🇦🇺
paulshipley.com.au
2026-11-08 02:34:54
UTC ·
(12 hours ago)
[Sun Nov 08 13:34:53.506280 2026] [security2:error] [pid 868436] [client 8.217.209.178:36630] [client 8.217.209.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Sun Nov 08 13:34:53.506280 2026] [security2:error] [pid 868436] [client 8.217.209.178:36630] [client 8.217.209.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/snicker-44g-with-sleeve-cc088b1/tel:1300701197"] [unique_id "au_fzYPdPEd0rHWJ9eWE6gAAAAA"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-11-06 19:56:23
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-06T19:55:03.000Z.
Web App Attack
2026-11-06 05:03:27
UTC ·
(2 days ago)
apache vulnerability scan
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-04 19:35:16
UTC ·
(3 days ago)
[Thu Nov 05 06:35:16.243524 2026] [security2:error] [pid 425910] [client 8.217.209.178:62610] [client 8.217.209.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Thu Nov 05 06:35:16.243524 2026] [security2:error] [pid 425910] [client 8.217.209.178:62610] [client 8.217.209.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/small-screw-cap-jar-with-jelly-beans-cc119a/tel:1300701197"] [unique_id "auuI9MLtxqsdanFuN9PIBwAAAAU"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-11-04 19:13:25
UTC ·
(3 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-04T19:11:51.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-30 02:17:23
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-30T02:16:20.000Z.
Web App Attack
🇺🇸
1gz
2026-10-29 07:06:21
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/26-vjecrj-a/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudfl ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/26-vjecrj-a/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
francelink.fr
2026-10-29 05:35:24
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-29T05:32:07.000Z.
Web App Attack
🇦🇺
FireGuard Server
2026-10-27 08:25:11
UTC ·
(1 week ago)
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=443
Port Scan
Hacking
🇫🇮
pavel Karpenko
2026-10-26 04:09:32
UTC ·
(1 week ago)
8.217.209.178 - - [26/Oct/2026:07:09:32 +0300] "GET /property_lir.php?id=no.akr&tab=as&lang=es HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=52594 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.1 ...
show more
8.217.209.178 - - [26/Oct/2026:07:09:32 +0300] "GET /property_lir.php?id=no.akr&tab=as&lang=es HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=52594 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1792987772.827
show less
DDoS Attack
🇺🇸
francelink.fr
2026-10-20 04:47:25
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-20T04:45:52.000Z.
Web App Attack
🇫🇷
Sklurk
2026-10-20 04:14:47
UTC ·
(2 weeks ago)
Web App Attack
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-20 03:28:09
UTC ·
(2 weeks ago)
[Tue Oct 20 14:28:08.755036 2026] [security2:error] [pid 204703] [client 8.217.209.178:34677] [client 8.217.209.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Tue Oct 20 14:28:08.755036 2026] [security2:error] [pid 204703] [client 8.217.209.178:34677] [client 8.217.209.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/broadway-mug-black-pccm05b/"] [unique_id "atbfyLdm5R0b1hKlBdE_BQAAAAU"]
...
show less
Web App Attack
🇭🇰
Anonymous
2026-08-14 00:59:55
UTC ·
(2 months ago)
2026-08-14 00:59:55 warning[4790144]: host [8.217.209.178]: unauthorized access attempted: /
Port Scan
Brute-Force
2026-08-11 02:26:00
UTC ·
(2 months ago)
Botnet flood DDOS activity
Web App Attack
