๐บ๐ธ
192.0.86.84
27 May 2025
[Tue May 27 21:17:08.982171 2025] [security2:error] [pid 743211:tid 743211] [client 192.0.86.84:1781 ...
show more
[Tue May 27 21:17:08.982171 2025] [security2:error] [pid 743211:tid 743211] [client 192.0.86.84:17812] [client 192.0.86.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "aDYPtAe5ikBwa3MXGVcp_QAAAAM"], referer: https://juliabudde.com/?for=jetpack&jetpack=comms&token=nAa%5EwDdKC%2AGOhGEqj%5EwePlmfyZG%28gGRY%3A1%3A1×tamp=1748373428&nonce=OilfXcdL7d&body-hash=0Bh684u3QSZEwTr%2F3dCpIDqRGkI%3D&signature=%2Fqe%2FP0ZFx67PbT0ULstrD8XcyI0%3D
[Tue May 27 21:17:09.416821 2025] [security2:error] [pid 755067:tid 755067] [client 192.0.86.84:18050] [client 192.0.86.84] ModSecurity: Access denied with co
...
show less
Web App Attack
๐ฌ๐ง
78.153.140.218
27 May 2025
[Tue May 27 18:47:41.969166 2025] [security2:error] [pid 65892:tid 65892] [client 78.153.140.218:393 ...
show more
[Tue May 27 18:47:41.969166 2025] [security2:error] [pid 65892:tid 65892] [client 78.153.140.218:39358] [client 78.153.140.218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/.env"] [unique_id "aDXsraTsVIJyVR_t9uuuaQAAAAw"]
[Tue May 27 18:47:43.223692 2025] [security2:error] [pid 257834:tid 257834] [client 78.153.140.218:47968] [client 78.153.140.218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [seve
...
show less
Web App Attack
๐ฌ๐ง
78.153.140.222
27 May 2025
[Tue May 27 06:58:11.479491 2025] [security2:error] [pid 2319360:tid 2319360] [client 78.153.140.222 ...
show more
[Tue May 27 06:58:11.479491 2025] [security2:error] [pid 2319360:tid 2319360] [client 78.153.140.222:46646] [client 78.153.140.222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/.env"] [unique_id "aDVGYx-Rpzx1U2ZIYbPTmQAAAAk"]
[Tue May 27 06:58:13.031297 2025] [security2:error] [pid 2319356:tid 2319356] [client 78.153.140.222:60212] [client 78.153.140.222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [
...
show less
Web App Attack
๐ฉ๐ช
54.38.154.186
27 May 2025
[Tue May 27 05:17:00.744482 2025] [php:error] [pid 1936442:tid 1936442] [client 54.38.154.186:56225] ...
show more
[Tue May 27 05:17:00.744482 2025] [php:error] [pid 1936442:tid 1936442] [client 54.38.154.186:56225] script '/home/www/juliabudde.com/public_html/blog/wp-content/themes/classwithtostring.php' not found or unable to stat
[Tue May 27 05:17:01.387162 2025] [php:error] [pid 1887785:tid 1887785] [client 54.38.154.186:60086] script '/home/www/juliabudde.com/public_html/blog/wp-content/themes/classwithtostring.php' not found or unable to stat
...
show less
Web App Attack
๐ฏ๐ต
164.52.0.92
27 May 2025
[Tue May 27 04:44:14.562616 2025] [security2:error] [pid 1643928:tid 1643928] [client 164.52.0.92:41 ...
show more
[Tue May 27 04:44:14.562616 2025] [security2:error] [pid 1643928:tid 1643928] [client 164.52.0.92:41147] [client 164.52.0.92] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/"] [unique_id "aDUm_kX2ClAJzomAGhN34gAAAAw"]
[Tue May 27 04:44:17.824881 2025] [security2:error] [pid 1643928:tid 1643928] [client 164.52.0.92:41147] [client 164.52.0.92] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CR
...
show less
Web App Attack
๐ฎ๐ช
34.244.107.9
26 May 2025
[Tue May 27 00:35:33.198449 2025] [security2:error] [pid 1014399:tid 1014399] [client 34.244.107.9:5 ...
show more
[Tue May 27 00:35:33.198449 2025] [security2:error] [pid 1014399:tid 1014399] [client 34.244.107.9:59432] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/nmaplowercheck1748298933"] [unique_id "aDTstVY_ers4FZbqxav1fAAAAAI"]
[Tue May 27 00:35:33.202808 2025] [security2:error] [pid 1014526:tid 1014526] [client 34.244.107.9:59431] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
๐ฉ๐ช
209.38.208.202
26 May 2025
[Mon May 26 23:52:38.232120 2025] [security2:error] [pid 977927:tid 977927] [client 209.38.208.202:5 ...
show more
[Mon May 26 23:52:38.232120 2025] [security2:error] [pid 977927:tid 977927] [client 209.38.208.202:55506] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/.DS_Store"] [unique_id "aDTipjvgd8xykw8jDyDN1AAAAB4"]
[Mon May 26 23:52:38.297425 2025] [security2:error] [pid 977929:tid 977929] [client 209.38.208.202:55512] [client 209.38.208.202] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"
...
show less
Web App Attack
๐บ๐ธ
107.172.252.183
26 May 2025
[Mon May 26 22:52:34.362975 2025] [security2:error] [pid 755114:tid 755114] [client 107.172.252.183: ...
show more
[Mon May 26 22:52:34.362975 2025] [security2:error] [pid 755114:tid 755114] [client 107.172.252.183:57646] [client 107.172.252.183] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/hello.world"] [unique_id "aDTUks08gqFaM7VBVwLPzwAAAAk"]
[Mon May 26 22:52:34.821656 2025] [security2:error] [pid 755114:tid 755114] [client 107.172.252.183:57646] [client 107.172.252.183] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
๐ฎ๐ช
54.171.130.36
25 May 2025
[Mon May 26 00:51:18.149044 2025] [security2:error] [pid 698945:tid 698945] [client 54.171.130.36:55 ...
show more
[Mon May 26 00:51:18.149044 2025] [security2:error] [pid 698945:tid 698945] [client 54.171.130.36:55688] [client 54.171.130.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/nmaplowercheck1748213478"] [unique_id "aDOe5g_aquVrQnYFEpJKrAAAAAs"]
[Mon May 26 00:51:18.155742 2025] [security2:error] [pid 731460:tid 731460] [client 54.171.130.36:55684] [client 54.171.130.36] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
๐ฎ๐ช
34.244.107.9
25 May 2025
[Mon May 26 00:32:32.135227 2025] [security2:error] [pid 698772:tid 698772] [client 34.244.107.9:575 ...
show more
[Mon May 26 00:32:32.135227 2025] [security2:error] [pid 698772:tid 698772] [client 34.244.107.9:57567] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/sdk"] [unique_id "aDOagEiP4YVYRtwPLSN1bgAAAAM"]
[Mon May 26 00:32:32.136331 2025] [security2:error] [pid 731460:tid 731460] [client 34.244.107.9:57568] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRI
...
show less
Web App Attack
๐บ๐ธ
192.0.86.183
25 May 2025
[Sun May 25 21:17:08.444412 2025] [security2:error] [pid 4041535:tid 4041535] [client 192.0.86.183:1 ...
show more
[Sun May 25 21:17:08.444412 2025] [security2:error] [pid 4041535:tid 4041535] [client 192.0.86.183:13408] [client 192.0.86.183] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "aDNstJNw2mkDZzsMovfaKgAAAAc"], referer: https://juliabudde.com/?for=jetpack&jetpack=comms&token=nAa%5EwDdKC%2AGOhGEqj%5EwePlmfyZG%28gGRY%3A1%3A1×tamp=1748200628&nonce=jJtPlaHMpI&body-hash=0Bh684u3QSZEwTr%2F3dCpIDqRGkI%3D&signature=vj%2Fbjl8eaIWJMPFeTWXdp9eHimk%3D
[Sun May 25 21:17:08.891580 2025] [security2:error] [pid 217520:tid 217520] [client 192.0.86.183:13686] [client 192.0.86.183] ModSecurity: Access denied wit
...
show less
Web App Attack
๐ฎ๐ถ
45.157.54.22
25 May 2025
[Sun May 25 06:04:10.425560 2025] [php:error] [pid 1245883:tid 1245883] [client 45.157.54.22:52037] ...
show more
[Sun May 25 06:04:10.425560 2025] [php:error] [pid 1245883:tid 1245883] [client 45.157.54.22:52037] script '/home/www/buusbudde.dk/public_html/xmlrpc.php' not found or unable to stat
[Sun May 25 06:04:10.476374 2025] [php:error] [pid 1335120:tid 1335120] [client 45.157.54.22:52955] script '/home/www/buusbudde.dk/public_html/xmlrpc.php' not found or unable to stat
...
show less
Web App Attack
๐ฎ๐ช
34.244.107.9
24 May 2025
[Sun May 25 00:12:10.543261 2025] [security2:error] [pid 259495:tid 259495] [client 34.244.107.9:566 ...
show more
[Sun May 25 00:12:10.543261 2025] [security2:error] [pid 259495:tid 259495] [client 34.244.107.9:56605] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/sdk"] [unique_id "aDJEOuCfkaOsBfllmt5yVgAAAAc"]
[Sun May 25 00:12:10.543261 2025] [security2:error] [pid 238253:tid 238253] [client 34.244.107.9:56606] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRI
...
show less
Web App Attack
๐น๐ผ
114.43.135.35
24 May 2025
[Sat May 24 21:33:42.992125 2025] [security2:error] [pid 3785370:tid 3785370] [client 114.43.135.35: ...
show more
[Sat May 24 21:33:42.992125 2025] [security2:error] [pid 3785370:tid 3785370] [client 114.43.135.35:59806] [client 114.43.135.35] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/hello.world"] [unique_id "aDIfFr9hffmGUQ2AcsXBnQAAAAc"]
[Sat May 24 21:33:43.412081 2025] [security2:error] [pid 3785370:tid 3785370] [client 114.43.135.35:59806] [client 114.43.135.35] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score
...
show less
Web App Attack
๐ท๐บ
188.225.38.25
24 May 2025
2025-05-24T05:37:50.069792+02:00 mimer sshd[924854]: Connection from 188.225.38.25 port 59875 on 192 ...
show more
2025-05-24T05:37:50.069792+02:00 mimer sshd[924854]: Connection from 188.225.38.25 port 59875 on 192.168.2.4 port 29120 rdomain ""
2025-05-24T05:37:50.069963+02:00 mimer sshd[924854]: banner exchange: Connection from 188.225.38.25 port 59875: invalid format
...
show less
SSH
๐ฎ๐ถ
45.157.54.22
24 May 2025
[Sat May 24 05:10:23.326216 2025] [php:error] [pid 812486:tid 812486] [client 45.157.54.22:49289] sc ...
show more
[Sat May 24 05:10:23.326216 2025] [php:error] [pid 812486:tid 812486] [client 45.157.54.22:49289] script '/home/www/buusbudde.dk/public_html/xmlrpc.php' not found or unable to stat
[Sat May 24 05:10:23.354927 2025] [php:error] [pid 812419:tid 812419] [client 45.157.54.22:56491] script '/home/www/buusbudde.dk/public_html/xmlrpc.php' not found or unable to stat
...
show less
Web App Attack
๐บ๐ธ
192.0.102.194
24 May 2025
[Sat May 24 04:17:47.065803 2025] [security2:error] [pid 482413:tid 482413] [client 192.0.102.194:47 ...
show more
[Sat May 24 04:17:47.065803 2025] [security2:error] [pid 482413:tid 482413] [client 192.0.102.194:4700] [client 192.0.102.194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "aDEsS2OqZMa4o_6xkQvmWgAAAAk"], referer: https://juliabudde.com/?for=jetpack&jetpack=comms&token=%29%219V%5E%40NQWd4h%2A%21meXcwMkm%285b%26Ycg3KH%3A1%3A0×tamp=1748053066&nonce=rAeGzQBAJx&body-hash=sENT%2BQQ3s%2BePuL6ZVVEC9XGG7ZA%3D&signature=j2n5HCp41tp0MgoyG5GMVbop48o%3D
[Sat May 24 04:17:47.392016 2025] [security2:error] [pid 294573:tid 294573] [client 192.0.102.194:4712] [client 192.0.102.194] ModSecurity: Access d
...
show less
Web App Attack
๐ณ๐ฑ
194.50.16.252
23 May 2025
[Sat May 24 01:17:45.631688 2025] [security2:error] [pid 4117621:tid 4117621] [client 194.50.16.252: ...
show more
[Sat May 24 01:17:45.631688 2025] [security2:error] [pid 4117621:tid 4117621] [client 194.50.16.252:52968] [client 194.50.16.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/.git/config"] [unique_id "aDECGS2wMX7nrwLVIEdqcAAAAAQ"]
[Sat May 24 01:17:46.823361 2025] [security2:error] [pid 16286:tid 16286] [client 194.50.16.252:52978] [client 194.50.16.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [s
...
show less
Web App Attack
๐ฎ๐ถ
45.157.54.22
22 May 2025
[Fri May 23 01:12:45.151718 2025] [security2:error] [pid 3813086:tid 3813086] [client 45.157.54.22:5 ...
show more
[Fri May 23 01:12:45.151718 2025] [security2:error] [pid 3813086:tid 3813086] [client 45.157.54.22:58853] [client 45.157.54.22] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/wp-content/themes/twentyseven/index.php"] [unique_id "aC-vbR8Qf2cLtd-QcTlEPAAAAAo"]
[Fri May 23 01:12:45.702979 2025] [security2:error] [pid 3907815:tid 3907815] [client 45.157.54.22:60760] [client 45.157.54.22] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score E
...
show less
Web App Attack
๐ฎ๐ช
34.244.107.9
22 May 2025
[Fri May 23 01:03:15.586334 2025] [security2:error] [pid 3985505:tid 3985505] [client 34.244.107.9:5 ...
show more
[Fri May 23 01:03:15.586334 2025] [security2:error] [pid 3985505:tid 3985505] [client 34.244.107.9:53968] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/nmaplowercheck1747954995"] [unique_id "aC-tM4XuGrX1OJ82Br5i4QAAAAA"]
[Fri May 23 01:03:15.594194 2025] [security2:error] [pid 3813439:tid 3813439] [client 34.244.107.9:53970] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
๐ฉ๐ช
62.153.206.148
22 May 2025
[Thu May 22 20:02:57.640671 2025] [security2:error] [pid 3091326:tid 3091326] [client 62.153.206.148 ...
show more
[Thu May 22 20:02:57.640671 2025] [security2:error] [pid 3091326:tid 3091326] [client 62.153.206.148:60331] [client 62.153.206.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sky.buusbudde.dk"] [uri "/remote.php/dav/files/mbudde/InstantUpload/Camera/2025/05/20250519_080942.jpg"] [unique_id "aC9mz1A93ejvcuYpfWYZogAAAAM"]
[Thu May 22 20:03:02.310683 2025] [security2:error] [pid 3091326:tid 3091326] [client 62.153.206.148:60331] [client 62.153.206.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "
...
show less
Web App Attack
๐จ๐ฆ
64.15.129.114
22 May 2025
[Thu May 22 18:19:27.836053 2025] [security2:error] [pid 2812047:tid 2812047] [client 64.15.129.114: ...
show more
[Thu May 22 18:19:27.836053 2025] [security2:error] [pid 2812047:tid 2812047] [client 64.15.129.114:35637] [client 64.15.129.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/"] [unique_id "aC9Oj1zV1AGvHUtmQcPmzAAAAAY"]
[Thu May 22 18:20:21.791554 2025] [security2:error] [pid 2598880:tid 2598880] [client 64.15.129.114:51036] [client 64.15.129.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity
...
show less
Web App Attack
๐จ๐ฆ
64.15.129.121
22 May 2025
[Thu May 22 18:19:27.488486 2025] [security2:error] [pid 2797279:tid 2797279] [client 64.15.129.121: ...
show more
[Thu May 22 18:19:27.488486 2025] [security2:error] [pid 2797279:tid 2797279] [client 64.15.129.121:62371] [client 64.15.129.121] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/"] [unique_id "aC9OjycE8wzB2wgRMPMJbQAAAAI"]
[Thu May 22 18:19:28.181851 2025] [security2:error] [pid 2812049:tid 2812049] [client 64.15.129.121:50289] [client 64.15.129.121] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity
...
show less
Web App Attack
๐ฉ๐ช
85.22.137.46
22 May 2025
[Thu May 22 18:00:32.828046 2025] [security2:error] [pid 2598880:tid 2598880] [client 85.22.137.46:6 ...
show more
[Thu May 22 18:00:32.828046 2025] [security2:error] [pid 2598880:tid 2598880] [client 85.22.137.46:63403] [client 85.22.137.46] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sky.buusbudde.dk"] [uri "/remote.php/dav/files/mbudde/InstantUpload/Camera/2025/05/20250519_080942.jpg"] [unique_id "aC9KHrAcM8pObLidxz-QZQAAAAg"]
[Thu May 22 18:00:35.583730 2025] [security2:error] [pid 2598880:tid 2598880] [client 85.22.137.46:63403] [client 85.22.137.46] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id
...
show less
Web App Attack
๐ณ๐ฑ
178.162.173.154
22 May 2025
[Thu May 22 16:55:13.254252 2025] [security2:error] [pid 2561910:tid 2561910] [client 178.162.173.15 ...
show more
[Thu May 22 16:55:13.254252 2025] [security2:error] [pid 2561910:tid 2561910] [client 178.162.173.154:56741] [client 178.162.173.154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sky.buusbudde.dk"] [uri "/remote.php/dav/files/mbudde/InstantUpload/Camera/2025/05/20250519_080942.jpg"] [unique_id "aC86zQyRU03LPAx032x2EgAAAAs"]
[Thu May 22 16:55:16.351011 2025] [security2:error] [pid 2561910:tid 2561910] [client 178.162.173.154:56741] [client 178.162.173.154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [li
...
show less
Web App Attack