🇺🇸
francelink.fr
2026-11-15 02:46:26
UTC ·
(11 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-15T02:45:52.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-11 19:25:41
UTC ·
(3 days ago)
[Thu Nov 12 06:25:40.683571 2026] [security2:error] [pid 425427] [client 8.217.214.173:6156] [client 8.217.214.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUE ...
show more
[Thu Nov 12 06:25:40.683571 2026] [security2:error] [pid 425427] [client 8.217.214.173:6156] [client 8.217.214.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/clearance-check-stock-micro-fibre-towel-h-h707/"] [unique_id "avTBNFIcCoa_yDNp86K2TAAAAAY"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-11 02:25:06
UTC ·
(4 days ago)
[Wed Nov 11 13:25:05.593665 2026] [security2:error] [pid 323959] [client 8.217.214.173:42127] [client 8.217.214.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Wed Nov 11 13:25:05.593665 2026] [security2:error] [pid 323959] [client 8.217.214.173:42127] [client 8.217.214.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/superior-gift-set-matrix-power-bank-napier-pen-and-swivel-flash-drive-ll8277/"] [unique_id "avPSARpAuBeKmwvViHmvewAAAA4"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-11-10 22:57:24
UTC ·
(4 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-10T22:53:38.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-09 19:38:23
UTC ·
(5 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-09T19:36:31.000Z.
Web App Attack
🇨🇦
1gz
2026-11-07 02:41:04
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/mak-up/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-W ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/mak-up/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-11-06 04:47:21
UTC ·
(1 week ago)
apache vulnerability scan
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-02 23:23:30
UTC ·
(1 week ago)
[Tue Nov 03 10:23:29.393012 2026] [security2:error] [pid 174810] [client 8.217.214.173:51283] [client 8.217.214.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Tue Nov 03 10:23:29.393012 2026] [security2:error] [pid 174810] [client 8.217.214.173:51283] [client 8.217.214.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product-category/mechandise/badges_lapelpins_nametags/lapel_pins/tel:1300701197"] [unique_id "aukbcQf5ypk6CyXR6Kk_pgAAAAA"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-11-01 20:34:28
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-01T20:31:37.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-01 19:54:31
UTC ·
(1 week ago)
[Mon Nov 02 06:54:30.709622 2026] [security2:error] [pid 23587] [client 8.217.214.173:17552] [client 8.217.214.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUE ...
show more
[Mon Nov 02 06:54:30.709622 2026] [security2:error] [pid 23587] [client 8.217.214.173:17552] [client 8.217.214.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/snood-cable-knit-beanie-hw-2623/tel:1300701197"] [unique_id "aueY9oQbcO6V6I7EY7y9IAAAAAQ"]
...
show less
Web App Attack
2026-10-31 22:27:38
UTC ·
(2 weeks ago)
apache vulnerability scan
Web App Attack
🇺🇸
francelink.fr
2026-10-29 10:42:26
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-29T10:40:03.000Z.
Web App Attack
🇫🇮
pavel Karpenko
2026-10-26 04:05:50
UTC ·
(2 weeks ago)
8.217.214.173 - - [26/Oct/2026:07:05:50 +0300] "GET /property_lir.php?id=se.avanza&lang=ru HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=14359 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.1 ...
show more
8.217.214.173 - - [26/Oct/2026:07:05:50 +0300] "GET /property_lir.php?id=se.avanza&lang=ru HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=14359 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1792987550.989
show less
DDoS Attack
🇺🇸
1gz
2026-10-20 04:30:04
UTC ·
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /teknologji/oneplus-3-apo-iphone-6s-cili-eshte-me-i-shpejte-video/249392/
UA: TokenFoundryBot/1.0 ([email protected] )
This repor ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /teknologji/oneplus-3-apo-iphone-6s-cili-eshte-me-i-shpejte-video/249392/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-10-20 03:33:26
UTC ·
(3 weeks ago)
[Tue Oct 20 14:33:26.103546 2026] [security2:error] [pid 204257] [client 8.217.214.173:52146] [client 8.217.214.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Tue Oct 20 14:33:26.103546 2026] [security2:error] [pid 204257] [client 8.217.214.173:52146] [client 8.217.214.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/flip-ruler-tc-100422/"] [unique_id "atbhBk2hurwZOEXWwaEzlQAAAAA"]
...
show less
Web App Attack
