🇦🇺
paulshipley.com.au
2026-08-11 04:03:00
(3 weeks ago)
[Tue Aug 11 14:02:59.210979 2026] [security2:error] [pid 201158] [client 8.217.209.113:59379] [clien ...
show more
[Tue Aug 11 14:02:59.210979 2026] [security2:error] [pid 201158] [client 8.217.209.113:59379] [client 8.217.209.113] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product-category/mechandise/hampers/hampers_make_your_own/add-calendar-or-diary/"] [unique_id "anqe8_7TjlyIMoqI5OliHgAAAAU"]
...
show less
Web App Attack
🇨🇦
1gz
2026-08-11 01:47:50
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/today-begins-the-trial-against-21-people-accused-of-war-crimes-in-kosovo/951436/
UA: AliyunSecBot/Aliyun ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-08-10 23:55:52
(3 weeks ago)
Botnet flood DDOS activity
Web App Attack
🇺🇦
URAN Publishing Service
2026-08-10 21:16:21
(3 weeks ago)
[11/Aug/2026:00:16:21 +0300] -- 8.217.209.113 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇩🇪
filstal.org
2026-08-10 06:39:09
(3 weeks ago)
Persistent bad bot: repeated automated abuse detected
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-07-30 22:09:20
(1 month ago)
[31/Jul/2026:01:09:20 +0300] -- 8.217.209.113 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-07-28 04:12:29
(1 month ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
london2038.com
2026-07-28 00:11:37
(1 month ago)
Too many failed requests
8.217.209.113 - - [27/Jul/2026:22:47:29 +0200] "GET /index.php?title=Specia ...
show more
Too many failed requests
8.217.209.113 - - [27/Jul/2026:22:47:29 +0200] "GET /index.php?title=Special:RecentChangesLinked&userExpLevel=registered&days=3&limit=100&from=20250208205349&target=Category%3ADaily_Quests HTTP/1.1" 404 29610 "-" "AliyunSecBot/Aliyun ([email protected] )"
8.217.209.113 - - [27/Jul/2026:23:32:14 +0200] "GET /index.php?from=20250208175006&hidebots=0&hideminor=1&target=No_Standby_Phase_%28Daily%29&title=Special%3ARecentChangesLinked HTTP/1.1" 404 29332 "-" "AliyunSecBot/Aliyun ([email protected] )"
8.217.209.113 - - [27/Jul/2026:23:38:36 +0200] "GET /index.php?title=Special:RecentChangesLinked&userExpLevel=registered&hidemyself=1&hidebots=0&days=30&from=20250120145314&target=Hey_You HTTP/1.1" 404 29540 "-" "AliyunSecBot/Aliyun ([email protected] )"
8.217.209.113 - - [28/Jul/2026:00:13:30 +0200] "GET /index.php?days=30&from=20250208082952&hidebots=0&hideminor=0&hidemyself=1&target=Hey_You&title=Special%3ARecentChangesLinked HTTP/1.1" 404 28991
...
show less
Web Spam
Bad Web Bot
🇦🇺
oncord
2026-07-27 18:46:48
(1 month ago)
Form spam
Web Spam
🇦🇺
paulshipley.com.au
2026-06-14 12:04:33
(2 months ago)
[Sun Jun 14 22:04:31.964393 2026] [security2:error] [pid 916588] [client 8.217.209.113:39149] [clien ...
show more
[Sun Jun 14 22:04:31.964393 2026] [security2:error] [pid 916588] [client 8.217.209.113:39149] [client 8.217.209.113] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product-category/clothing-and-uniforms/office-attire/knitwear/"] [unique_id "ai6Yz4noiM7KytImuYhKNwAAACA"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-10 18:50:21
(2 months ago)
[Thu Jun 11 04:50:20.185684 2026] [security2:error] [pid 417409] [client 8.217.209.113:43542] [clien ...
show more
[Thu Jun 11 04:50:20.185684 2026] [security2:error] [pid 417409] [client 8.217.209.113:43542] [client 8.217.209.113] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/long-stainless-steel-cocktail-muddler-pc-pch810/"] [unique_id "aimx7DZ5FQek92r1qiIaTAAAAAA"]
...
show less
Web App Attack
🇩🇪
filstal.org
2026-06-07 02:09:04
(2 months ago)
Persistent bad bot: repeated automated abuse detected
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2026-06-06 10:25:08
(2 months ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇩🇪
filstal.org
2026-06-04 20:00:06
(2 months ago)
Unauthorized web crawling by known aggressive crawler or data harvesting bot detected by Fail2Ban
Bad Web Bot
🇩🇪
filstal.org
2026-06-03 16:32:09
(3 months ago)
Unauthorized web crawling by known aggressive crawler or data harvesting bot detected by Fail2Ban
Bad Web Bot
