๐ต๐ฑ
149.50.96.84
04 Jun 2025
2025-06-04T07:05:18.654364+02:00 mimer sshd[73258]: Connection from 149.50.96.84 port 64429 on 192.1 ...
show more
2025-06-04T07:05:18.654364+02:00 mimer sshd[73258]: Connection from 149.50.96.84 port 64429 on 192.168.2.4 port 29120 rdomain ""
2025-06-04T07:05:18.654706+02:00 mimer sshd[73258]: banner exchange: Connection from 149.50.96.84 port 64429: invalid format
...
show less
SSH
๐ฎ๐ช
52.208.131.172
02 Jun 2025
[Tue Jun 03 01:04:53.174126 2025] [security2:error] [pid 2484504:tid 2484504] [client 52.208.131.172 ...
show more
[Tue Jun 03 01:04:53.174126 2025] [security2:error] [pid 2484504:tid 2484504] [client 52.208.131.172:41260] [client 52.208.131.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/sdk"] [unique_id "aD4uFahQsKX-dQwCMekiVgAAAAA"]
[Tue Jun 03 01:04:53.178388 2025] [security2:error] [pid 2570341:tid 2570341] [client 52.208.131.172:41234] [client 52.208.131.172] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [s
...
show less
Web App Attack
๐ฎ๐ช
34.244.107.9
02 Jun 2025
[Tue Jun 03 00:36:40.654971 2025] [security2:error] [pid 2481337:tid 2481337] [client 34.244.107.9:5 ...
show more
[Tue Jun 03 00:36:40.654971 2025] [security2:error] [pid 2481337:tid 2481337] [client 34.244.107.9:56617] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/sdk"] [unique_id "aD4neJSs10nMley_2G5_TQAAAAE"]
[Tue Jun 03 00:36:40.655166 2025] [security2:error] [pid 2481335:tid 2481335] [client 34.244.107.9:56616] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity
...
show less
Web App Attack
๐ธ๐ฌ
194.233.78.139
02 Jun 2025
[Mon Jun 02 17:07:24.462112 2025] [php:error] [pid 1049355:tid 1049355] [client 194.233.78.139:44662 ...
show more
[Mon Jun 02 17:07:24.462112 2025] [php:error] [pid 1049355:tid 1049355] [client 194.233.78.139:44662] script '/home/www/buusbudde.dk/public_html/adminer.php' not found or unable to stat
[Mon Jun 02 17:07:25.986886 2025] [php:error] [pid 1183650:tid 1183650] [client 194.233.78.139:44674] script '/home/www/buusbudde.dk/public_html/adminer.php' not found or unable to stat
...
show less
Web App Attack
๐ณ๐ฑ
92.63.197.216
02 Jun 2025
2025-06-02T07:35:08.033473+02:00 mimer sshd[3766518]: Connection from 92.63.197.216 port 63402 on 19 ...
show more
2025-06-02T07:35:08.033473+02:00 mimer sshd[3766518]: Connection from 92.63.197.216 port 63402 on 192.168.2.4 port 29120 rdomain ""
2025-06-02T07:35:08.033861+02:00 mimer sshd[3766518]: banner exchange: Connection from 92.63.197.216 port 63402: invalid format
...
show less
SSH
๐บ๐ธ
165.1.71.166
01 Jun 2025
[Sun Jun 01 21:19:53.355424 2025] [security2:error] [pid 1384084:tid 1384084] [client 165.1.71.166:4 ...
show more
[Sun Jun 01 21:19:53.355424 2025] [security2:error] [pid 1384084:tid 1384084] [client 165.1.71.166:40698] [client 165.1.71.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/.env"] [unique_id "aDyn2R2DK7DYSLjHLiEJ_wAAAAc"], referer: http://buusbudde.dk/.env
[Sun Jun 01 21:19:53.686713 2025] [security2:error] [pid 1384084:tid 1384084] [client 165.1.71.166:40698] [client 165.1.71.166] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Ex
...
show less
Web App Attack
๐ง๐ท
167.250.186.208
01 Jun 2025
[Sun Jun 01 09:36:48.719511 2025] [php:error] [pid 215654:tid 215654] [client 167.250.186.208:55736] ...
show more
[Sun Jun 01 09:36:48.719511 2025] [php:error] [pid 215654:tid 215654] [client 167.250.186.208:55736] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat, referer: https://buusbudde.dk
[Sun Jun 01 09:36:49.375417 2025] [php:error] [pid 215654:tid 215654] [client 167.250.186.208:55736] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat, referer: https://buusbudde.dk
...
show less
Web App Attack
๐ฎ๐ถ
185.24.61.155
01 Jun 2025
[Sun Jun 01 09:36:39.033498 2025] [php:error] [pid 3437035:tid 3437035] [client 185.24.61.155:49762] ...
show more
[Sun Jun 01 09:36:39.033498 2025] [php:error] [pid 3437035:tid 3437035] [client 185.24.61.155:49762] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat, referer: https://buusbudde.dk
[Sun Jun 01 09:36:39.724422 2025] [php:error] [pid 3437035:tid 3437035] [client 185.24.61.155:49762] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat, referer: https://buusbudde.dk
...
show less
Web App Attack
๐ฎ๐ช
34.244.107.9
31 May 2025
[Sun Jun 01 01:37:29.895675 2025] [security2:error] [pid 2680378:tid 2680378] [client 34.244.107.9:4 ...
show more
[Sun Jun 01 01:37:29.895675 2025] [security2:error] [pid 2680378:tid 2680378] [client 34.244.107.9:49726] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/nmaplowercheck1748734649"] [unique_id "aDuSubE6Gh-_2-fFyKfkBgAAAAw"]
[Sun Jun 01 01:37:29.901794 2025] [security2:error] [pid 2586661:tid 2586661] [client 34.244.107.9:49728] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
๐ฎ๐ช
18.202.54.55
31 May 2025
[Sun Jun 01 00:03:19.061675 2025] [security2:error] [pid 2545612:tid 2545612] [client 18.202.54.55:5 ...
show more
[Sun Jun 01 00:03:19.061675 2025] [security2:error] [pid 2545612:tid 2545612] [client 18.202.54.55:51870] [client 18.202.54.55] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/sdk"] [unique_id "aDt8p_Y1XrYmRVYQCpNaGQAAAAY"]
[Sun Jun 01 00:03:19.067002 2025] [security2:error] [pid 2548260:tid 2548260] [client 18.202.54.55:51850] [client 18.202.54.55] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity
...
show less
Web App Attack
๐ฉ๐ช
54.38.154.186
31 May 2025
[Sat May 31 14:39:39.248901 2025] [php:error] [pid 856828:tid 856828] [client 54.38.154.186:64295] s ...
show more
[Sat May 31 14:39:39.248901 2025] [php:error] [pid 856828:tid 856828] [client 54.38.154.186:64295] script '/home/www/juliabudde.com/public_html/blog/wp-content/themes/hello_dolly_v2.php' not found or unable to stat
[Sat May 31 14:39:39.338525 2025] [php:error] [pid 710433:tid 710433] [client 54.38.154.186:64492] script '/home/www/juliabudde.com/public_html/blog/wp-admin/includes/hello_dolly_v2.php' not found or unable to stat
...
show less
Web App Attack
๐บ๐ธ
132.226.159.101
31 May 2025
[Sat May 31 08:04:46.972488 2025] [security2:error] [pid 3353138:tid 3353138] [client 132.226.159.10 ...
show more
[Sat May 31 08:04:46.972488 2025] [security2:error] [pid 3353138:tid 3353138] [client 132.226.159.101:40298] [client 132.226.159.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mimer.buusbudde.dk"] [uri "/.env"] [unique_id "aDqb_kJCi5Idkg2-OJW1JwAAAAE"], referer: http://mimer.buusbudde.dk/.env
[Sat May 31 08:04:47.270828 2025] [security2:error] [pid 3353138:tid 3353138] [client 132.226.159.101:40298] [client 132.226.159.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "
...
show less
Web App Attack
๐จ๐ณ
123.249.98.243
31 May 2025
[Sat May 31 05:17:34.602926 2025] [security2:error] [pid 3164792:tid 3164792] [client 123.249.98.243 ...
show more
[Sat May 31 05:17:34.602926 2025] [security2:error] [pid 3164792:tid 3164792] [client 123.249.98.243:43482] [client 123.249.98.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/hello.world"] [unique_id "aDp0zv2GFfETT4c8xj-irAAAAAQ"]
[Sat May 31 05:17:35.007658 2025] [security2:error] [pid 3164792:tid 3164792] [client 123.249.98.243:43482] [client 123.249.98.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
๐ฎ๐ช
34.244.107.9
30 May 2025
[Sat May 31 01:18:16.347673 2025] [security2:error] [pid 2302969:tid 2302969] [client 34.244.107.9:6 ...
show more
[Sat May 31 01:18:16.347673 2025] [security2:error] [pid 2302969:tid 2302969] [client 34.244.107.9:63458] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/nmaplowercheck1748647096"] [unique_id "aDo8uGYyQHJ6n_vOI7wWoQAAAAc"]
[Sat May 31 01:18:16.362492 2025] [security2:error] [pid 2303002:tid 2303002] [client 34.244.107.9:63460] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
๐บ๐ธ
162.240.151.141
30 May 2025
[Fri May 30 21:53:56.528490 2025] [security2:error] [pid 1829697:tid 1829697] [client 162.240.151.14 ...
show more
[Fri May 30 21:53:56.528490 2025] [security2:error] [pid 1829697:tid 1829697] [client 162.240.151.141:39488] [client 162.240.151.141] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/cgi-bin/mainfunction.cgi/apmcfgupload"] [unique_id "aDoM1GcjKCyj-cFAwvt3JgAAAAE"]
[Fri May 30 22:02:08.827651 2025] [security2:error] [pid 1748089:tid 1748089] [client 162.240.151.141:53110] [client 162.240.151.141] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anoma
...
show less
Web App Attack
๐บ๐ธ
24.144.111.6
30 May 2025
[Fri May 30 20:37:17.085364 2025] [php:error] [pid 1515080:tid 1515080] [client 24.144.111.6:43204] ...
show more
[Fri May 30 20:37:17.085364 2025] [php:error] [pid 1515080:tid 1515080] [client 24.144.111.6:43204] script '/home/www/buusbudde.dk/public_html/php.php' not found or unable to stat
[Fri May 30 20:37:26.275605 2025] [php:error] [pid 1570443:tid 1570443] [client 24.144.111.6:25790] script '/home/www/buusbudde.dk/public_html/php2.php' not found or unable to stat
...
show less
Web App Attack
๐ท๐ด
80.94.95.168
30 May 2025
2025-05-30T19:09:58.614301+02:00 mimer sshd[1374929]: Connection from 80.94.95.168 port 65112 on 192 ...
show more
2025-05-30T19:09:58.614301+02:00 mimer sshd[1374929]: Connection from 80.94.95.168 port 65112 on 192.168.2.4 port 29120 rdomain ""
2025-05-30T19:09:58.614720+02:00 mimer sshd[1374929]: banner exchange: Connection from 80.94.95.168 port 65112: invalid format
...
show less
SSH
๐ฉ๐ช
141.95.114.199
30 May 2025
[Fri May 30 14:05:49.131283 2025] [security2:error] [pid 424826:tid 424826] [client 141.95.114.199:5 ...
show more
[Fri May 30 14:05:49.131283 2025] [security2:error] [pid 424826:tid 424826] [client 141.95.114.199:52187] [client 141.95.114.199] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "77"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.4"] [tag "anomaly-evaluation"] [hostname "gallery.buusbudde.dk"] [uri "/index.php"] [unique_id "aDmfHTuy_JAFc611PwzCNQAAAAU"]
[Fri May 30 14:05:51.348119 2025] [security2:error] [pid 473141:tid 473141] [client 141.95.114.199:51527] [client 141.95.114.199] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "77"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.4"] [tag "anomaly-evaluation"] [hostname
...
show less
Web App Attack
๐ฉ๐ช
193.174.89.19
30 May 2025
[Fri May 30 08:59:31.111127 2025] [security2:error] [pid 3743115:tid 3743115] [client 193.174.89.19: ...
show more
[Fri May 30 08:59:31.111127 2025] [security2:error] [pid 3743115:tid 3743115] [client 193.174.89.19:36422] [client 193.174.89.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/baseR4/metadata"] [unique_id "aDlXU5HNGExx2NQDXShHOAAAAAE"]
[Fri May 30 08:59:31.113462 2025] [security2:error] [pid 3743115:tid 3743115] [client 193.174.89.19:36422] [client 193.174.89.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score:
...
show less
Web App Attack
๐ฎ๐ช
3.252.198.19
29 May 2025
[Fri May 30 01:28:00.757657 2025] [security2:error] [pid 1933269:tid 1933269] [client 3.252.198.19:3 ...
show more
[Fri May 30 01:28:00.757657 2025] [security2:error] [pid 1933269:tid 1933269] [client 3.252.198.19:33408] [client 3.252.198.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/nmaplowercheck1748561280"] [unique_id "aDjtgPi2oqqPCk3L8l4RyAAAAAQ"]
[Fri May 30 01:28:00.757766 2025] [security2:error] [pid 1984630:tid 1984630] [client 3.252.198.19:33412] [client 3.252.198.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
๐ฎ๐ช
34.244.107.9
29 May 2025
[Fri May 30 01:06:44.041865 2025] [security2:error] [pid 1984630:tid 1984630] [client 34.244.107.9:6 ...
show more
[Fri May 30 01:06:44.041865 2025] [security2:error] [pid 1984630:tid 1984630] [client 34.244.107.9:62177] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/sdk"] [unique_id "aDjohCUMzLSRGeeIV0Ni9gAAAAg"]
[Fri May 30 01:06:44.042519 2025] [security2:error] [pid 1933231:tid 1933231] [client 34.244.107.9:62176] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity
...
show less
Web App Attack
๐จ๐ฆ
192.175.111.249
29 May 2025
[Thu May 29 20:00:54.408880 2025] [php:error] [pid 1101881:tid 1101881] [client 192.175.111.249:4667 ...
show more
[Thu May 29 20:00:54.408880 2025] [php:error] [pid 1101881:tid 1101881] [client 192.175.111.249:46675] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat
[Thu May 29 20:04:17.728770 2025] [php:error] [pid 1149251:tid 1149251] [client 192.175.111.249:51280] script '/home/www/buusbudde.dk/public_html/css.php' not found or unable to stat
...
show less
Web App Attack
๐จ๐ฆ
64.15.129.124
29 May 2025
[Thu May 29 20:00:53.991622 2025] [php:error] [pid 1210473:tid 1210473] [client 64.15.129.124:59676] ...
show more
[Thu May 29 20:00:53.991622 2025] [php:error] [pid 1210473:tid 1210473] [client 64.15.129.124:59676] script '/home/www/buusbudde.dk/public_html/xmlrpc.php' not found or unable to stat
[Thu May 29 20:03:45.414850 2025] [php:error] [pid 1211642:tid 1211642] [client 64.15.129.124:25351] script '/home/www/buusbudde.dk/public_html/css.php' not found or unable to stat
...
show less
Web App Attack
๐จ๐ฆ
64.15.129.111
29 May 2025
[Thu May 29 20:00:54.079484 2025] [php:error] [pid 1210481:tid 1210481] [client 64.15.129.111:40799] ...
show more
[Thu May 29 20:00:54.079484 2025] [php:error] [pid 1210481:tid 1210481] [client 64.15.129.111:40799] script '/home/www/buusbudde.dk/public_html/xmlrpc.php' not found or unable to stat
[Thu May 29 20:03:41.861757 2025] [php:error] [pid 1149251:tid 1149251] [client 64.15.129.111:53045] script '/home/www/buusbudde.dk/public_html/css.php' not found or unable to stat
...
show less
Web App Attack
๐จ๐ฆ
192.175.111.238
29 May 2025
[Thu May 29 20:01:13.505961 2025] [security2:error] [pid 1211843:tid 1211843] [client 192.175.111.23 ...
show more
[Thu May 29 20:01:13.505961 2025] [security2:error] [pid 1211843:tid 1211843] [client 192.175.111.238:60904] [client 192.175.111.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/modules/MenuManager/changelog.inc"] [unique_id "aDig6elSOpJupGdsfZWCfgAAAAo"]
[Thu May 29 20:01:55.662159 2025] [security2:error] [pid 1033890:tid 1033890] [client 192.175.111.238:56042] [client 192.175.111.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Sc
...
show less
Web App Attack