🇬🇧
78.153.140.218
11 May 2025
[Mon May 12 00:53:13.799570 2025] [security2:error] [pid 1292052:tid 1292052] [client 78.153.140.218 ...
show more
[Mon May 12 00:53:13.799570 2025] [security2:error] [pid 1292052:tid 1292052] [client 78.153.140.218:59394] [client 78.153.140.218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/.env"] [unique_id "aCEqWZ-zR_HvCmpcvP5FdgAAAAk"]
[Mon May 12 00:53:13.800143 2025] [security2:error] [pid 1255687:tid 1255687] [client 78.153.140.218:59388] [client 78.153.140.218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)
...
show less
Web App Attack
🇺🇸
31.220.96.115
11 May 2025
[Mon May 12 00:25:32.862172 2025] [security2:error] [pid 1255040:tid 1255040] [client 31.220.96.115: ...
show more
[Mon May 12 00:25:32.862172 2025] [security2:error] [pid 1255040:tid 1255040] [client 31.220.96.115:53894] [client 31.220.96.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/_fragment"] [unique_id "aCEj3MasldcNFYe7v1EZvwAAAAo"]
[Mon May 12 00:25:32.867028 2025] [security2:error] [pid 1292052:tid 1292052] [client 31.220.96.115:53884] [client 31.220.96.115] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"]
...
show less
Web App Attack
🇮🇪
34.244.107.9
11 May 2025
[Mon May 12 00:15:28.230682 2025] [security2:error] [pid 1255041:tid 1255041] [client 34.244.107.9:6 ...
show more
[Mon May 12 00:15:28.230682 2025] [security2:error] [pid 1255041:tid 1255041] [client 34.244.107.9:65307] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/nmaplowercheck1747001728"] [unique_id "aCEhgKZE5-uJWGpeJAIQhgAAAAc"]
[Mon May 12 00:15:28.236187 2025] [security2:error] [pid 1255044:tid 1255044] [client 34.244.107.9:65306] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
🇬🇧
165.232.44.147
11 May 2025
[Sun May 11 17:06:16.584180 2025] [security2:error] [pid 16542:tid 16542] [client 165.232.44.147:357 ...
show more
[Sun May 11 17:06:16.584180 2025] [security2:error] [pid 16542:tid 16542] [client 165.232.44.147:35748] [client 165.232.44.147] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/ab2g"] [unique_id "aCC86CcKOkARQ6rXRD8KhAAAAAk"], referer: https://87.104.65.148/ab2g
[Sun May 11 17:06:16.828306 2025] [security2:error] [pid 16676:tid 16676] [client 165.232.44.147:35764] [client 165.232.44.147] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Sc
...
show less
Web App Attack
🇨🇳
106.75.132.150
11 May 2025
[Sun May 11 14:21:52.664512 2025] [security2:error] [pid 1653958:tid 1653958] [client 106.75.132.150 ...
show more
[Sun May 11 14:21:52.664512 2025] [security2:error] [pid 1653958:tid 1653958] [client 106.75.132.150:19368] [client 106.75.132.150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/"] [unique_id "aCCWYAY6QpOO_P4jgBiftQAAAAk"], referer: https://www.demet51.ru
[Sun May 11 14:21:53.818058 2025] [security2:error] [pid 1663493:tid 1663493] [client 106.75.132.150:19460] [client 106.75.132.150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score
...
show less
Web App Attack
🇨🇳
106.75.135.116
11 May 2025
[Sun May 11 14:21:53.089216 2025] [security2:error] [pid 1557887:tid 1557887] [client 106.75.135.116 ...
show more
[Sun May 11 14:21:53.089216 2025] [security2:error] [pid 1557887:tid 1557887] [client 106.75.135.116:29976] [client 106.75.135.116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/"] [unique_id "aCCWYS6_lllQmdV4bxm7PAAAAAQ"], referer: https://3nagykft.hu
[Sun May 11 14:21:54.153702 2025] [security2:error] [pid 1368720:tid 1368720] [client 106.75.135.116:30068] [client 106.75.135.116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score
...
show less
Web App Attack
🇩🇪
193.233.171.224
11 May 2025
[Sun May 11 09:20:48.199183 2025] [security2:error] [pid 674499:tid 674499] [client 193.233.171.224: ...
show more
[Sun May 11 09:20:48.199183 2025] [security2:error] [pid 674499:tid 674499] [client 193.233.171.224:54494] [client 193.233.171.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/hello.world"] [unique_id "aCBP0IcMAi8udcEOJJwvagAAAAY"]
[Sun May 11 09:20:48.586354 2025] [security2:error] [pid 674499:tid 674499] [client 193.233.171.224:54494] [client 193.233.171.224] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
🇬🇧
46.101.46.34
10 May 2025
[Sat May 10 11:52:23.458710 2025] [security2:error] [pid 677858:tid 677858] [client 46.101.46.34:351 ...
show more
[Sat May 10 11:52:23.458710 2025] [security2:error] [pid 677858:tid 677858] [client 46.101.46.34:35170] [client 46.101.46.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/ab2g"] [unique_id "aB8h1x-PS-G7v9LIjGID9QAAAAA"], referer: https://87.104.65.148/ab2g
[Sat May 10 11:52:23.920513 2025] [security2:error] [pid 937624:tid 937624] [client 46.101.46.34:35194] [client 46.101.46.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score
...
show less
Web App Attack
🇺🇸
45.201.11.192
10 May 2025
[Sat May 10 11:02:43.350870 2025] [php:error] [pid 683920:tid 683920] [client 45.201.11.192:12183] s ...
show more
[Sat May 10 11:02:43.350870 2025] [php:error] [pid 683920:tid 683920] [client 45.201.11.192:12183] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat, referer: https://www.google.com
[Sat May 10 11:02:45.804730 2025] [php:error] [pid 769615:tid 769615] [client 45.201.11.192:50371] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat, referer: https://www.google.com
...
show less
Web App Attack
🇨🇦
156.228.181.11
10 May 2025
[Sat May 10 08:49:02.748680 2025] [php:error] [pid 327807:tid 327807] [client 156.228.181.11:14491] ...
show more
[Sat May 10 08:49:02.748680 2025] [php:error] [pid 327807:tid 327807] [client 156.228.181.11:14491] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat, referer: https://www.google.com
[Sat May 10 08:49:06.015598 2025] [php:error] [pid 382939:tid 382939] [client 156.228.181.11:60949] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat, referer: https://www.google.com
...
show less
Web App Attack
🇮🇪
34.244.107.9
09 May 2025
[Sat May 10 01:13:34.443587 2025] [security2:error] [pid 2902139:tid 2902139] [client 34.244.107.9:5 ...
show more
[Sat May 10 01:13:34.443587 2025] [security2:error] [pid 2902139:tid 2902139] [client 34.244.107.9:58755] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/nmaplowercheck1746832414"] [unique_id "aB6MHrB7Y6rPfqGSqFDOKAAAAAg"]
[Sat May 10 01:13:34.445283 2025] [security2:error] [pid 2964492:tid 2964492] [client 34.244.107.9:58757] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
🇨🇦
156.228.184.132
09 May 2025
[Fri May 09 06:18:37.758053 2025] [php:error] [pid 3724014:tid 3724014] [client 156.228.184.132:4017 ...
show more
[Fri May 09 06:18:37.758053 2025] [php:error] [pid 3724014:tid 3724014] [client 156.228.184.132:40177] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat, referer: https://www.google.com
[Fri May 09 06:18:40.282808 2025] [php:error] [pid 3836011:tid 3836011] [client 156.228.184.132:59909] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat, referer: https://www.google.com
...
show less
Web App Attack
🇺🇸
192.0.91.203
09 May 2025
[Fri May 09 04:17:42.712312 2025] [security2:error] [pid 3345082:tid 3345082] [client 192.0.91.203:5 ...
show more
[Fri May 09 04:17:42.712312 2025] [security2:error] [pid 3345082:tid 3345082] [client 192.0.91.203:52514] [client 192.0.91.203] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "juliabudde.com"] [uri "/"] [unique_id "aB1lxpazuNdxnV3qffGuPAAAAA8"], referer: https://juliabudde.com/?for=jetpack&jetpack=comms&token=%29%219V%5E%40NQWd4h%2A%21meXcwMkm%285b%26Ycg3KH%3A1%3A0×tamp=1746757062&nonce=Tpc717amqv&body-hash=sENT%2BQQ3s%2BePuL6ZVVEC9XGG7ZA%3D&signature=eyxgShYDYNhkmb6ViSuefgZ6Ww8%3D
[Fri May 09 04:17:43.146883 2025] [security2:error] [pid 3387552:tid 3387552] [client 192.0.91.203:52516] [client 192.0.91.203] ModSecurity: Access
...
show less
Web App Attack
🇺🇸
134.122.14.44
09 May 2025
[Fri May 09 03:30:45.509236 2025] [security2:error] [pid 2797293:tid 2797293] [client 134.122.14.44: ...
show more
[Fri May 09 03:30:45.509236 2025] [security2:error] [pid 2797293:tid 2797293] [client 134.122.14.44:33816] [client 134.122.14.44] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/ab2g"] [unique_id "aB1axcOUN8gGB8IOqoV4MAAAAAY"], referer: https://87.104.65.148/ab2g
[Fri May 09 03:30:46.404086 2025] [security2:error] [pid 3258609:tid 3258609] [client 134.122.14.44:33838] [client 134.122.14.44] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomal
...
show less
Web App Attack
🇻🇳
171.244.40.232
09 May 2025
[Fri May 09 03:29:12.610222 2025] [security2:error] [pid 3122201:tid 3122201] [client 171.244.40.232 ...
show more
[Fri May 09 03:29:12.610222 2025] [security2:error] [pid 3122201:tid 3122201] [client 171.244.40.232:40790] [client 171.244.40.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/hello.world"] [unique_id "aB1aaHFuvmPydT4KPO5mHgAAAAE"]
[Fri May 09 03:29:13.078911 2025] [security2:error] [pid 3122201:tid 3122201] [client 171.244.40.232:40790] [client 171.244.40.232] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
🇳🇱
194.50.16.252
09 May 2025
[Fri May 09 02:00:56.693929 2025] [security2:error] [pid 3031642:tid 3031642] [client 194.50.16.252: ...
show more
[Fri May 09 02:00:56.693929 2025] [security2:error] [pid 3031642:tid 3031642] [client 194.50.16.252:54630] [client 194.50.16.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/temp/.env"] [unique_id "aB1FuAPFA0B4JWvQfBxpTwAAAAI"]
[Fri May 09 02:00:56.695549 2025] [security2:error] [pid 2797271:tid 2797271] [client 194.50.16.252:54638] [client 194.50.16.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"
...
show less
Web App Attack
🇺🇸
74.80.208.58
08 May 2025
[Fri May 09 00:34:58.846413 2025] [security2:error] [pid 2762913:tid 2762913] [client 74.80.208.58:5 ...
show more
[Fri May 09 00:34:58.846413 2025] [security2:error] [pid 2762913:tid 2762913] [client 74.80.208.58:55161] [client 74.80.208.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/robots.txt"] [unique_id "aB0xkryCNsn5aBKUIGqvAgAAAAg"]
[Fri May 09 00:34:58.998690 2025] [security2:error] [pid 2762913:tid 2762913] [client 74.80.208.58:55161] [client 74.80.208.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"]
...
show less
Web App Attack
🇩🇪
130.61.156.240
08 May 2025
[Thu May 08 20:27:34.143874 2025] [security2:error] [pid 2096596:tid 2096596] [client 130.61.156.240 ...
show more
[Thu May 08 20:27:34.143874 2025] [security2:error] [pid 2096596:tid 2096596] [client 130.61.156.240:46144] [client 130.61.156.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/hello.world"] [unique_id "aBz3lnLLFuYIqFqyH9FRUQAAAAw"]
[Thu May 08 20:27:35.617503 2025] [security2:error] [pid 2096596:tid 2096596] [client 130.61.156.240:46144] [client 130.61.156.240] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total S
...
show less
Web App Attack
🇺🇸
74.80.208.139
08 May 2025
[Thu May 08 20:16:38.836229 2025] [security2:error] [pid 2078597:tid 2078597] [client 74.80.208.139: ...
show more
[Thu May 08 20:16:38.836229 2025] [security2:error] [pid 2078597:tid 2078597] [client 74.80.208.139:33727] [client 74.80.208.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/robots.txt"] [unique_id "aBz1BpaxAR2mjV6lhTj7JAAAAAc"]
[Thu May 08 20:16:38.988290 2025] [security2:error] [pid 2078597:tid 2078597] [client 74.80.208.139:33727] [client 74.80.208.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score:
...
show less
Web App Attack
🇨🇱
176.52.128.15
08 May 2025
[Thu May 08 18:07:24.312001 2025] [security2:error] [pid 1640653:tid 1640653] [client 176.52.128.15: ...
show more
[Thu May 08 18:07:24.312001 2025] [security2:error] [pid 1640653:tid 1640653] [client 176.52.128.15:45528] [client 176.52.128.15] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/"] [unique_id "aBzWvFFngoYoJKSYQngrRAAAAAY"]
[Thu May 08 18:07:24.996408 2025] [security2:error] [pid 1685868:tid 1685868] [client 176.52.128.15:45534] [client 176.52.128.15] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity
...
show less
Web App Attack
🇩🇰
37.96.63.165
08 May 2025
[Thu May 08 15:01:35.871777 2025] [security2:error] [pid 1114845:tid 1114845] [client 37.96.63.165:2 ...
show more
[Thu May 08 15:01:35.871777 2025] [security2:error] [pid 1114845:tid 1114845] [client 37.96.63.165:2492] [client 37.96.63.165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "crypta.buusbudde.dk"] [uri "/api/ciphers/0cb4e1a3-596e-4adf-b790-e2b2200d70b2"] [unique_id "aByrLymzmqmkNP_4N-6fUwAAAAk"]
[Thu May 08 15:01:38.977924 2025] [security2:error] [pid 1114845:tid 1114845] [client 37.96.63.165:2492] [client 37.96.63.165] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound An
...
show less
Web App Attack
🇨🇦
154.213.163.106
08 May 2025
[Thu May 08 12:07:20.002950 2025] [php:error] [pid 729106:tid 729106] [client 154.213.163.106:33445] ...
show more
[Thu May 08 12:07:20.002950 2025] [php:error] [pid 729106:tid 729106] [client 154.213.163.106:33445] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat, referer: https://www.google.com
[Thu May 08 12:07:23.350961 2025] [php:error] [pid 717668:tid 717668] [client 154.213.163.106:26791] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat, referer: https://www.google.com
...
show less
Web App Attack
🇨🇦
64.15.129.109
08 May 2025
[Thu May 08 10:00:33.997747 2025] [security2:error] [pid 365262:tid 365262] [client 64.15.129.109:18 ...
show more
[Thu May 08 10:00:33.997747 2025] [security2:error] [pid 365262:tid 365262] [client 64.15.129.109:18967] [client 64.15.129.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/"] [unique_id "aBxkoWcxKXEpJhFifdBCBgAAAAY"]
[Thu May 08 10:01:25.254817 2025] [security2:error] [pid 311065:tid 311065] [client 64.15.129.109:58867] [client 64.15.129.109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CR
...
show less
Web App Attack
🇨🇦
192.175.111.242
08 May 2025
[Thu May 08 10:00:59.592832 2025] [security2:error] [pid 366979:tid 366979] [client 192.175.111.242: ...
show more
[Thu May 08 10:00:59.592832 2025] [security2:error] [pid 366979:tid 366979] [client 192.175.111.242:22794] [client 192.175.111.242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/"] [unique_id "aBxku6YZwdKg4cL8__gbjAAAAAM"]
[Thu May 08 10:01:19.562212 2025] [security2:error] [pid 367365:tid 367365] [client 192.175.111.242:29708] [client 192.175.111.242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [sev
...
show less
Web App Attack
🇨🇦
64.15.129.110
08 May 2025
[Thu May 08 10:00:59.262786 2025] [security2:error] [pid 257737:tid 257737] [client 64.15.129.110:56 ...
show more
[Thu May 08 10:00:59.262786 2025] [security2:error] [pid 257737:tid 257737] [client 64.15.129.110:56165] [client 64.15.129.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/"] [unique_id "aBxku_gJEixt13Rz-hoOzwAAAAQ"]
[Thu May 08 10:01:03.891473 2025] [security2:error] [pid 367365:tid 367365] [client 64.15.129.110:34730] [client 64.15.129.110] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "C
...
show less
Web App Attack