AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

The webmaster of buusbudde.dk joined AbuseIPDB in June 2020 and has reported 7,268 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇮🇳 103.253.173.182	26 Sep 2025	103.253.173.182 - - [26/Sep/2025:16:43:04 +0200] "POST /xmlrpc.php HTTP/1.1" 301 253 "-" "Mozilla/5. ... show more 103.253.173.182 - - [26/Sep/2025:16:43:04 +0200] "POST /xmlrpc.php HTTP/1.1" 301 253 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/73.0.0.0 Safari/537.36" 103.253.173.182 - - [26/Sep/2025:16:43:12 +0200] "POST /xmlrpc.php HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/80.0.0.0 Safari/537.36" 103.253.173.182 - - [26/Sep/2025:16:43:13 +0200] "GET /xmlrpc.php HTTP/1.1" 301 253 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/80.0.0.0 Safari/537.36" ... show less	Web App Attack
🇵🇱 149.50.110.48	26 Sep 2025	2025-09-26T10:25:37.874783+02:00 mimer sshd[468798]: Connection from 149.50.110.48 port 61038 on 192 ... show more 2025-09-26T10:25:37.874783+02:00 mimer sshd[468798]: Connection from 149.50.110.48 port 61038 on 192.168.2.4 port 29120 rdomain "" 2025-09-26T10:25:37.875376+02:00 mimer sshd[468798]: banner exchange: Connection from 149.50.110.48 port 61038: invalid format ... show less	SSH
🇨🇦 143.198.37.213	26 Sep 2025	[Fri Sep 26 03:53:46.929607 2025] [security2:error] [pid 3122531:tid 3122531] [client 143.198.37.213 ... show more [Fri Sep 26 03:53:46.929607 2025] [security2:error] [pid 3122531:tid 3122531] [client 143.198.37.213:49784] [client 143.198.37.213] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/ab2g"] [unique_id "aNXyKoez5TMXeBqQSPi6PAAAAAI"], referer: https://87.104.65.148/ab2g [Fri Sep 26 03:53:47.825887 2025] [security2:error] [pid 2490442:tid 2490442] [client 143.198.37.213:49810] [client 143.198.37.213] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound An ... show less	Web App Attack
🇱🇹 91.224.92.120	25 Sep 2025	91.224.92.120 - - [26/Sep/2025:01:30:10 +0200] "GET /wp-login.php HTTP/1.1" 301 243 "https://www.goo ... show more 91.224.92.120 - - [26/Sep/2025:01:30:10 +0200] "GET /wp-login.php HTTP/1.1" 301 243 "https://www.google.fr/search?q=wordpress" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.2151.97" 91.224.92.120 - - [26/Sep/2025:01:30:10 +0200] "GET /wp-login.php HTTP/1.1" 301 255 "https://www.google.fr/search?q=wordpress" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.2151.97" 91.224.92.120 - - [26/Sep/2025:01:30:11 +0200] "GET /wp-login.php HTTP/1.1" 302 219 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" ... show less	Web App Attack
🇮🇪 34.244.107.9	25 Sep 2025	[Fri Sep 26 01:15:15.837951 2025] [security2:error] [pid 2506346:tid 2506346] [client 34.244.107.9:5 ... show more [Fri Sep 26 01:15:15.837951 2025] [security2:error] [pid 2506346:tid 2506346] [client 34.244.107.9:52660] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/sdk"] [unique_id "aNXNA5mR3ItJCo2GHRuRTgAAAAc"] [Fri Sep 26 01:15:15.842672 2025] [security2:error] [pid 2490440:tid 2490440] [client 34.244.107.9:52662] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity ... show less	Web App Attack
🇳🇱 196.251.115.37	25 Sep 2025	[Fri Sep 26 00:51:06.766342 2025] [security2:error] [pid 2490442:tid 2490442] [client 196.251.115.37 ... show more [Fri Sep 26 00:51:06.766342 2025] [security2:error] [pid 2490442:tid 2490442] [client 196.251.115.37:35932] [client 196.251.115.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/.env"] [unique_id "aNXHWq3f7QjHWFJlb3Yo0gAAAAY"] [Fri Sep 26 00:51:06.915420 2025] [security2:error] [pid 2490446:tid 2490446] [client 196.251.115.37:35938] [client 196.251.115.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ ... show less	Web App Attack
🇮🇪 54.216.88.28	25 Sep 2025	[Fri Sep 26 00:06:13.863771 2025] [security2:error] [pid 2490446:tid 2490446] [client 54.216.88.28:5 ... show more [Fri Sep 26 00:06:13.863771 2025] [security2:error] [pid 2490446:tid 2490446] [client 54.216.88.28:50584] [client 54.216.88.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/sdk"] [unique_id "aNW81Ze7J72QPOhmzh1cfwAAAAg"] [Fri Sep 26 00:06:13.867863 2025] [security2:error] [pid 2491780:tid 2491780] [client 54.216.88.28:50558] [client 54.216.88.28] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity ... show less	Web App Attack
🇨🇳 106.75.138.231	24 Sep 2025	[Thu Sep 25 00:57:19.903753 2025] [security2:error] [pid 1995189:tid 1995189] [client 106.75.138.231 ... show more [Thu Sep 25 00:57:19.903753 2025] [security2:error] [pid 1995189:tid 1995189] [client 106.75.138.231:30774] [client 106.75.138.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/"] [unique_id "aNR3T2N05YRuPmr7PURExAAAAAE"] [Thu Sep 25 00:57:51.050761 2025] [security2:error] [pid 2069448:tid 2069448] [client 106.75.138.231:32892] [client 106.75.138.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [seve ... show less	Web App Attack
🇨🇳 106.75.130.248	24 Sep 2025	[Thu Sep 25 00:57:05.162633 2025] [security2:error] [pid 2161735:tid 2161735] [client 106.75.130.248 ... show more [Thu Sep 25 00:57:05.162633 2025] [security2:error] [pid 2161735:tid 2161735] [client 106.75.130.248:47870] [client 106.75.130.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/"] [unique_id "aNR3QfPZ2Qp-0pBtfH8CLwAAAAw"] [Thu Sep 25 00:57:06.432606 2025] [security2:error] [pid 2161640:tid 2161640] [client 106.75.130.248:47950] [client 106.75.130.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ ... show less	Web App Attack
🇮🇪 34.244.107.9	24 Sep 2025	[Thu Sep 25 00:08:06.504479 2025] [security2:error] [pid 2021989:tid 2021989] [client 34.244.107.9:6 ... show more [Thu Sep 25 00:08:06.504479 2025] [security2:error] [pid 2021989:tid 2021989] [client 34.244.107.9:65169] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/sdk"] [unique_id "aNRrxvCQu9H3HRBsddAxLwAAAAc"] [Thu Sep 25 00:08:06.507633 2025] [security2:error] [pid 1995196:tid 1995196] [client 34.244.107.9:65171] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity ... show less	Web App Attack
🇩🇪 51.75.157.203	24 Sep 2025	51.75.157.203 - - [24/Sep/2025:17:13:04 +0200] "POST /xmlrpc.php HTTP/1.1" 301 253 "-" "Mozilla/5.0 ... show more 51.75.157.203 - - [24/Sep/2025:17:13:04 +0200] "POST /xmlrpc.php HTTP/1.1" 301 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 51.75.157.203 - - [24/Sep/2025:17:13:04 +0200] "POST /xmlrpc.php HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 51.75.157.203 - - [24/Sep/2025:17:13:26 +0200] "POST /xmlrpc.php HTTP/1.1" 301 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 206.189.10.211	24 Sep 2025	[Wed Sep 24 07:56:01.080360 2025] [security2:error] [pid 3154426:tid 3154426] [client 206.189.10.211 ... show more [Wed Sep 24 07:56:01.080360 2025] [security2:error] [pid 3154426:tid 3154426] [client 206.189.10.211:33814] [client 206.189.10.211] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/ab2g"] [unique_id "aNOH8VRn-anXm1OVHzXm5wAAAAc"], referer: https://87.104.65.148/ab2g [Wed Sep 24 07:56:01.259149 2025] [security2:error] [pid 3171948:tid 3171948] [client 206.189.10.211:33826] [client 206.189.10.211] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound An ... show less	Web App Attack
🇮🇸 185.146.234.68	24 Sep 2025	[Wed Sep 24 07:38:11.417957 2025] [security2:error] [pid 3143395:tid 3143395] [client 185.146.234.68 ... show more [Wed Sep 24 07:38:11.417957 2025] [security2:error] [pid 3143395:tid 3143395] [client 185.146.234.68:50448] [client 185.146.234.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/solr/admin/cores"] [unique_id "aNODw36i6Quc2R0N14Nt8gAAAAw"] [Wed Sep 24 07:38:11.419906 2025] [security2:error] [pid 3143393:tid 3143393] [client 185.146.234.68:50446] [client 185.146.234.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total ... show less	Web App Attack
🇮🇪 34.244.107.9	23 Sep 2025	[Tue Sep 23 03:08:48.150494 2025] [security2:error] [pid 999685:tid 999685] [client 34.244.107.9:620 ... show more [Tue Sep 23 03:08:48.150494 2025] [security2:error] [pid 999685:tid 999685] [client 34.244.107.9:62052] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/nmaplowercheck1758589728"] [unique_id "aNHzIMYiGn_aDeRIWfIUHgAAAAk"] [Tue Sep 23 03:08:48.155880 2025] [security2:error] [pid 972314:tid 972314] [client 34.244.107.9:62051] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score ... show less	Web App Attack
🇮🇪 52.215.203.247	22 Sep 2025	[Tue Sep 23 00:44:47.380635 2025] [security2:error] [pid 999685:tid 999685] [client 52.215.203.247:3 ... show more [Tue Sep 23 00:44:47.380635 2025] [security2:error] [pid 999685:tid 999685] [client 52.215.203.247:32938] [client 52.215.203.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/nmaplowercheck1758581087"] [unique_id "aNHRX8YiGn_aDeRIWfIT6gAAAAk"] [Tue Sep 23 00:44:47.390944 2025] [security2:error] [pid 988322:tid 988322] [client 52.215.203.247:32948] [client 52.215.203.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Tot ... show less	Web App Attack
🇺🇸 162.240.111.156	22 Sep 2025	[Mon Sep 22 23:22:04.319738 2025] [security2:error] [pid 834829:tid 834829] [client 162.240.111.156: ... show more [Mon Sep 22 23:22:04.319738 2025] [security2:error] [pid 834829:tid 834829] [client 162.240.111.156:42130] [client 162.240.111.156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "gallery.buusbudde.dk"] [uri "/joomla/greenery_hub/index.php/en/hotels/reservations"] [unique_id "aNG9_BuKMUEGwsklVYAReAAAAAQ"] [Mon Sep 22 23:22:04.322983 2025] [security2:error] [pid 856372:tid 856372] [client 162.240.111.156:42146] [client 162.240.111.156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] ... show less	Web App Attack
🇳🇱 165.232.87.10	22 Sep 2025	[Mon Sep 22 17:51:51.102946 2025] [security2:error] [pid 3771635:tid 3771635] [client 165.232.87.10: ... show more [Mon Sep 22 17:51:51.102946 2025] [security2:error] [pid 3771635:tid 3771635] [client 165.232.87.10:49696] [client 165.232.87.10] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/ab2g"] [unique_id "aNFwl1871zw-8KQZGe24rQAAAAc"], referer: https://87.104.65.148/ab2g [Mon Sep 22 17:51:51.260914 2025] [security2:error] [pid 3888961:tid 3888961] [client 165.232.87.10:49724] [client 165.232.87.10] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomal ... show less	Web App Attack
🇮🇸 185.247.226.33	22 Sep 2025	[Mon Sep 22 13:53:51.452814 2025] [php:error] [pid 3281926:tid 3281926] [client 185.247.226.33:24040 ... show more [Mon Sep 22 13:53:51.452814 2025] [php:error] [pid 3281926:tid 3281926] [client 185.247.226.33:24040] script '/home/www/buusbudde.dk/public_html/upload.php' not found or unable to stat [Mon Sep 22 13:53:51.639246 2025] [php:error] [pid 3243601:tid 3243601] [client 185.247.226.33:24050] script '/home/www/buusbudde.dk/public_html/uploader.php' not found or unable to stat ... show less	Web App Attack
🇬🇧 78.153.140.222	22 Sep 2025	[Mon Sep 22 13:01:40.887823 2025] [security2:error] [pid 3098970:tid 3098970] [client 78.153.140.222 ... show more [Mon Sep 22 13:01:40.887823 2025] [security2:error] [pid 3098970:tid 3098970] [client 78.153.140.222:42592] [client 78.153.140.222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/.env"] [unique_id "aNEslEfXAlYSRlYKKqcS5QAAAAc"] [Mon Sep 22 13:01:44.944198 2025] [security2:error] [pid 2896023:tid 2896023] [client 78.153.140.222:40794] [client 78.153.140.222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ ... show less	Web App Attack
🇲🇾 103.8.27.27	22 Sep 2025	[Mon Sep 22 08:16:22.382257 2025] [security2:error] [pid 2357501:tid 2357501] [client 103.8.27.27:57 ... show more [Mon Sep 22 08:16:22.382257 2025] [security2:error] [pid 2357501:tid 2357501] [client 103.8.27.27:57447] [client 103.8.27.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/core/.env"] [unique_id "aNDptt3lbtZjS6gRpqMC6AAAAAs"] [Mon Sep 22 08:16:22.396842 2025] [security2:error] [pid 2225564:tid 2225564] [client 103.8.27.27:53780] [client 103.8.27.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [sev ... show less	Web App Attack
🇮🇪 34.244.107.9	22 Sep 2025	[Mon Sep 22 03:02:49.904485 2025] [security2:error] [pid 1027537:tid 1027537] [client 34.244.107.9:5 ... show more [Mon Sep 22 03:02:49.904485 2025] [security2:error] [pid 1027537:tid 1027537] [client 34.244.107.9:56510] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "buusbudde.dk"] [uri "/"] [unique_id "aNCgOa_GOPbI6WeOSaq4YQAAAAo"] [Mon Sep 22 03:02:49.904488 2025] [security2:error] [pid 758874:tid 758874] [client 34.244.107.9:56509] [client 34.244.107.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRIT ... show less	Web App Attack
🇺🇸 162.243.45.144	21 Sep 2025	[Sun Sep 21 14:07:51.600295 2025] [security2:error] [pid 3043426:tid 3043426] [client 162.243.45.144 ... show more [Sun Sep 21 14:07:51.600295 2025] [security2:error] [pid 3043426:tid 3043426] [client 162.243.45.144:59582] [client 162.243.45.144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.buusbudde.dk"] [uri "/ab2g"] [unique_id "aM_ql8J7OyqSJv7Xsa59IwAAAA0"], referer: https://87.104.65.148/ab2g [Sun Sep 21 14:07:52.529385 2025] [security2:error] [pid 3273478:tid 3273478] [client 162.243.45.144:59596] [client 162.243.45.144] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound An ... show less	Web App Attack
🇩🇰 193.29.107.106	21 Sep 2025	[Sun Sep 21 10:01:14.809395 2025] [php:error] [pid 2574834:tid 2574834] [client 193.29.107.106:41472 ... show more [Sun Sep 21 10:01:14.809395 2025] [php:error] [pid 2574834:tid 2574834] [client 193.29.107.106:41472] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat [Sun Sep 21 10:01:23.288054 2025] [php:error] [pid 2602081:tid 2602081] [client 193.29.107.106:48947] script '/home/www/buusbudde.dk/public_html/wp-login.php' not found or unable to stat ... show less	Web App Attack
🇱🇹 91.224.92.120	21 Sep 2025	91.224.92.120 - - [21/Sep/2025:09:13:31 +0200] "GET /wp-login.php HTTP/1.1" 301 243 "https://twitter ... show more 91.224.92.120 - - [21/Sep/2025:09:13:31 +0200] "GET /wp-login.php HTTP/1.1" 301 243 "https://twitter.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_6_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Safari/605.1.15" 91.224.92.120 - - [21/Sep/2025:09:13:31 +0200] "GET /wp-login.php HTTP/1.1" 301 255 "https://twitter.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_6_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Safari/605.1.15" 91.224.92.120 - - [21/Sep/2025:09:13:32 +0200] "GET /wp-login.php HTTP/1.1" 302 219 "https://www.linkedin.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.57 Safari/537.36" ... show less	Web App Attack
🇺🇸 3.128.202.23	21 Sep 2025	[Sun Sep 21 07:23:23.717324 2025] [security2:error] [pid 2050267:tid 2050267] [client 3.128.202.23:4 ... show more [Sun Sep 21 07:23:23.717324 2025] [security2:error] [pid 2050267:tid 2050267] [client 3.128.202.23:41386] [client 3.128.202.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "gallery.buusbudde.dk"] [uri "/.git/config"] [unique_id "aM-Lyy59imQWDVY6PXCymQAAAAI"] [Sun Sep 21 07:27:38.437911 2025] [security2:error] [pid 2115810:tid 2115810] [client 3.128.202.23:49466] [client 3.128.202.23] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score ... show less	Web App Attack