🇺🇸
francelink.fr
2026-10-28 00:13:24
(22 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-27T13:10:37.000Z.
Web App Attack
🇺🇸
1gz
2026-10-27 06:09:33
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-json/lupon/v1/observe
UA: Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)
This report was ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-json/lupon/v1/observe
UA: Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
francelink.fr
2026-10-27 01:05:27
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-26T23:14:03.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-26 09:22:27
(2 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-26T08:40:33.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-25 21:39:26
(3 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-25T19:34:24.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-25 19:16:29
(3 days ago)
[Mon Oct 26 06:16:28.293587 2026] [security2:error] [pid 22917] [client 124.64.201.149:37181] [client 124.64.201.149] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQ ...
show more
[Mon Oct 26 06:16:28.293587 2026] [security2:error] [pid 22917] [client 124.64.201.149:37181] [client 124.64.201.149] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "at5VjGdXJQzSNe1BnMUqbwAAAAQ"], referer: http://levellapromotions.com.au/?p=11711
...
show less
Web App Attack
🇨🇭
4server
2026-10-25 17:36:45
(3 days ago)
[SunOct2518:36:42.4003252026][security2:error][pid795715:tid795734][client124.64.201.149:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BL ...
show more
[SunOct2518:36:42.4003252026][security2:error][pid795715:tid795734][client124.64.201.149:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"avvnicolaurbani.ch\"][uri\"/\"][unique_id\"at4-Ks4KjiCPlILZEyJItAAAAAY\"]
show less
Hacking
Web App Attack
🇺🇸
1gz
2026-10-24 07:19:19
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-json/lupon/v1/observe
UA: Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)
This report was ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-json/lupon/v1/observe
UA: Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
francelink.fr
2026-10-23 12:56:27
(5 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-22T18:29:46.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-21 04:23:23
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-20T18:10:39.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-14 16:09:41
(2 weeks ago)
[Thu Oct 15 03:09:40.897381 2026] [security2:error] [pid 383488] [client 124.64.201.149:11928] [client 124.64.201.149] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/RE ...
show more
[Thu Oct 15 03:09:40.897381 2026] [security2:error] [pid 383488] [client 124.64.201.149:11928] [client 124.64.201.149] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "talentaymerch.com.au"] [uri "/"] [unique_id "as-pRKgf56y9YC7pkgOqDQAAAAA"], referer: http://talentaymerch.com.au/?p=44187
...
show less
Web App Attack
2026-10-10 13:11:37
(2 weeks ago)
Web application attack detected.
Web App Attack
🇺🇸
1gz
2026-10-10 12:19:33
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/1.0 (GET method)
Endpoint: /wp-json/oembed/1.0/embed
UA: Mozilla/5.0 (Linux; Android 8.1.0; SM-T837A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.40 Sa ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: BLOCK
Protocol: HTTP/1.0 (GET method)
Endpoint: /wp-json/oembed/1.0/embed
UA: Mozilla/5.0 (Linux; Android 8.1.0; SM-T837A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.40 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇭
backslash
2026-10-10 09:21:01
(2 weeks ago)
block ruleset 43A7B4C84F1C495B355A170A3ABE0D75374A5E0D
Bad Web Bot
2026-10-05 00:32:51
(3 weeks ago)
apache vulnerability scan
Web App Attack
