🇺🇸
francelink.fr
2026-11-13 00:26:23
UTC ·
(18 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-12T19:50:05.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-12 02:28:25
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-12T02:27:15.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-11 19:15:30
UTC ·
(2 days ago)
[Thu Nov 12 06:15:29.931540 2026] [security2:error] [pid 425239] [client 8.217.213.125:13295] [client 8.217.213.125] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Thu Nov 12 06:15:29.931540 2026] [security2:error] [pid 425239] [client 8.217.213.125:13295] [client 8.217.213.125] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/robots.txt"] [unique_id "avS-0S2hKYNSZhuFpFQv7AAAAAQ"]
...
show less
Web App Attack
2026-11-11 02:05:29
UTC ·
(2 days ago)
Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=2
Hacking
2026-11-10 22:56:37
UTC ·
(2 days ago)
apache vulnerability scan
Web App Attack
🇨🇦
1gz
2026-11-10 04:28:30
UTC ·
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-T ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
francelink.fr
2026-11-10 04:17:25
UTC ·
(3 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-10T04:16:03.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-06 01:17:31
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-05T20:09:22.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-05 19:20:30
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-05T19:17:38.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-04 19:30:31
UTC ·
(1 week ago)
[Thu Nov 05 06:30:31.330007 2026] [security2:error] [pid 425634] [client 8.217.213.125:42479] [client 8.217.213.125] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Thu Nov 05 06:30:31.330007 2026] [security2:error] [pid 425634] [client 8.217.213.125:42479] [client 8.217.213.125] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/crown-mint-cc051b/tel:1300701197"] [unique_id "auuH16QTRhyVtl_Nu3U6DwAAAAg"]
...
show less
Web App Attack
🇺🇸
Michael DEBILLY
2026-11-03 19:25:30
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-03T19:23:58.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-01 20:16:24
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-01T20:14:28.000Z.
Web App Attack
🇮🇩
hermawan
2026-11-01 01:44:36
UTC ·
(1 week ago)
[Sun Nov 01 08:44:35.998319 2026] [security2:error] [pid 353290:tid 140141307307712] [client 8.217.213.125:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset- ...
show more
[Sun Nov 01 08:44:35.998319 2026] [security2:error] [pid 353290:tid 140141307307712] [client 8.217.213.125:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:user-agent: TokenFoundryBot/1.0 ([email protected] ) request_line = GET /index.php/profil/meteorologi/list-all-categories/4402-ppid/transparansi-kinerja/555563411-laporan-keuangan-stasiun-klimatologi-jawa-timur-semester-ii-tahun-anggaran-2025 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4402-ppid/transparansi-kinerja/555563411-laporan-keuangan-stasiun-klimatologi-jawa-timur-semester-ii-tahun-anggaran-2025"] [unique_id "auaZgz5Ceg_ZYByryi1-5wAAAAY"] [staklim-jatim.bmkg.go.id] [staklim-j
...
show less
Email Spam
Hacking
2026-10-31 22:32:17
UTC ·
(1 week ago)
apache vulnerability scan
Web App Attack
🇺🇸
francelink.fr
2026-10-30 00:49:30
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-30T00:04:49.000Z.
Web App Attack
