|
🇳🇱
45.148.10.32
|
|
[Thu Oct 08 19:07:33.811940 2026] [security2:error] [pid 1311432:tid 1311432] [client 45.148.10.32:3 ...
show more
[Thu Oct 08 19:07:33.811940 2026] [security2:error] [pid 1311432:tid 1311432] [client 45.148.10.32:3562] [client 45.148.10.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "onderdelen.fambus.nl"] [uri "/.gitlab-ci.yml"] [unique_id "asfp9RQpOVnXduKqrsbsrAAAABA"]
[Thu Oct 08 19:07:33.879590 2026] [security2:error] [pid 1253687:tid 1253687] [client 45.148.10.32:3596] [client 45.148.10.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
35.192.150.239
|
|
[Thu Oct 08 18:31:59.270246 2026] [security2:error] [pid 1287810:tid 1287810] [client 35.192.150.239 ...
show more
[Thu Oct 08 18:31:59.270246 2026] [security2:error] [pid 1287810:tid 1287810] [client 35.192.150.239:44216] [client 35.192.150.239] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "asfhnyrc_m8xoA82vHXWKgAAAA0"]
[Thu Oct 08 18:31:59.774415 2026] [security2:error] [pid 1287810:tid 1287810] [client 35.192.150.239:44216] [client 35.192.150.239] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severi
...
show less
|
Hacking
Web App Attack
|
|
🇯🇵
34.146.142.19
|
|
[Thu Oct 08 17:16:12.726132 2026] [security2:error] [pid 1253747:tid 1253747] [client 34.146.142.19: ...
show more
[Thu Oct 08 17:16:12.726132 2026] [security2:error] [pid 1253747:tid 1253747] [client 34.146.142.19:34238] [client 34.146.142.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "5ed126ab.cm-7-2a.dynamic.ziggo.nl"] [uri "/"] [unique_id "asfP3OB9F99t0Re191xgIAAAAAY"]
[Thu Oct 08 17:16:12.756030 2026] [security2:error] [pid 1253748:tid 1253748] [client 34.146.142.19:34266] [client 34.146.142.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total
...
show less
|
Hacking
Web App Attack
|
|
🇳🇬
165.154.11.140
|
|
[Thu Oct 08 17:14:29.911685 2026] [security2:error] [pid 1222205:tid 1222205] [client 165.154.11.140 ...
show more
[Thu Oct 08 17:14:29.911685 2026] [security2:error] [pid 1222205:tid 1222205] [client 165.154.11.140:36448] [client 165.154.11.140] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "asfPdcR4JWfZKNYfU5r3zgAAAAU"]
[Thu Oct 08 17:14:35.427401 2026] [security2:error] [pid 1222235:tid 1222235] [client 165.154.11.140:55846] [client 165.154.11.140] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
65.49.1.94
|
|
[Thu Oct 08 10:19:24.058848 2026] [security2:error] [pid 911660:tid 911660] [client 65.49.1.94:38720 ...
show more
[Thu Oct 08 10:19:24.058848 2026] [security2:error] [pid 911660:tid 911660] [client 65.49.1.94:38720] [client 65.49.1.94] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "asduLMAFqwfwkRuo_6d-7wAAAA0"]
[Thu Oct 08 10:48:54.956270 2026] [security2:error] [pid 936075:tid 936075] [client 65.49.1.94:16344] [client 65.49.1.94] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host hea
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
34.74.242.206
|
|
[Thu Oct 08 10:00:55.977091 2026] [security2:error] [pid 936075:tid 936075] [client 34.74.242.206:0] ...
show more
[Thu Oct 08 10:00:55.977091 2026] [security2:error] [pid 936075:tid 936075] [client 34.74.242.206:0] [client 34.74.242.206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pop-the-slots.com"] [uri "/robots.txt"] [unique_id "asdp12XYKp6vvNDP7IggtAAAAAA"]
[Thu Oct 08 10:00:56.148216 2026] [security2:error] [pid 936075:tid 936075] [client 34.74.242.206:0] [client 34.74.242.206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [s
...
show less
|
Hacking
Web App Attack
|
|
🇧🇪
34.76.171.31
|
|
[Thu Oct 08 06:57:49.811376 2026] [security2:error] [pid 814254:tid 814254] [client 34.76.171.31:574 ...
show more
[Thu Oct 08 06:57:49.811376 2026] [security2:error] [pid 814254:tid 814254] [client 34.76.171.31:57446] [client 34.76.171.31] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "asc-7Rwp8rLxFi9iddMoBAAAAAU"]
[Thu Oct 08 06:57:51.386759 2026] [security2:error] [pid 814256:tid 814256] [client 34.76.171.31:57456] [client 34.76.171.31] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "
...
show less
|
Hacking
Web App Attack
|
|
🇯🇵
35.213.82.202
|
|
[Thu Oct 08 06:20:12.800846 2026] [security2:error] [pid 434888:tid 434888] [client 35.213.82.202:0] ...
show more
[Thu Oct 08 06:20:12.800846 2026] [security2:error] [pid 434888:tid 434888] [client 35.213.82.202:0] [client 35.213.82.202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.git/config"] [unique_id "asc2HFYXirN8ZVGFQOBjUQAAAAA"]
[Thu Oct 08 06:20:15.136018 2026] [security2:error] [pid 484950:tid 484950] [client 35.213.82.202:0] [client 35.213.82.202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [seve
...
show less
|
Hacking
Web App Attack
|
|
🇧🇪
34.79.242.244
|
|
[Thu Oct 08 05:49:55.509209 2026] [security2:error] [pid 484951:tid 484951] [client 34.79.242.244:0] ...
show more
[Thu Oct 08 05:49:55.509209 2026] [security2:error] [pid 484951:tid 484951] [client 34.79.242.244:0] [client 34.79.242.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/ads.txt"] [unique_id "ascvAyW0LRKdfN8WlQJsNgAAAAk"]
[Thu Oct 08 05:49:55.595428 2026] [security2:error] [pid 484951:tid 484951] [client 34.79.242.244:0] [client 34.79.242.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severi
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
165.154.134.163
|
|
[Thu Oct 08 04:43:31.155129 2026] [security2:error] [pid 581027:tid 581027] [client 165.154.134.163: ...
show more
[Thu Oct 08 04:43:31.155129 2026] [security2:error] [pid 581027:tid 581027] [client 165.154.134.163:56434] [client 165.154.134.163] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "ascfc1F7jxU42wP5dyQ0egAAABA"]
[Thu Oct 08 04:43:31.156027 2026] [security2:error] [pid 581027:tid 581027] [client 165.154.134.163:56434] [client 165.154.134.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [li
...
show less
|
Hacking
Web App Attack
|
|
🇯🇵
8.211.162.45
|
|
[Thu Oct 08 04:23:52.906070 2026] [security2:error] [pid 484950:tid 484950] [client 8.211.162.45:520 ...
show more
[Thu Oct 08 04:23:52.906070 2026] [security2:error] [pid 484950:tid 484950] [client 8.211.162.45:52002] [client 8.211.162.45] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/dns-query"] [unique_id "asca2HsAk8o0dfTXejuzbwAAAAg"]
[Thu Oct 08 04:23:52.907238 2026] [security2:error] [pid 484950:tid 484950] [client 8.211.162.45:52002] [client 8.211.162.45] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
74.208.68.217
|
|
[Thu Oct 08 01:55:21.142225 2026] [security2:error] [pid 434486:tid 434486] [client 74.208.68.217:62 ...
show more
[Thu Oct 08 01:55:21.142225 2026] [security2:error] [pid 434486:tid 434486] [client 74.208.68.217:62571] [client 74.208.68.217] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/.env"] [unique_id "asb4Ca7N0kIjxL8-CTqoYQAAAAQ"]
[Thu Oct 08 01:55:21.143064 2026] [security2:error] [pid 434486:tid 434486] [client 74.208.68.217:62571] [client 74.208.68.217] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "
...
show less
|
Hacking
Web App Attack
|
|
🇳🇴
87.120.104.29
|
|
[Thu Oct 08 00:51:16.582518 2026] [security2:error] [pid 381800:tid 381800] [client 87.120.104.29:58 ...
show more
[Thu Oct 08 00:51:16.582518 2026] [security2:error] [pid 381800:tid 381800] [client 87.120.104.29:58766] [client 87.120.104.29] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/wp-config.old"] [unique_id "asbpBECxnPjiM0v9gdYhLAAAABM"]
[Thu Oct 08 00:51:16.582518 2026] [security2:error] [pid 383756:tid 383756] [client 87.120.104.29:58754] [client 87.120.104.29] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id
...
show less
|
Hacking
Web App Attack
|
|
🇫🇷
109.205.176.10
|
|
[Wed Oct 07 23:36:54.551272 2026] [security2:error] [pid 352733:tid 352733] [client 109.205.176.10:3 ...
show more
[Wed Oct 07 23:36:54.551272 2026] [security2:error] [pid 352733:tid 352733] [client 109.205.176.10:38902] [client 109.205.176.10] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "asbXluYAQg7sR_0g-5d1vwAAACE"]
[Wed Oct 07 23:36:54.577363 2026] [security2:error] [pid 352733:tid 352733] [client 109.205.176.10:38902] [client 109.205.176.10] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
136.113.54.200
|
|
[Wed Oct 07 23:19:30.132979 2026] [security2:error] [pid 321003:tid 321003] [client 136.113.54.200:0 ...
show more
[Wed Oct 07 23:19:30.132979 2026] [security2:error] [pid 321003:tid 321003] [client 136.113.54.200:0] [client 136.113.54.200] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asbTgvjZUfW98i8Ty453sgAAADA"]
[Wed Oct 07 23:19:32.548935 2026] [security2:error] [pid 352699:tid 352699] [client 136.113.54.200:0] [client 136.113.54.200] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Scor
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
66.132.195.164
|
|
[Wed Oct 07 22:56:20.528722 2026] [security2:error] [pid 322263:tid 322263] [client 66.132.195.164:3 ...
show more
[Wed Oct 07 22:56:20.528722 2026] [security2:error] [pid 322263:tid 322263] [client 66.132.195.164:36438] [client 66.132.195.164] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "asbOFKJUjfPyHlntzk3QaQAAAAY"]
[Wed Oct 07 22:56:21.485102 2026] [security2:error] [pid 322312:tid 322312] [client 66.132.195.164:36466] [client 66.132.195.164] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
104.196.157.124
|
|
[Wed Oct 07 22:36:18.748817 2026] [security2:error] [pid 321003:tid 321003] [client 104.196.157.124: ...
show more
[Wed Oct 07 22:36:18.748817 2026] [security2:error] [pid 321003:tid 321003] [client 104.196.157.124:0] [client 104.196.157.124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asbJYvjZUfW98i8Ty452YQAAADA"]
[Wed Oct 07 22:36:21.676224 2026] [security2:error] [pid 322261:tid 322261] [client 104.196.157.124:0] [client 104.196.157.124] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
8.235.20.188
|
|
[Wed Oct 07 22:32:04.654339 2026] [security2:error] [pid 313377:tid 313377] [client 8.235.20.188:0] ...
show more
[Wed Oct 07 22:32:04.654339 2026] [security2:error] [pid 313377:tid 313377] [client 8.235.20.188:0] [client 8.235.20.188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asbIZGGU9WtyY-9iuK953wAAACI"]
[Wed Oct 07 22:32:07.419699 2026] [security2:error] [pid 319608:tid 319608] [client 8.235.20.188:0] [client 8.235.20.188] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceed
...
show less
|
Hacking
Web App Attack
|
|
🇨🇦
35.203.73.14
|
|
[Wed Oct 07 22:24:44.621020 2026] [security2:error] [pid 304309:tid 304309] [client 35.203.73.14:0] ...
show more
[Wed Oct 07 22:24:44.621020 2026] [security2:error] [pid 304309:tid 304309] [client 35.203.73.14:0] [client 35.203.73.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asbGrLiV6iorZluUWGLH5gAAAAc"]
[Wed Oct 07 22:24:46.840910 2026] [security2:error] [pid 313192:tid 313192] [client 35.203.73.14:0] [client 35.203.73.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceed
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
35.190.155.96
|
|
[Wed Oct 07 22:12:08.377454 2026] [security2:error] [pid 293720:tid 293720] [client 35.190.155.96:0] ...
show more
[Wed Oct 07 22:12:08.377454 2026] [security2:error] [pid 293720:tid 293720] [client 35.190.155.96:0] [client 35.190.155.96] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asbDuNUJswVP5nw3MSjm3gAAABA"]
[Wed Oct 07 22:12:10.914000 2026] [security2:error] [pid 304311:tid 304311] [client 35.190.155.96:0] [client 35.190.155.96] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Ex
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
104.196.115.5
|
|
[Wed Oct 07 21:57:12.528853 2026] [security2:error] [pid 287995:tid 287995] [client 104.196.115.5:0] ...
show more
[Wed Oct 07 21:57:12.528853 2026] [security2:error] [pid 287995:tid 287995] [client 104.196.115.5:0] [client 104.196.115.5] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asbAOD0MdLtlyfV5wVGZXwAAABw"]
[Wed Oct 07 21:57:14.907709 2026] [security2:error] [pid 293701:tid 293701] [client 104.196.115.5:0] [client 104.196.115.5] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Ex
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
35.231.38.97
|
|
[Wed Oct 07 21:47:56.860439 2026] [security2:error] [pid 286812:tid 286812] [client 35.231.38.97:0] ...
show more
[Wed Oct 07 21:47:56.860439 2026] [security2:error] [pid 286812:tid 286812] [client 35.231.38.97:0] [client 35.231.38.97] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asa-DL0ADPnDMlaMH6f8nwAAACw"]
[Wed Oct 07 21:47:59.978789 2026] [security2:error] [pid 286819:tid 286819] [client 35.231.38.97:0] [client 35.231.38.97] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceed
...
show less
|
Hacking
Web App Attack
|
|
🇩🇪
164.92.202.6
|
|
[Wed Oct 07 21:44:12.429454 2026] [security2:error] [pid 284875:tid 284875] [client 164.92.202.6:267 ...
show more
[Wed Oct 07 21:44:12.429454 2026] [security2:error] [pid 284875:tid 284875] [client 164.92.202.6:26775] [client 164.92.202.6] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/odinhttpcall1791409452"] [unique_id "asa9LOz0bT5kat1dBGXibwAAACU"]
[Wed Oct 07 21:44:12.429588 2026] [security2:error] [pid 284874:tid 284874] [client 164.92.202.6:32709] [client 164.92.202.6] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
35.196.127.73
|
|
[Wed Oct 07 21:43:16.595218 2026] [security2:error] [pid 281837:tid 281837] [client 35.196.127.73:0] ...
show more
[Wed Oct 07 21:43:16.595218 2026] [security2:error] [pid 281837:tid 281837] [client 35.196.127.73:0] [client 35.196.127.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asa89AUdVMVD9yjoD5YJlwAAACc"]
[Wed Oct 07 21:43:17.837694 2026] [security2:error] [pid 284841:tid 284841] [client 35.196.127.73:0] [client 35.196.127.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Ex
...
show less
|
Hacking
Web App Attack
|
|
🇺🇸
34.139.12.89
|
|
[Wed Oct 07 21:40:33.404297 2026] [security2:error] [pid 280993:tid 280993] [client 34.139.12.89:0] ...
show more
[Wed Oct 07 21:40:33.404297 2026] [security2:error] [pid 280993:tid 280993] [client 34.139.12.89:0] [client 34.139.12.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "asa8UaPRLxVaFX4c-s6BcQAAAB4"]
[Wed Oct 07 21:40:35.601245 2026] [security2:error] [pid 281784:tid 281784] [client 34.139.12.89:0] [client 34.139.12.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceed
...
show less
|
Hacking
Web App Attack
|