๐ฉ๐ช
193.174.89.19
15 May 2025
[Thu May 15 10:46:15.246785 2025] [security2:error] [pid 3637279:tid 3637279] [client 193.174.89.19: ...
show more
[Thu May 15 10:46:15.246785 2025] [security2:error] [pid 3637279:tid 3637279] [client 193.174.89.19:34376] [client 193.174.89.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/fhir-server/api/v4/metadata"] [unique_id "aCWp15ySPpcWx4iS_nLeaAAAAAI"]
[Thu May 15 10:46:15.281309 2025] [security2:error] [pid 3637279:tid 3637279] [client 193.174.89.19:34376] [client 193.174.89.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (
...
show less
Web App Attack
๐บ๐ธ
192.0.86.182
15 May 2025
[Thu May 15 09:17:08.075008 2025] [security2:error] [pid 3482193:tid 3482193] [client 192.0.86.182:2 ...
show more
[Thu May 15 09:17:08.075008 2025] [security2:error] [pid 3482193:tid 3482193] [client 192.0.86.182:29706] [client 192.0.86.182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "aCWU9AYbQAJieoUv69zO2gAAAAc"], referer: https://juliabudde.com/?for=jetpack&jetpack=comms&token=nAa%5EwDdKC%2AGOhGEqj%5EwePlmfyZG%28gGRY%3A1%3A1×tamp=1747293427&nonce=cMfWsJGyC4&body-hash=0Bh684u3QSZEwTr%2F3dCpIDqRGkI%3D&signature=R9fCun%2FL4EZSrwpueBxNitCsZPU%3D
[Thu May 15 09:17:08.508359 2025] [security2:error] [pid 3482192:tid 3482192] [client 192.0.86.182:29712] [client 192.0.86.182] ModSecurity: Access denied w
...
show less
Web App Attack
๐ฉ๐ช
51.195.36.135
15 May 2025
[Thu May 15 04:49:12.495278 2025] [php:error] [pid 2441876:tid 2441876] [client 51.195.36.135:53347] ...
show more
[Thu May 15 04:49:12.495278 2025] [php:error] [pid 2441876:tid 2441876] [client 51.195.36.135:53347] script '/home/www/juliabudde.com/public_html/blog/wp-content/grtgfre.php' not found or unable to stat
[Thu May 15 04:49:12.775518 2025] [php:error] [pid 2478679:tid 2478679] [client 51.195.36.135:53366] script '/home/www/juliabudde.com/public_html/blog/wp-content/grtgfre.php' not found or unable to stat
...
show less
Web App Attack
๐ณ๐ฑ
196.251.116.114
15 May 2025
[Thu May 15 04:44:00.318386 2025] [php:error] [pid 2473055:tid 2473055] [client 196.251.116.114:5721 ...
show more
[Thu May 15 04:44:00.318386 2025] [php:error] [pid 2473055:tid 2473055] [client 196.251.116.114:57210] script '/home/www/juliabudde.com/public_html/blog/wp-content/themes/hello_dolly_v2.php' not found or unable to stat
[Thu May 15 04:44:13.913820 2025] [php:error] [pid 2354712:tid 2354712] [client 196.251.116.114:50859] script '/home/www/juliabudde.com/public_html/blog/wp-content/themes/hello_dolly_v2.php' not found or unable to stat
...
show less
Web App Attack
๐ฎ๐ช
34.244.107.9
14 May 2025
[Thu May 15 01:32:05.314962 2025] [security2:error] [pid 1719169:tid 1719169] [client 34.244.107.9:5 ...
show more
[Thu May 15 01:32:05.314962 2025] [security2:error] [pid 1719169:tid 1719169] [client 34.244.107.9:55828] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/sdk"] [unique_id "aCUn9fI-Ve8kRqlwnbev7AAAAAg"]
[Thu May 15 01:32:05.318349 2025] [security2:error] [pid 1719039:tid 1719039] [client 34.244.107.9:55826] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity
...
show less
Web App Attack
๐ณ๐ฑ
196.251.86.137
14 May 2025
[Wed May 14 18:51:29.435196 2025] [security2:error] [pid 749861:tid 749861] [client 196.251.86.137:5 ...
show more
[Wed May 14 18:51:29.435196 2025] [security2:error] [pid 749861:tid 749861] [client 196.251.86.137:53709] [client 196.251.86.137] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/.env"] [unique_id "aCTKEZ2TMAd3AqNNCo36JgAAAAA"]
[Wed May 14 18:51:29.728878 2025] [security2:error] [pid 663826:tid 663826] [client 196.251.86.137:53723] [client 196.251.86.137] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [se
...
show less
Web App Attack
๐ณ๐ฑ
93.123.109.7
14 May 2025
[Wed May 14 15:38:39.839178 2025] [security2:error] [pid 167602:tid 167602] [client 93.123.109.7:542 ...
show more
[Wed May 14 15:38:39.839178 2025] [security2:error] [pid 167602:tid 167602] [client 93.123.109.7:54284] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/.git/config"] [unique_id "aCSc39BIgTPhDtcJj0PcwwAAAAM"]
[Wed May 14 15:40:31.714102 2025] [security2:error] [pid 248183:tid 248183] [client 93.123.109.7:43206] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [sev
...
show less
Web App Attack
๐บ๐ธ
157.245.178.7
14 May 2025
[Wed May 14 08:18:52.763748 2025] [security2:error] [pid 3160698:tid 3160698] [client 157.245.178.7: ...
show more
[Wed May 14 08:18:52.763748 2025] [security2:error] [pid 3160698:tid 3160698] [client 157.245.178.7:43830] [client 157.245.178.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/ab2g"] [unique_id "aCQ1zJVqubcx2V4TnwOxEAAAABI"], referer: https://87.104.65.148/ab2g
[Wed May 14 08:18:54.210581 2025] [security2:error] [pid 3119791:tid 3119791] [client 157.245.178.7:43838] [client 157.245.178.7] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomal
...
show less
Web App Attack
๐ฎ๐ช
34.244.107.9
13 May 2025
[Wed May 14 01:24:58.566012 2025] [security2:error] [pid 1608224:tid 1608224] [client 34.244.107.9:6 ...
show more
[Wed May 14 01:24:58.566012 2025] [security2:error] [pid 1608224:tid 1608224] [client 34.244.107.9:64962] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/nmaplowercheck1747178698"] [unique_id "aCPUykK1HKQaJCFLPZR_UwAAAAg"]
[Wed May 14 01:24:58.568900 2025] [security2:error] [pid 1786563:tid 1786563] [client 34.244.107.9:64963] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
๐ฎ๐ช
108.129.204.93
13 May 2025
[Wed May 14 00:46:42.746804 2025] [security2:error] [pid 1608227:tid 1608227] [client 108.129.204.93 ...
show more
[Wed May 14 00:46:42.746804 2025] [security2:error] [pid 1608227:tid 1608227] [client 108.129.204.93:43808] [client 108.129.204.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/nmaplowercheck1747176402"] [unique_id "aCPL0ngGYZBju3zBHfymFQAAAAk"]
[Wed May 14 00:46:42.760383 2025] [security2:error] [pid 1568185:tid 1568185] [client 108.129.204.93:43820] [client 108.129.204.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded
...
show less
Web App Attack
๐บ๐ธ
192.0.86.86
13 May 2025
[Tue May 13 21:17:09.053648 2025] [security2:error] [pid 884457:tid 884457] [client 192.0.86.86:4573 ...
show more
[Tue May 13 21:17:09.053648 2025] [security2:error] [pid 884457:tid 884457] [client 192.0.86.86:45736] [client 192.0.86.86] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "aCOatVCxx0EeKL62snFcGAAAAAM"], referer: https://juliabudde.com/?for=jetpack&jetpack=comms&token=nAa%5EwDdKC%2AGOhGEqj%5EwePlmfyZG%28gGRY%3A1%3A1×tamp=1747163828&nonce=P7Q8DLg8CU&body-hash=0Bh684u3QSZEwTr%2F3dCpIDqRGkI%3D&signature=V54YT3sGGSajQa0xIxQb%2Fvv%2BdMA%3D
[Tue May 13 21:17:09.492773 2025] [security2:error] [pid 1056945:tid 1056945] [client 192.0.86.86:45740] [client 192.0.86.86] ModSecurity: Access denied with
...
show less
Web App Attack
๐จ๐ฆ
192.175.111.237
13 May 2025
[Tue May 13 18:02:10.441641 2025] [security2:error] [pid 525403:tid 525403] [client 192.175.111.237: ...
show more
[Tue May 13 18:02:10.441641 2025] [security2:error] [pid 525403:tid 525403] [client 192.175.111.237:60476] [client 192.175.111.237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "aCNtAvBYqjUw778gF4vL_AAAABA"]
[Tue May 13 18:02:11.827015 2025] [security2:error] [pid 530304:tid 530304] [client 192.175.111.237:10638] [client 192.175.111.237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [
...
show less
Web App Attack
๐จ๐ฆ
192.175.111.240
13 May 2025
[Tue May 13 18:02:10.445439 2025] [security2:error] [pid 521852:tid 521852] [client 192.175.111.240: ...
show more
[Tue May 13 18:02:10.445439 2025] [security2:error] [pid 521852:tid 521852] [client 192.175.111.240:61728] [client 192.175.111.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "aCNtAqMl8390r-xBnwmoqQAAAA0"]
[Tue May 13 18:02:11.817366 2025] [security2:error] [pid 525401:tid 525401] [client 192.175.111.240:58550] [client 192.175.111.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [
...
show less
Web App Attack
๐จ๐ฆ
192.175.111.243
13 May 2025
[Tue May 13 18:01:34.015227 2025] [security2:error] [pid 525550:tid 525550] [client 192.175.111.243: ...
show more
[Tue May 13 18:01:34.015227 2025] [security2:error] [pid 525550:tid 525550] [client 192.175.111.243:55008] [client 192.175.111.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "aCNs3rCenfIMJB4kGoN6tAAAACA"]
[Tue May 13 18:02:11.816995 2025] [security2:error] [pid 521852:tid 521852] [client 192.175.111.243:30378] [client 192.175.111.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [s
...
show less
Web App Attack
๐จ๐ฆ
192.175.111.244
13 May 2025
[Tue May 13 18:01:34.021666 2025] [security2:error] [pid 526760:tid 526760] [client 192.175.111.244: ...
show more
[Tue May 13 18:01:34.021666 2025] [security2:error] [pid 526760:tid 526760] [client 192.175.111.244:35343] [client 192.175.111.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "aCNs3tlsOQMngSn2VD7FbQAAACM"]
[Tue May 13 18:02:10.457143 2025] [security2:error] [pid 524455:tid 524455] [client 192.175.111.244:42914] [client 192.175.111.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [
...
show less
Web App Attack
๐จ๐ฆ
192.175.111.245
13 May 2025
[Tue May 13 18:01:34.019274 2025] [security2:error] [pid 521696:tid 521696] [client 192.175.111.245: ...
show more
[Tue May 13 18:01:34.019274 2025] [security2:error] [pid 521696:tid 521696] [client 192.175.111.245:10182] [client 192.175.111.245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "aCNs3m97ghdbz4nmYGQgcwAAAAo"], referer: https://juliabudde.com/?checkwaf=%27%22%5C%3E%3Cscript%3Ealert%28%27XSS%27%29%3C%2Fscript%3E
[Tue May 13 18:02:10.457823 2025] [security2:error] [pid 526702:tid 526702] [client 192.175.111.245:27009] [client 192.175.111.245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING
...
show less
Web App Attack
๐จ๐ฆ
192.175.111.238
13 May 2025
[Tue May 13 18:01:14.755461 2025] [security2:error] [pid 525521:tid 525521] [client 192.175.111.238: ...
show more
[Tue May 13 18:01:14.755461 2025] [security2:error] [pid 525521:tid 525521] [client 192.175.111.238:62718] [client 192.175.111.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "aCNsyg5lOCjhk8_Gphmf6wAAABg"]
[Tue May 13 18:02:10.443437 2025] [security2:error] [pid 527722:tid 527722] [client 192.175.111.238:34569] [client 192.175.111.238] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [s
...
show less
Web App Attack
๐จ๐ฆ
64.15.129.126
13 May 2025
[Tue May 13 18:00:51.136223 2025] [security2:error] [pid 523844:tid 523844] [client 64.15.129.126:53 ...
show more
[Tue May 13 18:00:51.136223 2025] [security2:error] [pid 523844:tid 523844] [client 64.15.129.126:53217] [client 64.15.129.126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "aCNss_OovVg0hOr2uNwIRAAAABQ"]
[Tue May 13 18:01:35.427845 2025] [security2:error] [pid 526760:tid 526760] [client 64.15.129.126:20068] [client 64.15.129.126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity
...
show less
Web App Attack
๐จ๐ฆ
192.175.111.247
13 May 2025
[Tue May 13 18:00:52.045918 2025] [security2:error] [pid 239149:tid 239149] [client 192.175.111.247: ...
show more
[Tue May 13 18:00:52.045918 2025] [security2:error] [pid 239149:tid 239149] [client 192.175.111.247:20656] [client 192.175.111.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "aCNstEYvY3SdnFAm7f4lHAAAAAM"]
[Tue May 13 18:01:34.041582 2025] [security2:error] [pid 525403:tid 525403] [client 192.175.111.247:14740] [client 192.175.111.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [s
...
show less
Web App Attack
๐ฑ๐น
45.227.254.155
13 May 2025
2025-05-13T17:02:26.193335+02:00 mimer sshd[358831]: Connection from 45.227.254.155 port 65079 on 19 ...
show more
2025-05-13T17:02:26.193335+02:00 mimer sshd[358831]: Connection from 45.227.254.155 port 65079 on 192.168.2.4 port 29120 rdomain ""
2025-05-13T17:02:26.193485+02:00 mimer sshd[358831]: banner exchange: Connection from 45.227.254.155 port 65079: invalid format
...
show less
SSH
๐ฏ๐ต
164.52.0.92
13 May 2025
[Tue May 13 16:44:25.379444 2025] [security2:error] [pid 212691:tid 212691] [client 164.52.0.92:3324 ...
show more
[Tue May 13 16:44:25.379444 2025] [security2:error] [pid 212691:tid 212691] [client 164.52.0.92:33247] [client 164.52.0.92] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/"] [unique_id "aCNayb8ZK3H9kaTyn_MQtwAAAAQ"]
[Tue May 13 16:44:28.759054 2025] [security2:error] [pid 212691:tid 212691] [client 164.52.0.92:33247] [client 164.52.0.92] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITIC
...
show less
Web App Attack
๐ฎ๐ช
34.244.107.9
12 May 2025
[Tue May 13 00:54:59.744776 2025] [security2:error] [pid 1401009:tid 1401009] [client 34.244.107.9:6 ...
show more
[Tue May 13 00:54:59.744776 2025] [security2:error] [pid 1401009:tid 1401009] [client 34.244.107.9:64758] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/nmaplowercheck1747090499"] [unique_id "aCJ8Q3ROCm3lNhgmY5kJqAAAAA0"]
[Tue May 13 00:54:59.744870 2025] [security2:error] [pid 1401014:tid 1401014] [client 34.244.107.9:64759] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
๐ฎ๐ณ
157.245.97.157
12 May 2025
[Mon May 12 22:30:08.474609 2025] [security2:error] [pid 1026805:tid 1026805] [client 157.245.97.157 ...
show more
[Mon May 12 22:30:08.474609 2025] [security2:error] [pid 1026805:tid 1026805] [client 157.245.97.157:42570] [client 157.245.97.157] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/ab2g"] [unique_id "aCJaUI_dRFD16y8P-5f-DQAAAAg"], referer: https://87.104.65.148/ab2g
[Mon May 12 22:30:09.880084 2025] [security2:error] [pid 1080103:tid 1080103] [client 157.245.97.157:42584] [client 157.245.97.157] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound An
...
show less
Web App Attack
๐ฒ๐พ
47.250.57.32
12 May 2025
[Mon May 12 17:57:54.498465 2025] [security2:error] [pid 91001:tid 91001] [client 47.250.57.32:39782 ...
show more
[Mon May 12 17:57:54.498465 2025] [security2:error] [pid 91001:tid 91001] [client 47.250.57.32:39782] [client 47.250.57.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/hello.world"] [unique_id "aCIagvs47x8ncZdXTXSkWwAAAAA"]
[Mon May 12 17:57:57.588839 2025] [security2:error] [pid 91001:tid 91001] [client 47.250.57.32:39782] [client 47.250.57.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [sev
...
show less
Web App Attack
๐บ๐ธ
69.50.95.89
12 May 2025
[Mon May 12 10:40:59.770560 2025] [security2:error] [pid 3261980:tid 3261980] [client 69.50.95.89:64 ...
show more
[Mon May 12 10:40:59.770560 2025] [security2:error] [pid 3261980:tid 3261980] [client 69.50.95.89:64116] [client 69.50.95.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mimer.buusbudde.dk"] [uri "/app_dev.php/_profiler/open"] [unique_id "aCG0Gy3kns1HgId7Iw2qXwAAAAA"]
[Mon May 12 10:50:21.800217 2025] [security2:error] [pid 3292502:tid 3292502] [client 69.50.95.89:10988] [client 69.50.95.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Tot
...
show less
Web App Attack