2026/05/28 01:22:56 [notice] 1#1: ModSecurity-nginx v1.0.4 (rules loaded inline/local/remote: 0/847/0)
2026/05/28 01:22:56 [notice] 1#1: libmodsecurity3 version 3.0.15
2026/05/28 01:23:45 [error] 562#562: *7 [client 10.100.0.5] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `23' ) [file "/etc/modsecurity.d/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 23)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.25.0"] [maturity "0"] [accuracy "0"] [tag "modsecurity"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "138.197.228.148"] [uri "/"] [unique_id "177993142515.451482"] [ref ""], client: 10.100.0.5, server: fintrixs-waf, request: "GET /?id=1%20OR%201=1--%20 HTTP/1.1", host: "138.197.228.148"
2026/05/28 01:23:46 [error] 562#562: *8 [client 10.100.0.16] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `33' ) [file "/etc/modsecurity.d/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 33)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.25.0"] [maturity "0"] [accuracy "0"] [tag "modsecurity"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "138.197.228.148"] [uri "/"] [unique_id "177993142611.144665"] [ref ""], client: 10.100.0.16, server: fintrixs-waf, request: "GET /?q=UNION%20SELECT%20username%20FROM%20users HTTP/1.1", host: "138.197.228.148"
2026/05/28 01:23:46 [error] 562#562: *9 [client 186.30.7.141] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `33' ) [file "/etc/modsecurity.d/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 33)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.25.0"] [maturity "0"] [accuracy "0"] [tag "modsecurity"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "138.197.228.148"] [uri "/"] [unique_id "177993142638.042863"] [ref ""], client: 186.30.7.141, server: fintrixs-waf, request: "GET /?x=%3Cscript%3Ealert(1)%3C/script%3E HTTP/1.1", host: "138.197.228.148"
2026/05/28 01:23:46 [error] 562#562: *13 [client 186.30.7.141] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `18' ) [file "/etc/modsecurity.d/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.25.0"] [maturity "0"] [accuracy "0"] [tag "modsecurity"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "138.197.228.148"] [uri "/"] [unique_id "177993142622.527472"] [ref ""], client: 186.30.7.141, server: fintrixs-waf, request: "GET /?cmd=;cat%20/etc/passwd HTTP/1.1", host: "138.197.228.148"
2026/05/28 01:23:46 [error] 562#562: *14 [client 186.30.7.141] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `8' ) [file "/etc/modsecurity.d/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.25.0"] [maturity "0"] [accuracy "0"] [tag "modsecurity"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "138.197.228.148"] [uri "/"] [unique_id "17799314261.408187"] [ref ""], client: 186.30.7.141, server: fintrixs-waf, request: "GET / HTTP/1.1", host: "138.197.228.148"
