🇺🇸
francelink.fr
2026-11-14 04:27:23
UTC ·
(15 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-14T04:24:24.000Z.
Web App Attack
🇨🇦
1gz
2026-11-14 04:16:47
UTC ·
(15 hours ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/motogp3/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare- ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/motogp3/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
francelink.fr
2026-11-13 22:39:23
UTC ·
(20 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-13T22:37:38.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-11 02:17:48
UTC ·
(3 days ago)
[Wed Nov 11 13:17:47.126383 2026] [security2:error] [pid 323959] [client 8.217.35.234:52111] [client 8.217.35.234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Wed Nov 11 13:17:47.126383 2026] [security2:error] [pid 323959] [client 8.217.35.234:52111] [client 8.217.35.234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/bella-gift-set-d-gs001/tel:1300701197"] [unique_id "avPQSxpAuBeKmwvViHmvdwAAAA4"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-11 02:01:39
UTC ·
(3 days ago)
[Wed Nov 11 13:01:38.117796 2026] [security2:error] [pid 329099] [client 8.217.35.234:34073] [client 8.217.35.234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Wed Nov 11 13:01:38.117796 2026] [security2:error] [pid 329099] [client 8.217.35.234:34073] [client 8.217.35.234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/pamal-flash-drive-product-code-pcu853/tel:1300701197"] [unique_id "avPMglOMI8Ef2h66XphvhQAAAAw"]
...
show less
Web App Attack
🇨🇦
1gz
2026-11-08 01:56:38
UTC ·
(6 days ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/forces/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-W ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/forces/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
francelink.fr
2026-11-04 19:50:26
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-04T19:48:02.000Z.
Web App Attack
2026-11-03 22:23:45
UTC ·
(1 week ago)
apache vulnerability scan
Web App Attack
2026-10-31 22:27:39
UTC ·
(1 week ago)
apache vulnerability scan
Web App Attack
🇺🇸
francelink.fr
2026-10-29 00:15:35
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-28T16:04:12.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-28 05:37:24
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-28T05:34:44.000Z.
Web App Attack
🇫🇮
pavel Karpenko
2026-10-26 04:07:41
UTC ·
(2 weeks ago)
8.217.35.234 - - [26/Oct/2026:07:07:41 +0300] "GET /property_lir.php?id=be.stib&tab=as&lang=de HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=58771 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.1 ...
show more
8.217.35.234 - - [26/Oct/2026:07:07:41 +0300] "GET /property_lir.php?id=be.stib&tab=as&lang=de HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=58771 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1792987661.144
show less
DDoS Attack
🇦🇺
paulshipley.com.au
2026-10-19 11:00:44
UTC ·
(3 weeks ago)
[Mon Oct 19 22:00:44.562673 2026] [security2:error] [pid 111012] [client 8.217.35.234:53512] [client 8.217.35.234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Mon Oct 19 22:00:44.562673 2026] [security2:error] [pid 111012] [client 8.217.35.234:53512] [client 8.217.35.234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "atX4XKlXG6KKN2ugA2371QAAAAM"]
...
show less
Web App Attack
🇺🇦
URAN Publishing Service
2026-08-11 04:51:44
UTC ·
(3 months ago)
[11/Aug/2026:07:51:44 +0300] -- 8.217.35.234 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-08-11 04:33:41
UTC ·
(3 months ago)
[Tue Aug 11 14:33:40.429383 2026] [security2:error] [pid 207865] [client 8.217.35.234:28337] [client 8.217.35.234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Tue Aug 11 14:33:40.429383 2026] [security2:error] [pid 207865] [client 8.217.35.234:28337] [client 8.217.35.234] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shop.levellapromotions.com.au"] [uri "/product/jute-bag-coloured/tel:1300701197"] [unique_id "anqmJBCLggCfI3l6b0r8TgAAAAg"]
...
show less
Web App Attack
