๐บ๐ธ
144.172.98.114
23 seconds ago
[Sun Oct 18 04:16:21.738349 2026] [security2:error] [pid 823898] [client 144.172.98.114:50454] [clie ...
show more
[Sun Oct 18 04:16:21.738349 2026] [security2:error] [pid 823898] [client 144.172.98.114:50454] [client 144.172.98.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "valueaddedpromotions.com.au"] [uri "/.git/config"] [unique_id "atOtZWT8zVcabZm83Az4DAAAAAI"], referer: http://valueaddedpromotions.com.au/.git/config
...
show less
Web App Attack
๐ซ๐ท
45.154.138.237
57 seconds ago
levellagiftware.com.au:443 45.154.138.237 - - [18/Oct/2026:04:15:45 +1100] "GET /?author=1 HTTP/1.1" ...
show more
levellagiftware.com.au:443 45.154.138.237 - - [18/Oct/2026:04:15:45 +1100] "GET /?author=1 HTTP/1.1" 404 189166 "-" "Mozilla/5.0"
...
show less
Web App Attack
๐บ๐ธ
136.71.115.222
6 minutes ago
[Sun Oct 18 04:10:26.877255 2026] [security2:error] [pid 774210] [client 136.71.115.222:47680] [clie ...
show more
[Sun Oct 18 04:10:26.877255 2026] [security2:error] [pid 774210] [client 136.71.115.222:47680] [client 136.71.115.222] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dlcarterauthor.com"] [uri "/z9x8c7v6b5-debug-trigger-dlcarterauthor.com"] [unique_id "atOsAmGLlMgpS4U8VbS2zAAAAAA"]
...
show less
Web App Attack
๐บ๐ธ
45.131.195.36
13 minutes ago
ccideas.com.au:443 45.131.195.36 - - [18/Oct/2026:04:02:57 +1100] "GET /?author=8 HTTP/1.1" 404 2499 ...
show more
ccideas.com.au:443 45.131.195.36 - - [18/Oct/2026:04:02:57 +1100] "GET /?author=8 HTTP/1.1" 404 249968 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ซ๐ฎ
45.144.234.157
16 minutes ago
[Sun Oct 18 04:00:40.898612 2026] [security2:error] [pid 812625] [client 45.144.234.157:57688] [clie ...
show more
[Sun Oct 18 04:00:40.898612 2026] [security2:error] [pid 812625] [client 45.144.234.157:57688] [client 45.144.234.157] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/media/sourcerer/js/popup.js"] [unique_id "atOpuCI7AOLDJzRNVmEkeAAAAAE"]
...
show less
Web App Attack
๐บ๐ธ
35.222.34.128
21 minutes ago
[Sun Oct 18 03:54:49.408257 2026] [security2:error] [pid 811739] [client 35.222.34.128:52896] [clien ...
show more
[Sun Oct 18 03:54:49.408257 2026] [security2:error] [pid 811739] [client 35.222.34.128:52896] [client 35.222.34.128] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "atOoWUTv9xTyNtgndDryRgAAAAE"]
...
show less
Web App Attack
๐ฆ๐บ
34.40.155.119
29 minutes ago
[Sun Oct 18 03:47:18.199964 2026] [security2:error] [pid 809582] [client 34.40.155.119:49432] [clien ...
show more
[Sun Oct 18 03:47:18.199964 2026] [security2:error] [pid 809582] [client 34.40.155.119:49432] [client 34.40.155.119] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellagiftware.com.au"] [uri "/"] [unique_id "atOmlpWcx0xgKd_J8CXo4gAAAAU"]
...
show less
Web App Attack
๐ณ๐ฑ
34.90.110.195
41 minutes ago
[Sun Oct 18 03:34:56.335165 2026] [security2:error] [pid 812414] [client 34.90.110.195:51124] [clien ...
show more
[Sun Oct 18 03:34:56.335165 2026] [security2:error] [pid 812414] [client 34.90.110.195:51124] [client 34.90.110.195] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shop.levellapromotions.co.nz"] [uri "/"] [unique_id "atOjsHF9kr1akfnenpQHBQAAAAo"]
...
show less
Web App Attack
๐จ๐ณ
110.179.80.75
43 minutes ago
valueaddedpromotions.com.au:443 110.179.80.75 - - [18/Oct/2026:03:33:03 +1100] "GET /ipfs/bafkreicyq ...
show more
valueaddedpromotions.com.au:443 110.179.80.75 - - [18/Oct/2026:03:33:03 +1100] "GET /ipfs/bafkreicyqcbhpicbos7ev4mrxofwqx6hvvge7pahpta6xuspr44crai5by HTTP/1.1" 404 164223 "-" "Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)"
...
show less
Web App Attack
๐ซ๐ฎ
65.21.113.252
45 minutes ago
[Sun Oct 18 03:31:30.019355 2026] [security2:error] [pid 771082] [client 65.21.113.252:43118] [clien ...
show more
[Sun Oct 18 03:31:30.019355 2026] [security2:error] [pid 771082] [client 65.21.113.252:43118] [client 65.21.113.252] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bermanfamily.com.au"] [uri "/robots.txt"] [unique_id "atOi4j78EnstA0LBkbWleAAAAAg"]
...
show less
Web App Attack
๐ณ๐ฑ
34.32.174.75
47 minutes ago
[Sun Oct 18 03:28:45.289720 2026] [security2:error] [pid 811739] [client 34.32.174.75:51092] [client ...
show more
[Sun Oct 18 03:28:45.289720 2026] [security2:error] [pid 811739] [client 34.32.174.75:51092] [client 34.32.174.75] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "iaki.com.au"] [uri "/"] [unique_id "atOiPUTv9xTyNtgndDrxugAAAAE"]
...
show less
Web App Attack
๐ฎ๐ฉ
163.52.135.6
50 minutes ago
[Sun Oct 18 03:26:16.767424 2026] [security2:error] [pid 812415] [client 163.52.135.6:50033] [client ...
show more
[Sun Oct 18 03:26:16.767424 2026] [security2:error] [pid 812415] [client 163.52.135.6:50033] [client 163.52.135.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "atOhqNw4Wv0Lliv_Axf78QAAAAs"]
...
show less
Web App Attack
๐จ๐ณ
111.162.136.38
51 minutes ago
talentaymerch.com.au:443 111.162.136.38 - - [18/Oct/2026:03:25:09 +1100] "GET /ipfs/bafkreicyqcbhpic ...
show more
talentaymerch.com.au:443 111.162.136.38 - - [18/Oct/2026:03:25:09 +1100] "GET /ipfs/bafkreicyqcbhpicbos7ev4mrxofwqx6hvvge7pahpta6xuspr44crai5by HTTP/1.1" 404 94341 "-" "Mozilla/4.066686748 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
...
show less
Web App Attack
๐ซ๐ฎ
95.216.27.15
51 minutes ago
[Sun Oct 18 03:24:57.685172 2026] [security2:error] [pid 812397] [client 95.216.27.15:34156] [client ...
show more
[Sun Oct 18 03:24:57.685172 2026] [security2:error] [pid 812397] [client 95.216.27.15:34156] [client 95.216.27.15] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "support.paulshipley.com.au"] [uri "/"] [unique_id "atOhWRfO8BeBx8nnNJXCqQAAAAY"]
...
show less
Web App Attack
๐บ๐ธ
35.84.117.23
1 hour ago
levellapromotions.com.au:443 35.84.117.23 - - [18/Oct/2026:03:10:32 +1100] "GET /404javascript.js HT ...
show more
levellapromotions.com.au:443 35.84.117.23 - - [18/Oct/2026:03:10:32 +1100] "GET /404javascript.js HTTP/1.1" 404 136534 "http://www.google.com/url/?sa=t" "Mozilla/5.0 (compatible; MSIE 8.0; MSIE 9.0; Windows NT 6.0; Trident/4.0; InfoPath.1; SV1; .NET CLR 3.8.36217; WOW64; en-US)"
...
show less
Web App Attack
๐ฉ๐ช
34.32.43.79
1 hour ago
[Sun Oct 18 03:02:21.546919 2026] [security2:error] [pid 811435] [client 34.32.43.79:37396] [client ...
show more
[Sun Oct 18 03:02:21.546919 2026] [security2:error] [pid 811435] [client 34.32.43.79:37396] [client 34.32.43.79] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/"] [unique_id "atOcDadWv-FcjhP0DnTQ5QAAAAI"]
...
show less
Web App Attack
๐บ๐ธ
34.174.65.206
1 hour ago
[Sun Oct 18 02:47:40.495655 2026] [security2:error] [pid 809590] [client 34.174.65.206:44574] [clien ...
show more
[Sun Oct 18 02:47:40.495655 2026] [security2:error] [pid 809590] [client 34.174.65.206:44574] [client 34.174.65.206] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/"] [unique_id "atOYnOr4NdLX5x6VCs99KgAAABI"]
...
show less
Web App Attack
๐จ๐ณ
175.30.48.179
1 hour ago
valueaddedpromotions.com.au:443 175.30.48.179 - - [18/Oct/2026:02:32:24 +1100] "GET /ipfs/bafkreicyq ...
show more
valueaddedpromotions.com.au:443 175.30.48.179 - - [18/Oct/2026:02:32:24 +1100] "GET /ipfs/bafkreicyqcbhpicbos7ev4mrxofwqx6hvvge7pahpta6xuspr44crai5by HTTP/1.1" 404 164221 "-" "Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134"
...
show less
Web App Attack
๐ป๐ณ
160.250.180.18
1 hour ago
2026-10-18T02:31:08.748711+11:00 ip-172-26-1-7 sshd[814936]: Invalid user user from 160.250.180.18 p ...
show more
2026-10-18T02:31:08.748711+11:00 ip-172-26-1-7 sshd[814936]: Invalid user user from 160.250.180.18 port 45652
2026-10-18T02:31:10.311210+11:00 ip-172-26-1-7 sshd[814938]: Invalid user user from 160.250.180.18 port 45658
2026-10-18T02:31:11.876218+11:00 ip-172-26-1-7 sshd[814940]: Invalid user user from 160.250.180.18 port 45674
...
show less
Brute-Force
SSH
๐ง๐ช
35.240.58.49
1 hour ago
[Sun Oct 18 02:25:24.672052 2026] [security2:error] [pid 807408] [client 35.240.58.49:41196] [client ...
show more
[Sun Oct 18 02:25:24.672052 2026] [security2:error] [pid 807408] [client 35.240.58.49:41196] [client 35.240.58.49] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/.aws/.env"] [unique_id "atOTZO0JzmZRtw8FonbT6gAAAAc"]
...
show less
Web App Attack
๐ฉ๐ช
64.89.163.34
1 hour ago
[Sun Oct 18 02:17:00.368473 2026] [security2:error] [pid 801265] [client 64.89.163.34:56563] [client ...
show more
[Sun Oct 18 02:17:00.368473 2026] [security2:error] [pid 801265] [client 64.89.163.34:56563] [client 64.89.163.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/wp-plain.php"] [unique_id "atORbBtk4nbD0w36fwUHCQAAABQ"], referer: www.google.com
...
show less
Web App Attack
๐จ๐ณ
139.226.161.66
2 hours ago
talentaymerch.com.au:443 139.226.161.66 - - [18/Oct/2026:02:07:18 +1100] "GET /ipfs/bafkreicyqcbhpic ...
show more
talentaymerch.com.au:443 139.226.161.66 - - [18/Oct/2026:02:07:18 +1100] "GET /ipfs/bafkreicyqcbhpicbos7ev4mrxofwqx6hvvge7pahpta6xuspr44crai5by HTTP/1.1" 404 94340 "-" "Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)"
...
show less
Web App Attack
๐ธ๐ฌ
178.128.222.26
2 hours ago
[Sun Oct 18 02:02:22.951647 2026] [security2:error] [pid 758913] [client 178.128.222.26:61788] [clie ...
show more
[Sun Oct 18 02:02:22.951647 2026] [security2:error] [pid 758913] [client 178.128.222.26:61788] [client 178.128.222.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dlcarterauthor.com"] [uri "/"] [unique_id "atON_nfYpNInz8g_HVtoAgAAACc"]
...
show less
Web App Attack
๐บ๐ธ
16.216.88.136
2 hours ago
paulshipley.id.au:443 16.216.88.136 - - [18/Oct/2026:01:57:52 +1100] "GET /wp/ HTTP/1.1" 404 77004 " ...
show more
paulshipley.id.au:443 16.216.88.136 - - [18/Oct/2026:01:57:52 +1100] "GET /wp/ HTTP/1.1" 404 77004 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฉ๐ช
43.228.157.39
2 hours ago
[Sun Oct 18 01:52:17.286668 2026] [security2:error] [pid 806866] [client 43.228.157.39:49251] [clien ...
show more
[Sun Oct 18 01:52:17.286668 2026] [security2:error] [pid 806866] [client 43.228.157.39:49251] [client 43.228.157.39] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.info"] [uri "/wp-plain.php"] [unique_id "atOLoRVeJUdjaou3D3RSCAAAAAQ"], referer: www.google.com
...
show less
Web App Attack