🇦🇺
paulshipley.com.au
2026-11-11 02:10:10
UTC ·
(16 hours ago)
[Wed Nov 11 13:10:09.744952 2026] [security2:error] [pid 329071] [client 8.217.214.152:29946] [client 8.217.214.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Wed Nov 11 13:10:09.744952 2026] [security2:error] [pid 329071] [client 8.217.214.152:29946] [client 8.217.214.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/womens-short-sleeve-sofia-knit-top-sh-m8840/"] [unique_id "avPOgfl8fq5cU0bKQOyXGgAAABM"]
...
show less
Web App Attack
🇨🇭
4server
2026-11-10 19:19:12
UTC ·
(23 hours ago)
[TueNov1020:19:06.3593662026][security2:error][pid534595:tid534755][client8.217.214.152:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLO ...
show more
[TueNov1020:19:06.3593662026][security2:error][pid534595:tid534755][client8.217.214.152:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.fondazionemontgrand.ch\"][uri\"/robots.txt\"][unique_id\"avNuKm4ReqI9aHG4ModgvAAAARY\"]
show less
Hacking
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-06 23:16:17
UTC ·
(4 days ago)
[Sat Nov 07 10:16:16.721389 2026] [security2:error] [pid 721872] [client 8.217.214.152:35080] [client 8.217.214.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Sat Nov 07 10:16:16.721389 2026] [security2:error] [pid 721872] [client 8.217.214.152:35080] [client 8.217.214.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shop.levellapromotions.com.au"] [uri "/product/baseball-cotton-cap-royal-blue/tel:1300701197"] [unique_id "au5fwECL0KbewJkO_Ru15AAAAAc"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-05 19:54:14
UTC ·
(5 days ago)
[Fri Nov 06 06:54:13.956201 2026] [security2:error] [pid 569671] [client 8.217.214.152:57609] [client 8.217.214.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Fri Nov 06 06:54:13.956201 2026] [security2:error] [pid 569671] [client 8.217.214.152:57609] [client 8.217.214.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/rolled-down-acrylic-beanie-hw-4263/"] [unique_id "auze5W9XyUcV8iHB7qZF0QAAAAA"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-04 04:54:39
UTC ·
(1 week ago)
[Wed Nov 04 15:54:38.617625 2026] [security2:error] [pid 341971] [client 8.217.214.152:44635] [client 8.217.214.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Wed Nov 04 15:54:38.617625 2026] [security2:error] [pid 341971] [client 8.217.214.152:44635] [client 8.217.214.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/80mm-carabiner-h-k350/"] [unique_id "auq6jlPPqLjngme9LLGF3AAAAA4"]
...
show less
Web App Attack
🇫🇷
COMAITE
2026-11-04 04:20:58
UTC ·
(1 week ago)
SQL injection attempt from 8.217.214.152.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-01 19:37:23
UTC ·
(1 week ago)
[Mon Nov 02 06:37:23.200521 2026] [security2:error] [pid 14722] [client 8.217.214.152:39246] [client 8.217.214.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUE ...
show more
[Mon Nov 02 06:37:23.200521 2026] [security2:error] [pid 14722] [client 8.217.214.152:39246] [client 8.217.214.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/kids-close-front-fleecy-hoodie-sh-fl09k/tel:1300701197"] [unique_id "aueU81gff_-mOpXEEMkHqAAAAAE"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-10-30 19:19:26
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-30T19:17:25.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-27 10:07:39
UTC ·
(2 weeks ago)
[Tue Oct 27 21:07:39.328919 2026] [security2:error] [pid 239879] [client 8.217.214.152:10864] [client 8.217.214.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Tue Oct 27 21:07:39.328919 2026] [security2:error] [pid 239879] [client 8.217.214.152:10864] [client 8.217.214.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shop.levellapromotions.com.au"] [uri "/product/small-chicken-bags-2/tel:1300701197"] [unique_id "auB367vgHBl6DWLtJS4UPAAAAAA"]
...
show less
Web App Attack
🇫🇮
pavel Karpenko
2026-10-26 04:12:28
UTC ·
(2 weeks ago)
8.217.214.152 - - [26/Oct/2026:07:12:28 +0300] "GET /property_lir.php?id=it.rve&tab=pa&lang=fr HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=30114 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.1 ...
show more
8.217.214.152 - - [26/Oct/2026:07:12:28 +0300] "GET /property_lir.php?id=it.rve&tab=pa&lang=fr HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=30114 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1792987948.483
show less
DDoS Attack
🇺🇸
1gz
2026-10-26 04:05:39
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/alqi-papa/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflar ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/alqi-papa/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇦
URAN Publishing Service
2026-08-10 20:04:05
UTC ·
(3 months ago)
[10/Aug/2026:23:04:04 +0300] -- 8.217.214.152 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-07-30 14:59:16
UTC ·
(3 months ago)
[30/Jul/2026:17:59:16 +0300] -- 8.217.214.152 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-07-28 01:47:06
UTC ·
(3 months ago)
Web App Attack
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-05 16:50:06
UTC ·
(5 months ago)
[Sat Jun 06 02:50:05.396274 2026] [security2:error] [pid 671470] [client 8.217.214.152:44271] [client 8.217.214.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Sat Jun 06 02:50:05.396274 2026] [security2:error] [pid 671470] [client 8.217.214.152:44271] [client 8.217.214.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/robots.txt"] [unique_id "aiL-Pb_L6g0Px6Wajgoq8gAAAAU"]
...
show less
Web App Attack
