🇦🇺
paulshipley.com.au
2026-11-11 01:33:51
UTC ·
(3 days ago)
[Wed Nov 11 12:33:51.115962 2026] [security2:error] [pid 323958] [client 8.217.208.167:20650] [client 8.217.208.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Wed Nov 11 12:33:51.115962 2026] [security2:error] [pid 323958] [client 8.217.208.167:20650] [client 8.217.208.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shop.levellapromotions.com.au"] [uri "/product/bronze-seat-plaque-large/tel:1300701197"] [unique_id "avPF_yUJeOuGnX8UmDwZ5QAAAA0"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-11-10 04:42:22
UTC ·
(4 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-10T04:39:36.000Z.
Web App Attack
2026-11-09 19:40:33
UTC ·
(5 days ago)
apache vulnerability scan
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-08 20:05:12
UTC ·
(6 days ago)
[Mon Nov 09 07:05:11.799672 2026] [security2:error] [pid 28298] [client 8.217.208.167:34551] [client 8.217.208.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUE ...
show more
[Mon Nov 09 07:05:11.799672 2026] [security2:error] [pid 28298] [client 8.217.208.167:34551] [client 8.217.208.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/360-degree-torch-d-tch001/"] [unique_id "avDV988e1xXbb9daEiWnQwAAAAM"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-11-08 19:51:25
UTC ·
(6 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-08T19:49:09.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-06 19:41:23
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-06T19:38:27.000Z.
Web App Attack
2026-11-06 04:35:44
UTC ·
(1 week ago)
apache vulnerability scan
Web App Attack
🇫🇷
COMAITE
2026-11-01 19:50:14
UTC ·
(1 week ago)
SQL injection attempt from 8.217.208.167.
Web App Attack
🇺🇸
francelink.fr
2026-11-01 04:30:27
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-01T04:28:05.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-27 09:51:32
UTC ·
(2 weeks ago)
[Tue Oct 27 20:51:30.860171 2026] [security2:error] [pid 240470] [client 8.217.208.167:56893] [client 8.217.208.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Tue Oct 27 20:51:30.860171 2026] [security2:error] [pid 240470] [client 8.217.208.167:56893] [client 8.217.208.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shop.levellapromotions.com.au"] [uri "/product/shopping-bag-2/tel:1300701197"] [unique_id "auB0IiA_Rbc6_rR37pjZMAAAAAI"]
...
show less
Web App Attack
🇫🇮
pavel Karpenko
2026-10-26 04:05:47
UTC ·
(2 weeks ago)
8.217.208.167 - - [26/Oct/2026:07:05:47 +0300] "GET /property_lir.php?id=tr.cdnbt&lang=es HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=34719 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18 ...
show more
8.217.208.167 - - [26/Oct/2026:07:05:47 +0300] "GET /property_lir.php?id=tr.cdnbt&lang=es HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=34719 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1792987547.759
show less
DDoS Attack
🇺🇸
francelink.fr
2026-10-19 11:50:24
UTC ·
(3 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-19T11:48:21.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-08-11 00:33:39
UTC ·
(3 months ago)
[Tue Aug 11 10:33:39.383754 2026] [security2:error] [pid 176760] [client 8.217.208.167:46699] [client 8.217.208.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Tue Aug 11 10:33:39.383754 2026] [security2:error] [pid 176760] [client 8.217.208.167:46699] [client 8.217.208.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product-category/mechandise/kids_stuff/"] [unique_id "anpt43_31gmoXqyTREPHeQAAAAU"]
...
show less
Web App Attack
🇺🇦
URAN Publishing Service
2026-08-10 22:00:42
UTC ·
(3 months ago)
[11/Aug/2026:01:00:42 +0300] -- 8.217.208.167 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇩🇪
filstal.org
2026-07-31 00:09:05
UTC ·
(3 months ago)
Persistent bad bot: repeated automated abuse detected
Bad Web Bot
Web App Attack
