2026-06-22 20:06:35
(4 days ago)
Unauthorized access (80/tcp/http)
Port Scan
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-22 12:02:23
(4 days ago)
[Mon Jun 22 22:02:22.858340 2026] [security2:error] [pid 108812] [client 42.83.147.54:12711] [client ...
show more
[Mon Jun 22 22:02:22.858340 2026] [security2:error] [pid 108812] [client 42.83.147.54:12711] [client 42.83.147.54] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "ajkkTtKQ19pNUu4WIgw7lAAAAAg"]
...
show less
Web App Attack
2026-06-22 09:21:28
(4 days ago)
FortiWeb WAF: 38 attacks detected. Threat Score: 10600. Types: Client Management(19), GEO IP(19). Or ...
show more
FortiWeb WAF: 38 attacks detected. Threat Score: 10600. Types: Client Management(19), GEO IP(19). Origin: China.
show less
Web App Attack
🇬🇧
poundawebsiteltd
2026-06-22 00:46:36
(5 days ago)
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 42.83.147.54 - - [22/Jun/2026:01 ...
show more
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 42.83.147.54 - - [22/Jun/2026:01:46:34 +0100] GET / HTTP/1.1 403 2611 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-21 23:51:55
(5 days ago)
[Mon Jun 22 09:51:53.982859 2026] [security2:error] [pid 44369] [client 42.83.147.54:12804] [client ...
show more
[Mon Jun 22 09:51:53.982859 2026] [security2:error] [pid 44369] [client 42.83.147.54:12804] [client 42.83.147.54] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "whoson2day.com"] [uri "/"] [unique_id "ajh5Gchub-SiNPOm85eemAAAAAs"]
...
show less
Web App Attack
2026-06-21 06:40:14
(5 days ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇫🇷
masterguru
2026-06-21 04:32:19
(5 days ago)
Request content type is not allowed by policy. Match of "within %{tx.allowed_request_content_type}" ...
show more
Request content type is not allowed by policy. Match of "within %{tx.allowed_request_content_type}" against "TX:content_type" required. (920420-195)
show less
Hacking
Web App Attack
🇺🇸
sandra361
2026-06-21 03:27:45
(5 days ago)
Port scan detected: 9 attempts across 2 ports (443,80). | Evidence: GHOST_SCAN: IN=enp1s0 SRC=42.83. ...
show more
Port scan detected: 9 attempts across 2 ports (443,80). | Evidence: GHOST_SCAN: IN=enp1s0 SRC=42.83.147.54 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=12954 DF PROTO=TCP SPT=12658 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
show less
Port Scan
🇺🇸
sandap1
2026-06-20 23:55:00
(6 days ago)
Blocked by os-abuseipdb; 10 hits, proto=tcp, ports=443,80,src_ip=42.83.147.54
Port Scan
Hacking
🇺🇸
JustMeHere
2026-06-20 11:30:39
(6 days ago)
[Sat Jun 20 07:30:35.106676 2026] [security2:error] [pid 165899:tid 165933] [client 42.83.147.54:132 ...
show more
[Sat Jun 20 07:30:35.106676 2026] [security2:error] [pid 165899:tid 165933] [client 42.83.147.54:13212] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yorknation.com"] [uri "/"] [unique_id "ajZ528qG5AJQVM2gz58upAAAAMY"]
...
show less
Web App Attack
2026-06-20 09:22:54
(6 days ago)
FortiWeb WAF: 38 attacks detected. Threat Score: 8200. Types: Client Management(19), GEO IP(19). Ori ...
show more
FortiWeb WAF: 38 attacks detected. Threat Score: 8200. Types: Client Management(19), GEO IP(19). Origin: China.
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-20 08:07:36
(6 days ago)
[Sat Jun 20 18:07:35.571450 2026] [security2:error] [pid 746553] [client 42.83.147.54:12541] [client ...
show more
[Sat Jun 20 18:07:35.571450 2026] [security2:error] [pid 746553] [client 42.83.147.54:12541] [client 42.83.147.54] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mareeshefford.com"] [uri "/"] [unique_id "ajZKR78yzf4GD711De6WsAAAAAg"]
...
show less
Web App Attack
🇦🇺
FireGuard Server
2026-06-20 06:10:05
(6 days ago)
Blocked by OPNsense firewall; 10 hits, proto=tcp, ports=443
Port Scan
Hacking
🇺🇸
MPL
2026-06-20 05:29:46
(6 days ago)
tcp ports: 80,443 (14 or more attempts)
Port Scan
🇨🇿
ddw
2026-06-19 20:23:14
(1 week ago)
ModSecurity detection - Rules: 920420(Request content type is not allowed by policy)
Web App Attack