2026-11-11 20:05:40
UTC ·
(2 days ago)
Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=2
Hacking
🇺🇸
francelink.fr
2026-11-09 01:11:29
UTC ·
(5 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-08T22:56:31.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-08 19:58:23
UTC ·
(5 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-08T19:56:19.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-08 02:27:00
UTC ·
(6 days ago)
[Sun Nov 08 13:26:59.162006 2026] [security2:error] [pid 868439] [client 8.217.213.68:13869] [client 8.217.213.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Sun Nov 08 13:26:59.162006 2026] [security2:error] [pid 868439] [client 8.217.213.68:13869] [client 8.217.213.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/tyvek-event-wrist-band-tc-110890/tel:1300701197"] [unique_id "au_d8wD9qAE1C7pfDW-3eQAAAAg"]
...
show less
Web App Attack
🇨🇦
1gz
2026-11-08 02:02:31
UTC ·
(6 days ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-T ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-11-06 19:54:40
UTC ·
(1 week ago)
[Sat Nov 07 06:54:39.696042 2026] [security2:error] [pid 700654] [client 8.217.213.68:22785] [client 8.217.213.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Sat Nov 07 06:54:39.696042 2026] [security2:error] [pid 700654] [client 8.217.213.68:22785] [client 8.217.213.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/unisex-trudry-biomation-segmented-ss-safetey-poloedry-s-sw73/tel:1300701197"] [unique_id "au4wf0pDlormEAC4t3qTzQAAAAE"]
...
show less
Web App Attack
🇨🇦
1gz
2026-11-06 19:26:50
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /showbiz/bon-bon-e-era-istrefit-dgjohet-n-santiago-bernabeu-video/259843/
UA: TokenFoundryBot/1.0 ([email protected] )
This repor ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /showbiz/bon-bon-e-era-istrefit-dgjohet-n-santiago-bernabeu-video/259843/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
francelink.fr
2026-11-06 05:20:21
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-06T05:17:06.000Z.
Web App Attack
2026-11-04 23:00:22
UTC ·
(1 week ago)
Network service scanning detected by FortiGate; source quarantined.
Port Scan
2026-10-31 23:30:15
UTC ·
(1 week ago)
apache vulnerability scan
Web App Attack
🇺🇸
francelink.fr
2026-10-29 05:43:24
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-29T05:40:29.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-27 14:29:23
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-27T11:33:51.000Z.
Web App Attack
🇫🇮
pavel Karpenko
2026-10-27 09:23:00
UTC ·
(2 weeks ago)
8.217.213.68 - - [27/Oct/2026:12:23:00 +0300] "GET /property_org.php?org_id=ORG-TG8-RIPE&lang=es HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=16304 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195 ...
show more
8.217.213.68 - - [27/Oct/2026:12:23:00 +0300] "GET /property_org.php?org_id=ORG-TG8-RIPE&lang=es HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=16304 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1793092980.761
show less
DDoS Attack
2026-10-20 05:21:29
UTC ·
(3 weeks ago)
apache vulnerability scan
Web App Attack
🇺🇸
1gz
2026-10-20 04:51:01
UTC ·
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/from-private-business-to-leading-state-owned-companies-who-is-ukraines-new-prime-minister/930691/
UA: TokenFoundryBot/1.0 (TFBot ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/from-private-business-to-leading-state-owned-companies-who-is-ukraines-new-prime-minister/930691/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
