🇦🇺
paulshipley.com.au
2026-09-19 16:20:55
(14 hours ago)
[Sun Sep 20 02:20:55.429440 2026] [security2:error] [pid 807157] [client 180.247.60.184:7152] [clien ...
show more
[Sun Sep 20 02:20:55.429440 2026] [security2:error] [pid 807157] [client 180.247.60.184:7152] [client 180.247.60.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shotbysuzanne.com.au"] [uri "/"] [unique_id "aq62Z_a1W5mRcKBt3ytqUwAAACw"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-19 15:43:17
(14 hours ago)
[Sun Sep 20 01:43:16.839191 2026] [security2:error] [pid 802454] [client 180.247.60.184:31960] [clie ...
show more
[Sun Sep 20 01:43:16.839191 2026] [security2:error] [pid 802454] [client 180.247.60.184:31960] [client 180.247.60.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "rjryanpartners.com.au"] [uri "/"] [unique_id "aq6tlE4wlk7dprGDfEfwyQAAAAw"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-19 14:24:15
(16 hours ago)
[Sun Sep 20 00:24:14.630982 2026] [security2:error] [pid 779051] [client 180.247.60.184:23765] [clie ...
show more
[Sun Sep 20 00:24:14.630982 2026] [security2:error] [pid 779051] [client 180.247.60.184:23765] [client 180.247.60.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/"] [unique_id "aq6bDgYdWwCCc3TmeetpqAAAAAg"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-19 12:01:28
(18 hours ago)
[Sat Sep 19 22:01:27.499368 2026] [security2:error] [pid 774770] [client 180.247.60.184:28170] [clie ...
show more
[Sat Sep 19 22:01:27.499368 2026] [security2:error] [pid 774770] [client 180.247.60.184:28170] [client 180.247.60.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellagiftware.com.au"] [uri "/"] [unique_id "aq55l3iDrSvj1Uf18c4_OAAAAAg"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-19 10:49:02
(19 hours ago)
[Sat Sep 19 20:49:01.940991 2026] [security2:error] [pid 758915] [client 180.247.60.184:20828] [clie ...
show more
[Sat Sep 19 20:49:01.940991 2026] [security2:error] [pid 758915] [client 180.247.60.184:20828] [client 180.247.60.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "iaki.com.au"] [uri "/"] [unique_id "aq5oncoWinUSGGexe_YC_gAAAAg"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-19 08:04:45
(22 hours ago)
[Sat Sep 19 18:04:44.547900 2026] [security2:error] [pid 739165] [client 180.247.60.184:29895] [clie ...
show more
[Sat Sep 19 18:04:44.547900 2026] [security2:error] [pid 739165] [client 180.247.60.184:29895] [client 180.247.60.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dance4fitness.com.au"] [uri "/"] [unique_id "aq5CHMSkuApy4sPL7QzBHQAAAAo"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-19 07:12:44
(23 hours ago)
[Sat Sep 19 17:12:43.803374 2026] [security2:error] [pid 747457] [client 180.247.60.184:3892] [clien ...
show more
[Sat Sep 19 17:12:43.803374 2026] [security2:error] [pid 747457] [client 180.247.60.184:3892] [client 180.247.60.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/"] [unique_id "aq4164XrfBRijvNoqJLejQAAAAA"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-19 06:01:17
(1 day ago)
[Sat Sep 19 16:01:16.736927 2026] [security2:error] [pid 748226] [client 180.247.60.184:27724] [clie ...
show more
[Sat Sep 19 16:01:16.736927 2026] [security2:error] [pid 748226] [client 180.247.60.184:27724] [client 180.247.60.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "balcomberetreat.com.au"] [uri "/"] [unique_id "aq4lLBgAmewdJUSAiMD4ZAAAABE"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-19 05:28:06
(1 day ago)
[Sat Sep 19 15:28:05.513436 2026] [security2:error] [pid 698852] [client 180.247.60.184:4872] [clien ...
show more
[Sat Sep 19 15:28:05.513436 2026] [security2:error] [pid 698852] [client 180.247.60.184:4872] [client 180.247.60.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "angleseaarthouse.com.au"] [uri "/"] [unique_id "aq4dZfg0EtlkrAGAwABUeQAAAAM"]
...
show less
Web App Attack
🇧🇷
alcacerlab
2026-09-18 01:40:35
(2 days ago)
180.247.60.184 - - [17/Sep/2026:22:40:34 -0300] "POST /index.php?option=com_sppagebuilder&task=asset ...
show more
180.247.60.184 - - [17/Sep/2026:22:40:34 -0300] "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/2" 403 712 "-" "python-requests/2.32.5"
...
show less
Bad Web Bot
Web App Attack
🇬🇧
gigatech
2026-09-18 00:35:03
(2 days ago)
Webserver Probing
Web App Attack
🇩🇪
LRob
2026-09-16 19:18:35
(3 days ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-16 19:18 UTC
show less
Bad Web Bot
🇩🇪
Jochen Pretli
2026-09-16 10:59:22
(3 days ago)
connection to honeypot
Email Spam
Port Scan
🇦🇺
paulshipley.com.au
2026-09-16 09:21:09
(3 days ago)
[Wed Sep 16 19:21:09.098410 2026] [security2:error] [pid 340085] [client 180.247.60.184:17681] [clie ...
show more
[Wed Sep 16 19:21:09.098410 2026] [security2:error] [pid 340085] [client 180.247.60.184:17681] [client 180.247.60.184] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.co.nz"] [uri "/"] [unique_id "aqpfhfVJ1paO_Da0fig1UgAAAAE"]
...
show less
Web App Attack
🇩🇪
Jochen Pretli
2026-09-14 23:03:57
(5 days ago)
connection to honeypot
Email Spam
Port Scan