🇺🇸
francelink.fr
2026-11-13 09:31:25
UTC ·
(3 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-13T09:29:31.000Z.
Web App Attack
2026-11-12 22:51:05
UTC ·
(14 hours ago)
Web App Attack, Hacking
Hacking
Web App Attack
🇫🇮
xyz.rip
2026-11-12 17:56:10
UTC ·
(19 hours ago)
WAF Violation
...
Hacking
Web App Attack
🇦🇺
oncord
2026-11-12 08:18:40
UTC ·
(1 day ago)
Form spam
Web Spam
🇺🇸
francelink.fr
2026-11-11 19:50:27
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-11T19:48:55.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-11 06:42:59
UTC ·
(2 days ago)
[Wed Nov 11 17:42:59.486209 2026] [security2:error] [pid 349004] [client 154.195.132.200:12845] [client 154.195.132.200] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/ ...
show more
[Wed Nov 11 17:42:59.486209 2026] [security2:error] [pid 349004] [client 154.195.132.200:12845] [client 154.195.132.200] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/wp-content/plugins/woo-conditional-shipping-pro/frontend/css/woo-conditional-shipping.css"] [unique_id "avQOc6uzhsD9wkqc8d8Z3gAAAAg"], referer: https://ccideas.com.au/my-account/?action=register
...
show less
Web App Attack
🇦🇺
oncord
2026-11-06 03:38:46
UTC ·
(1 week ago)
Form spam
Web Spam
2026-09-02 09:22:01
UTC ·
(2 months ago)
Authentication failure
Brute-Force
2026-09-01 05:00:19
UTC ·
(2 months ago)
BruteForce IMAP/POP3/SMTP
Brute-Force
2026-08-31 12:18:06
UTC ·
(2 months ago)
...
Brute-Force
🇫🇮
notelseit
2026-08-29 19:56:28
UTC ·
(2 months ago)
2026-08-29T21:56:10.545227+02:00 mail dovecot: auth-worker(2479626): conn unix:auth-worker (pid=1643206,uid=110): auth-worker<11396>: sql([email protected] ,154.195.132.200,<G9jl9TRaM4Waw4TI>): Password mismatch
2026-08-29T21:56:16.238637+02:00 ...
show more
2026-08-29T21:56:10.545227+02:00 mail dovecot: auth-worker(2479626): conn unix:auth-worker (pid=1643206,uid=110): auth-worker<11396>: sql([email protected] ,154.195.132.200,<G9jl9TRaM4Waw4TI>): Password mismatch
2026-08-29T21:56:16.238637+02:00 mail dovecot: auth-worker(2479626): conn unix:auth-worker (pid=1643206,uid=110): auth-worker<11398>: sql([email protected] ,154.195.132.200,<G9jl9TRaM4Waw4TI>): Password mismatch
2026-08-29T21:56:22.313153+02:00 mail dovecot: auth-worker(2479626): conn unix:auth-worker (pid=1643206,uid=110): auth-worker<11399>: sql([email protected] ,154.195.132.200,<G9jl9TRaM4Waw4TI>): Password mismatch
2026-08-29T21:56:24.315523+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 14 secs): user=<[email protected] >, method=PLAIN, rip=154.195.132.200, lip=65.21.131.50, TLS: Connection closed, session=<G9jl9TRaM4Waw4TI>
2026-08-29T21:56:28.140482+02:00 mail dovecot: auth-worker(2479626): conn unix:auth-
...
show less
Brute-Force
Email Spam
2026-08-23 20:17:03
UTC ·
(2 months ago)
...
Brute-Force
🇫🇮
notelseit
2026-08-23 03:17:41
UTC ·
(2 months ago)
2026-08-23T05:17:22.389225+02:00 mail dovecot: auth-worker(1257743): conn unix:auth-worker (pid=607873,uid=110): auth-worker<10153>: sql([email protected] ,154.195.132.200,<04DaTq5ZBymaw4TI>): Password mismatch
2026-08-23T05:17:28.613603+02:00 m ...
show more
2026-08-23T05:17:22.389225+02:00 mail dovecot: auth-worker(1257743): conn unix:auth-worker (pid=607873,uid=110): auth-worker<10153>: sql([email protected] ,154.195.132.200,<04DaTq5ZBymaw4TI>): Password mismatch
2026-08-23T05:17:28.613603+02:00 mail dovecot: auth-worker(1257743): conn unix:auth-worker (pid=607873,uid=110): auth-worker<10155>: sql([email protected] ,154.195.132.200,<04DaTq5ZBymaw4TI>): Password mismatch
2026-08-23T05:17:34.183622+02:00 mail dovecot: auth-worker(1257743): conn unix:auth-worker (pid=607873,uid=110): auth-worker<10156>: sql([email protected] ,154.195.132.200,<04DaTq5ZBymaw4TI>): Password mismatch
2026-08-23T05:17:36.186173+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 14 secs): user=<[email protected] >, method=PLAIN, rip=154.195.132.200, lip=65.21.131.50, TLS: Connection closed, session=<04DaTq5ZBymaw4TI>
2026-08-23T05:17:41.341964+02:00 mail dovecot: auth-worker(1257743): conn unix:auth-wor
...
show less
Brute-Force
Email Spam
🇮🇹
VHosting
2025-11-16 11:09:49
UTC ·
(11 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
