🇦🇺
paulshipley.com.au
2026-06-17 04:19:40
(2 days ago)
[Wed Jun 17 14:19:39.679015 2026] [security2:error] [pid 340726] [client 65.21.113.250:33816] [clien ...
show more
[Wed Jun 17 14:19:39.679015 2026] [security2:error] [pid 340726] [client 65.21.113.250:33816] [client 65.21.113.250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "ajIgWydtxLjhYpSqRlLv-QAAAAQ"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-16 14:35:49
(3 days ago)
[Wed Jun 17 00:35:49.308578 2026] [security2:error] [pid 259330] [client 65.21.113.250:46864] [clien ...
show more
[Wed Jun 17 00:35:49.308578 2026] [security2:error] [pid 259330] [client 65.21.113.250:46864] [client 65.21.113.250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "ajFfRbd6I4FFBxUJFuLKigAAAAE"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-16 00:29:11
(3 days ago)
[Tue Jun 16 10:29:10.729392 2026] [security2:error] [pid 183965] [client 65.21.113.250:36992] [clien ...
show more
[Tue Jun 16 10:29:10.729392 2026] [security2:error] [pid 183965] [client 65.21.113.250:36992] [client 65.21.113.250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "ajCY1grpeNh85r5JyugnHAAAAAc"]
...
show less
Web App Attack
🇦🇹
René Hickersberger
2026-06-15 18:16:30
(3 days ago)
malicious bot detected: violations="ignored-robots-policy"; user_agent="Mozilla/5.0 (compatible; Awa ...
show more
malicious bot detected: violations="ignored-robots-policy"; user_agent="Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)"
show less
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-06-14 22:01:37
(4 days ago)
[Mon Jun 15 08:01:36.138241 2026] [security2:error] [pid 37073] [client 65.21.113.250:48114] [client ...
show more
[Mon Jun 15 08:01:36.138241 2026] [security2:error] [pid 37073] [client 65.21.113.250:48114] [client 65.21.113.250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "ai8kwGD6qqARBfN7fyDmOwAAAAQ"]
...
show less
Web App Attack
🇦🇹
René Hickersberger
2026-06-14 14:32:21
(5 days ago)
malicious bot detected: violations="ignored-robots-policy"; user_agent="Mozilla/5.0 (compatible; Awa ...
show more
malicious bot detected: violations="ignored-robots-policy"; user_agent="Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)"
show less
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-06-13 10:22:01
(6 days ago)
[Sat Jun 13 20:22:00.368787 2026] [security2:error] [pid 778683] [client 65.21.113.250:49274] [clien ...
show more
[Sat Jun 13 20:22:00.368787 2026] [security2:error] [pid 778683] [client 65.21.113.250:49274] [client 65.21.113.250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "ai0vSHTgkmbtBWgM2S_jCAAAAA0"]
...
show less
Web App Attack
🇩🇪
4server
2026-06-12 17:29:34
(1 week ago)
[FriJun1219:29:30.1782532026][security2:error][pid4045478:tid4045612][client65.21.113.250:0]ModSecur ...
show more
[FriJun1219:29:30.1782532026][security2:error][pid4045478:tid4045612][client65.21.113.250:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.eimeko.ch\"][uri\"/robots.txt\"][unique_id\"aixB-hsyOX5JVKt4nmsDfQAAARA\"]
show less
Port Scan
Brute-Force
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-11 08:05:46
(1 week ago)
[Thu Jun 11 18:05:45.118133 2026] [security2:error] [pid 499210] [client 65.21.113.250:33008] [clien ...
show more
[Thu Jun 11 18:05:45.118133 2026] [security2:error] [pid 499210] [client 65.21.113.250:33008] [client 65.21.113.250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "aipsWQFk6D75sIjUhoIVZgAAAA8"]
...
show less
Web App Attack
🇮🇹
Progetto1
2026-06-11 01:35:02
(1 week ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-10 19:36:44
(1 week ago)
(modsecurity) srv103 ModSecurity 65.21.113.250 (FI/Finland/pot31.webmeup.com): 10 in the last 3600 s ...
show more
(modsecurity) srv103 ModSecurity 65.21.113.250 (FI/Finland/pot31.webmeup.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-10 18:10:04
(1 week ago)
[Thu Jun 11 04:10:03.203319 2026] [security2:error] [pid 417043] [client 65.21.113.250:34186] [clien ...
show more
[Thu Jun 11 04:10:03.203319 2026] [security2:error] [pid 417043] [client 65.21.113.250:34186] [client 65.21.113.250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "aimoe3O5EctO72p-eVYAfQAAAAc"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-10 17:07:41
(1 week ago)
[Thu Jun 11 03:07:40.962289 2026] [security2:error] [pid 411278] [client 65.21.113.250:60612] [clien ...
show more
[Thu Jun 11 03:07:40.962289 2026] [security2:error] [pid 411278] [client 65.21.113.250:60612] [client 65.21.113.250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "aimZ3OPaxsHp9A_bQlNIewAAAAA"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-10 11:52:50
(1 week ago)
[Wed Jun 10 21:52:50.462419 2026] [security2:error] [pid 384571] [client 65.21.113.250:57626] [clien ...
show more
[Wed Jun 10 21:52:50.462419 2026] [security2:error] [pid 384571] [client 65.21.113.250:57626] [client 65.21.113.250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "ailQEi_qx9A7ldfzFTltNAAAAAU"]
...
show less
Web App Attack
2026-06-09 21:40:18
(1 week ago)
Malicious activity detected
Hacking
Web App Attack