php.bak"] [unique_id "aua5UzNhsLGA4Dv7IfrXWwAAAAA"]
[Sun Nov 01 04:00:23.496612 2026] [security2:error] [pid 3413079:tid 3413079] [client 185.177.72.205:0] [client 185.177.72.205] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
46.151.178.14
|
|
[Sun Nov 01 03:58:08.095380 2026] [security2:error] [pid 3341754:tid 3341754] [client 46.151.178.14: ...
show more
[Sun Nov 01 03:58:08.095380 2026] [security2:error] [pid 3341754:tid 3341754] [client 46.151.178.14:39556] [client 46.151.178.14] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "aua40MSs9XsSGvTWpZoaLgAAAFE"]
[Sun Nov 01 03:58:08.167816 2026] [security2:error] [pid 3339327:tid 3339327] [client 46.151.178.14:39562] [client 46.151.178.14] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"
...
show less
|
Hacking
Web App Attack
|
|
🇫🇷
169.40.142.79
|
|
[Sun Nov 01 02:17:34.310454 2026] [security2:error] [pid 3287882:tid 3287882] [client 169.40.142.79: ...
show more
[Sun Nov 01 02:17:34.310454 2026] [security2:error] [pid 3287882:tid 3287882] [client 169.40.142.79:0] [client 169.40.142.79] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.git/config"] [unique_id "auahPg5VmsmcpG1dDYPtywAAAA8"]
[Sun Nov 01 02:17:34.310616 2026] [security2:error] [pid 3287909:tid 3287909] [client 169.40.142.79:0] [client 169.40.142.79] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
184.185.26.51
|
|
[Sun Nov 01 00:46:17.501730 2026] [security2:error] [pid 3267236:tid 3267236] [client 184.185.26.51: ...
show more
[Sun Nov 01 00:46:17.501730 2026] [security2:error] [pid 3267236:tid 3267236] [client 184.185.26.51:47120] [client 184.185.26.51] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/hello.world"] [unique_id "auaL2dln7ifsWcQy9Dy3jQAAAA4"]
[Sun Nov 01 00:46:17.502957 2026] [security2:error] [pid 3267236:tid 3267236] [client 184.185.26.51:47120] [client 184.185.26.51] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION
...
show less
|
Hacking
Web App Attack
|
|
🇨🇱
34.176.99.177
|
|
[Sat Oct 31 23:55:22.342511 2026] [security2:error] [pid 2895426:tid 2895426] [client 34.176.99.177: ...
show more
[Sat Oct 31 23:55:22.342511 2026] [security2:error] [pid 2895426:tid 2895426] [client 34.176.99.177:50934] [client 34.176.99.177] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.fambus.nl"] [uri "/"] [unique_id "auZ_6sMX9sVscLxtJCIzVQAAAAk"]
[Sat Oct 31 23:55:22.557553 2026] [security2:error] [pid 2895426:tid 2895426] [client 34.176.99.177:50934] [client 34.176.99.177] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severi
...
show less
|
Hacking
Web App Attack
|
|
🇦🇲
176.32.193.16
|
|
[Sat Oct 31 22:59:08.967928 2026] [security2:error] [pid 2895426:tid 2895426] [client 176.32.193.16: ...
show more
[Sat Oct 31 22:59:08.967928 2026] [security2:error] [pid 2895426:tid 2895426] [client 176.32.193.16:51228] [client 176.32.193.16] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/aaa9"] [unique_id "auZyvMMX9sVscLxtJCIyPAAAAAk"]
[Sat Oct 31 22:59:09.523097 2026] [security2:error] [pid 2897144:tid 2897144] [client 176.32.193.16:51260] [client 176.32.193.16] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id
...
show less
|
Hacking
Web App Attack
|
|
🇫🇷
185.177.72.9
|
|
[Sat Oct 31 19:47:04.450286 2026] [security2:error] [pid 2895873:tid 2895873] [client 185.177.72.9:2 ...
show more
[Sat Oct 31 19:47:04.450286 2026] [security2:error] [pid 2895873:tid 2895873] [client 185.177.72.9:25524] [client 185.177.72.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wildcard.fambus.nl"] [uri "/.git/config"] [unique_id "auZFuJruG3swBnkPAMy2CQAAAAs"]
[Sat Oct 31 19:47:04.475649 2026] [security2:error] [pid 2895873:tid 2895873] [client 185.177.72.9:25524] [client 185.177.72.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
93.123.109.167
|
|
[Sat Oct 31 17:29:15.988028 2026] [security2:error] [pid 2897134:tid 2897134] [client 93.123.109.167 ...
show more
[Sat Oct 31 17:29:15.988028 2026] [security2:error] [pid 2897134:tid 2897134] [client 93.123.109.167:47264] [client 93.123.109.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/wp-json/batch/v1/..;/batch/v1"] [unique_id "auYlayrDDmOpMzcxpWWmaAAAAA8"]
[Sat Oct 31 17:29:33.944711 2026] [security2:error] [pid 2897134:tid 2897134] [client 93.123.109.167:47264] [client 93.123.109.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceede
...
show less
|
Hacking
Web App Attack
|
|
🇫🇷
185.177.72.69
|
|
[Sat Oct 31 16:57:14.244763 2026] [security2:error] [pid 2856211:tid 2856211] [client 185.177.72.69: ...
show more
[Sat Oct 31 16:57:14.244763 2026] [security2:error] [pid 2856211:tid 2856211] [client 185.177.72.69:14056] [client 185.177.72.69] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "webmail.fambus.nl"] [uri "/.git/config"] [unique_id "auYd6lcnoT8n4ldJ9WwCyQAAAAU"]
[Sat Oct 31 16:57:14.272815 2026] [security2:error] [pid 2856211:tid 2856211] [client 185.177.72.69:14056] [client 185.177.72.69] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
185.93.89.167
|
|
[Sat Oct 31 13:19:19.206457 2026] [security2:error] [pid 2772652:tid 2772652] [client 185.93.89.167: ...
show more
[Sat Oct 31 13:19:19.206457 2026] [security2:error] [pid 2772652:tid 2772652] [client 185.93.89.167:36891] [client 185.93.89.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/.env"] [unique_id "auXq10HAb6iPOirTygSe2QAAAAM"]
[Sat Oct 31 13:19:19.292426 2026] [security2:error] [pid 2772652:tid 2772652] [client 185.93.89.167:36891] [client 185.93.89.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severit
...
show less
|
Hacking
Web App Attack
|
|
🇳🇱
195.178.110.50
|
|
[Sat Oct 31 13:03:16.396072 2026] [security2:error] [pid 2692938:tid 2692938] [client 195.178.110.50 ...
show more
[Sat Oct 31 13:03:16.396072 2026] [security2:error] [pid 2692938:tid 2692938] [client 195.178.110.50:32796] [client 195.178.110.50] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/.aws/credentials"] [unique_id "auXnFLQgIluUjJSAPfzpzQAAABU"]
[Sat Oct 31 13:03:16.412612 2026] [security2:error] [pid 2700350:tid 2700350] [client 195.178.110.50:32808] [client 195.178.110.50] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Scor
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
66.132.186.201
|
|
[Sat Oct 31 10:50:20.321237 2026] [security2:error] [pid 2651991:tid 2651991] [client 66.132.186.201 ...
show more
[Sat Oct 31 10:50:20.321237 2026] [security2:error] [pid 2651991:tid 2651991] [client 66.132.186.201:30172] [client 66.132.186.201] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "auXH7NvYuluroIFScl70cgAAAAU"]
[Sat Oct 31 10:50:28.799567 2026] [security2:error] [pid 2575901:tid 2575901] [client 66.132.186.201:52750] [client 66.132.186.201] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
165.154.134.163
|
|
[Sat Oct 31 08:59:27.643130 2026] [security2:error] [pid 2575904:tid 2575904] [client 165.154.134.16 ...
show more
[Sat Oct 31 08:59:27.643130 2026] [security2:error] [pid 2575904:tid 2575904] [client 165.154.134.163:33298] [client 165.154.134.163] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "auWt72YObNxwBX-Rka6K0QAAABg"]
[Sat Oct 31 08:59:27.672433 2026] [security2:error] [pid 2575904:tid 2575904] [client 165.154.134.163:33298] [client 165.154.134.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"]
...
show less
|
Hacking
Web App Attack
|
|
🇯🇵
96.126.130.106
|
|
[Sat Oct 31 08:59:01.557305 2026] [security2:error] [pid 2575934:tid 2575934] [client 96.126.130.106 ...
show more
[Sat Oct 31 08:59:01.557305 2026] [security2:error] [pid 2575934:tid 2575934] [client 96.126.130.106:50654] [client 96.126.130.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/.env"] [unique_id "auWt1QOisZMX19T5B8w3tgAAABw"], referer: http://www.fambus.nl/.env
[Sat Oct 31 08:59:01.600331 2026] [security2:error] [pid 2592870:tid 2592870] [client 96.126.130.106:50660] [client 96.126.130.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Sc
...
show less
|
Hacking
Web App Attack
|