|
🇺🇸
74.208.68.217
|
|
[Thu Oct 08 01:55:21.142225 2026] [security2:error] [pid 434486:tid 434486] [client 74.208.68.217:62 ...
show more
[Thu Oct 08 01:55:21.142225 2026] [security2:error] [pid 434486:tid 434486] [client 74.208.68.217:62571] [client 74.208.68.217] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/.env"] [unique_id "asb4Ca7N0kIjxL8-CTqoYQAAAAQ"]
[Thu Oct 08 01:55:21.143064 2026] [security2:error] [pid 434486:tid 434486] [client 74.208.68.217:62571] [client 74.208.68.217] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "
...
show less
|
Hacking
Web App Attack
|
|
🇳🇴
87.120.104.29
|
|
[Thu Oct 08 00:51:16.582518 2026] [security2:error] [pid 381800:tid 381800] [client 87.120.104.29:58 ...
show more
[Thu Oct 08 00:51:16.582518 2026] [security2:error] [pid 381800:tid 381800] [client 87.120.104.29:58766] [client 87.120.104.29] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/wp-config.old"] [unique_id "asbpBECxnPjiM0v9gdYhLAAAABM"]
[Thu Oct 08 00:51:16.582518 2026] [security2:error] [pid 383756:tid 383756] [client 87.120.104.29:58754] [client 87.120.104.29] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id
...
show less
|
Hacking
Web App Attack
|
|
🇫🇷
109.205.176.10
|
|
[Wed Oct 07 23:36:54.551272 2026] [security2:error] [pid 352733:tid 352733] [client 109.205.176.10:3 ...
show more
[Wed Oct 07 23:36:54.551272 2026] [security2:error] [pid 352733:tid 352733] [client 109.205.176.10:38902] [client 109.205.176.10] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "asbXluYAQg7sR_0g-5d1vwAAACE"]
[Wed Oct 07 23:36:54.577363 2026] [security2:error] [pid 352733:tid 352733] [client 109.205.176.10:38902] [client 109.205.176.10] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
136.113.54.200
|
|
[Wed Oct 07 23:19:30.132979 2026] [security2:error] [pid 321003:tid 321003] [client 136.113.54.200:0 ...
show more
[Wed Oct 07 23:19:30.132979 2026] [security2:error] [pid 321003:tid 321003] [client 136.113.54.200:0] [client 136.113.54.200] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asbTgvjZUfW98i8Ty453sgAAADA"]
[Wed Oct 07 23:19:32.548935 2026] [security2:error] [pid 352699:tid 352699] [client 136.113.54.200:0] [client 136.113.54.200] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Scor
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
66.132.195.164
|
|
[Wed Oct 07 22:56:20.528722 2026] [security2:error] [pid 322263:tid 322263] [client 66.132.195.164:3 ...
show more
[Wed Oct 07 22:56:20.528722 2026] [security2:error] [pid 322263:tid 322263] [client 66.132.195.164:36438] [client 66.132.195.164] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "asbOFKJUjfPyHlntzk3QaQAAAAY"]
[Wed Oct 07 22:56:21.485102 2026] [security2:error] [pid 322312:tid 322312] [client 66.132.195.164:36466] [client 66.132.195.164] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
104.196.157.124
|
|
[Wed Oct 07 22:36:18.748817 2026] [security2:error] [pid 321003:tid 321003] [client 104.196.157.124: ...
show more
[Wed Oct 07 22:36:18.748817 2026] [security2:error] [pid 321003:tid 321003] [client 104.196.157.124:0] [client 104.196.157.124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asbJYvjZUfW98i8Ty452YQAAADA"]
[Wed Oct 07 22:36:21.676224 2026] [security2:error] [pid 322261:tid 322261] [client 104.196.157.124:0] [client 104.196.157.124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
8.235.20.188
|
|
[Wed Oct 07 22:32:04.654339 2026] [security2:error] [pid 313377:tid 313377] [client 8.235.20.188:0] ...
show more
[Wed Oct 07 22:32:04.654339 2026] [security2:error] [pid 313377:tid 313377] [client 8.235.20.188:0] [client 8.235.20.188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asbIZGGU9WtyY-9iuK953wAAACI"]
[Wed Oct 07 22:32:07.419699 2026] [security2:error] [pid 319608:tid 319608] [client 8.235.20.188:0] [client 8.235.20.188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceed
...
show less
|
Hacking
Web App Attack
|
|
🇨🇦
35.203.73.14
|
|
[Wed Oct 07 22:24:44.621020 2026] [security2:error] [pid 304309:tid 304309] [client 35.203.73.14:0] ...
show more
[Wed Oct 07 22:24:44.621020 2026] [security2:error] [pid 304309:tid 304309] [client 35.203.73.14:0] [client 35.203.73.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asbGrLiV6iorZluUWGLH5gAAAAc"]
[Wed Oct 07 22:24:46.840910 2026] [security2:error] [pid 313192:tid 313192] [client 35.203.73.14:0] [client 35.203.73.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceed
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
35.190.155.96
|
|
[Wed Oct 07 22:12:08.377454 2026] [security2:error] [pid 293720:tid 293720] [client 35.190.155.96:0] ...
show more
[Wed Oct 07 22:12:08.377454 2026] [security2:error] [pid 293720:tid 293720] [client 35.190.155.96:0] [client 35.190.155.96] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asbDuNUJswVP5nw3MSjm3gAAABA"]
[Wed Oct 07 22:12:10.914000 2026] [security2:error] [pid 304311:tid 304311] [client 35.190.155.96:0] [client 35.190.155.96] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Ex
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
104.196.115.5
|
|
[Wed Oct 07 21:57:12.528853 2026] [security2:error] [pid 287995:tid 287995] [client 104.196.115.5:0] ...
show more
[Wed Oct 07 21:57:12.528853 2026] [security2:error] [pid 287995:tid 287995] [client 104.196.115.5:0] [client 104.196.115.5] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asbAOD0MdLtlyfV5wVGZXwAAABw"]
[Wed Oct 07 21:57:14.907709 2026] [security2:error] [pid 293701:tid 293701] [client 104.196.115.5:0] [client 104.196.115.5] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Ex
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
35.231.38.97
|
|
[Wed Oct 07 21:47:56.860439 2026] [security2:error] [pid 286812:tid 286812] [client 35.231.38.97:0] ...
show more
[Wed Oct 07 21:47:56.860439 2026] [security2:error] [pid 286812:tid 286812] [client 35.231.38.97:0] [client 35.231.38.97] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asa-DL0ADPnDMlaMH6f8nwAAACw"]
[Wed Oct 07 21:47:59.978789 2026] [security2:error] [pid 286819:tid 286819] [client 35.231.38.97:0] [client 35.231.38.97] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceed
...
show less
|
Hacking
Web App Attack
|
|
🇩🇪
164.92.202.6
|
|
[Wed Oct 07 21:44:12.429454 2026] [security2:error] [pid 284875:tid 284875] [client 164.92.202.6:267 ...
show more
[Wed Oct 07 21:44:12.429454 2026] [security2:error] [pid 284875:tid 284875] [client 164.92.202.6:26775] [client 164.92.202.6] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/odinhttpcall1791409452"] [unique_id "asa9LOz0bT5kat1dBGXibwAAACU"]
[Wed Oct 07 21:44:12.429588 2026] [security2:error] [pid 284874:tid 284874] [client 164.92.202.6:32709] [client 164.92.202.6] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
35.196.127.73
|
|
[Wed Oct 07 21:43:16.595218 2026] [security2:error] [pid 281837:tid 281837] [client 35.196.127.73:0] ...
show more
[Wed Oct 07 21:43:16.595218 2026] [security2:error] [pid 281837:tid 281837] [client 35.196.127.73:0] [client 35.196.127.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asa89AUdVMVD9yjoD5YJlwAAACc"]
[Wed Oct 07 21:43:17.837694 2026] [security2:error] [pid 284841:tid 284841] [client 35.196.127.73:0] [client 35.196.127.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Ex
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
34.139.12.89
|
|
[Wed Oct 07 21:40:33.404297 2026] [security2:error] [pid 280993:tid 280993] [client 34.139.12.89:0] ...
show more
[Wed Oct 07 21:40:33.404297 2026] [security2:error] [pid 280993:tid 280993] [client 34.139.12.89:0] [client 34.139.12.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asa8UaPRLxVaFX4c-s6BcQAAAB4"]
[Wed Oct 07 21:40:35.601245 2026] [security2:error] [pid 281784:tid 281784] [client 34.139.12.89:0] [client 34.139.12.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceed
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
136.108.196.191
|
|
[Wed Oct 07 21:33:50.360002 2026] [security2:error] [pid 276338:tid 276338] [client 136.108.196.191: ...
show more
[Wed Oct 07 21:33:50.360002 2026] [security2:error] [pid 276338:tid 276338] [client 136.108.196.191:0] [client 136.108.196.191] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asa6vh4njuMFDC51oR2dJwAAADQ"]
[Wed Oct 07 21:33:51.058659 2026] [security2:error] [pid 277032:tid 277032] [client 136.108.196.191:0] [client 136.108.196.191] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
34.122.22.47
|
|
[Wed Oct 07 21:33:07.447020 2026] [security2:error] [pid 276337:tid 276337] [client 34.122.22.47:0] ...
show more
[Wed Oct 07 21:33:07.447020 2026] [security2:error] [pid 276337:tid 276337] [client 34.122.22.47:0] [client 34.122.22.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asa6k_L4ZxmAKK4gzEiuAQAAADM"]
[Wed Oct 07 21:33:08.089837 2026] [security2:error] [pid 277029:tid 277029] [client 34.122.22.47:0] [client 34.122.22.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceed
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
34.28.240.1
|
|
[Wed Oct 07 21:31:45.095647 2026] [security2:error] [pid 267099:tid 267099] [client 34.28.240.1:0] [ ...
show more
[Wed Oct 07 21:31:45.095647 2026] [security2:error] [pid 267099:tid 267099] [client 34.28.240.1:0] [client 34.28.240.1] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asa6QV2PETFlMc6wS6NhdwAAAAE"]
[Wed Oct 07 21:31:47.683092 2026] [security2:error] [pid 275943:tid 275943] [client 34.28.240.1:0] [client 34.28.240.1] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
104.196.170.184
|
|
[Wed Oct 07 21:27:16.275430 2026] [security2:error] [pid 261618:tid 261618] [client 104.196.170.184: ...
show more
[Wed Oct 07 21:27:16.275430 2026] [security2:error] [pid 261618:tid 261618] [client 104.196.170.184:0] [client 104.196.170.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asa5NBvD2aikBK9ezhXeMAAAAAw"]
[Wed Oct 07 21:27:18.353905 2026] [security2:error] [pid 272084:tid 272084] [client 104.196.170.184:0] [client 104.196.170.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly
...
show less
|
Hacking
Web App Attack
|
|
🇨🇦
34.118.165.193
|
|
[Wed Oct 07 21:12:43.262907 2026] [security2:error] [pid 260210:tid 260210] [client 34.118.165.193:0 ...
show more
[Wed Oct 07 21:12:43.262907 2026] [security2:error] [pid 260210:tid 260210] [client 34.118.165.193:0] [client 34.118.165.193] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asa1y33zprr1Hfqc6ZCKBQAAABg"]
[Wed Oct 07 21:12:45.405628 2026] [security2:error] [pid 261528:tid 261528] [client 34.118.165.193:0] [client 34.118.165.193] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Scor
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
34.74.152.198
|
|
[Wed Oct 07 21:10:07.773288 2026] [security2:error] [pid 233567:tid 233567] [client 34.74.152.198:0] ...
show more
[Wed Oct 07 21:10:07.773288 2026] [security2:error] [pid 233567:tid 233567] [client 34.74.152.198:0] [client 34.74.152.198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asa1L09mEhUg6uBjF6i80wAAACY"]
[Wed Oct 07 21:10:10.135791 2026] [security2:error] [pid 260189:tid 260189] [client 34.74.152.198:0] [client 34.74.152.198] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Ex
...
show less
|
Hacking
Web App Attack
|
|
🇨🇦
34.19.141.179
|
|
[Wed Oct 07 20:47:57.412888 2026] [security2:error] [pid 221934:tid 221934] [client 34.19.141.179:0] ...
show more
[Wed Oct 07 20:47:57.412888 2026] [security2:error] [pid 221934:tid 221934] [client 34.19.141.179:0] [client 34.19.141.179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asav_dY5nCvybGK_kv2m3AAAADI"]
[Wed Oct 07 20:48:00.090382 2026] [security2:error] [pid 245259:tid 245259] [client 34.19.141.179:0] [client 34.19.141.179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Ex
...
show less
|
Hacking
Web App Attack
|
|
🇧🇪
34.62.37.18
|
|
[Wed Oct 07 20:30:49.695901 2026] [security2:error] [pid 226804:tid 226804] [client 34.62.37.18:0] [ ...
show more
[Wed Oct 07 20:30:49.695901 2026] [security2:error] [pid 226804:tid 226804] [client 34.62.37.18:0] [client 34.62.37.18] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asar-UQdMuerLkrXAiF0bAAAAAw"]
[Wed Oct 07 20:30:50.965758 2026] [security2:error] [pid 233387:tid 233387] [client 34.62.37.18:0] [client 34.62.37.18] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (
...
show less
|
Hacking
Web App Attack
|
|
🇩🇪
151.240.151.87
|
|
[Wed Oct 07 20:23:31.961942 2026] [security2:error] [pid 226803:tid 226803] [client 151.240.151.87:5 ...
show more
[Wed Oct 07 20:23:31.961942 2026] [security2:error] [pid 226803:tid 226803] [client 151.240.151.87:57118] [client 151.240.151.87] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "asaqQwKhaBw56pxoOTsXpwAAAAs"]
[Wed Oct 07 20:23:32.687908 2026] [security2:error] [pid 226803:tid 226803] [client 151.240.151.87:57118] [client 151.240.151.87] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
136.67.242.132
|
|
[Wed Oct 07 20:22:16.170542 2026] [security2:error] [pid 221905:tid 221905] [client 136.67.242.132:0 ...
show more
[Wed Oct 07 20:22:16.170542 2026] [security2:error] [pid 221905:tid 221905] [client 136.67.242.132:0] [client 136.67.242.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asap-Egn6C8UuZY9lpXw4QAAABw"]
[Wed Oct 07 20:22:18.194283 2026] [security2:error] [pid 226769:tid 226769] [client 136.67.242.132:0] [client 136.67.242.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Scor
...
show less
|
Hacking
Web App Attack
|
|
🇧🇪
34.140.62.50
|
|
[Wed Oct 07 20:14:33.684845 2026] [security2:error] [pid 218127:tid 218127] [client 34.140.62.50:0] ...
show more
[Wed Oct 07 20:14:33.684845 2026] [security2:error] [pid 218127:tid 218127] [client 34.140.62.50:0] [client 34.140.62.50] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asaoKbjRkctmsFLQidkHmwAAACE"]
[Wed Oct 07 20:14:34.254946 2026] [security2:error] [pid 218094:tid 218094] [client 34.140.62.50:0] [client 34.140.62.50] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceed
...
show less
|
Hacking
Web App Attack
|