|
๐ธ๐ฌ
138.2.76.205
|
|
[Sat Oct 31 02:10:13.800739 2026] [security2:error] [pid 634480] [client 138.2.76.205:63866] [client ...
show more
[Sat Oct 31 02:10:13.800739 2026] [security2:error] [pid 634480] [client 138.2.76.205:63866] [client 138.2.76.205] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "angleseaarthouse.com.au"] [uri "/"] [unique_id "auSzVdR1bOOypSvmDWjqWQAAABg"]
...
show less
|
Web App Attack
|
|
๐ซ๐ฎ
65.21.113.250
|
|
[Sat Oct 31 02:01:54.960441 2026] [security2:error] [pid 672793] [client 65.21.113.250:58256] [clien ...
show more
[Sat Oct 31 02:01:54.960441 2026] [security2:error] [pid 672793] [client 65.21.113.250:58256] [client 65.21.113.250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "auSxYqx9-xTZ0zfW8NoprQAAACA"]
...
show less
|
Web App Attack
|
|
๐บ๐ธ
172.98.33.177
|
|
levellapromotions.com.au:443 172.98.33.177 - - [31/Oct/2026:01:52:58 +1100] "GET /?author=2 HTTP/1.1 ...
show more
levellapromotions.com.au:443 172.98.33.177 - - [31/Oct/2026:01:52:58 +1100] "GET /?author=2 HTTP/1.1" 404 329056 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
๐บ๐ธ
172.98.33.192
|
|
levellapromotions.com.au:443 172.98.33.192 - - [31/Oct/2026:01:52:31 +1100] "GET /?author=1 HTTP/1.1 ...
show more
levellapromotions.com.au:443 172.98.33.192 - - [31/Oct/2026:01:52:31 +1100] "GET /?author=1 HTTP/1.1" 404 324779 "https://wordpress.org/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
๐จ๐ณ
221.0.12.209
|
|
paulshipley.id.au:443 221.0.12.209 - - [31/Oct/2026:01:48:40 +1100] "GET /ipfs/bafkreicyqcbhpicbos7e ...
show more
paulshipley.id.au:443 221.0.12.209 - - [31/Oct/2026:01:48:40 +1100] "GET /ipfs/bafkreicyqcbhpicbos7ev4mrxofwqx6hvvge7pahpta6xuspr44crai5by HTTP/1.1" 404 81445 "-" "Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36"
...
show less
|
Web App Attack
|
|
๐บ๐ธ
52.167.144.25
|
|
[Sat Oct 31 01:47:30.742113 2026] [security2:error] [pid 671268] [client 52.167.144.25:37125] [clien ...
show more
[Sat Oct 31 01:47:30.742113 2026] [security2:error] [pid 671268] [client 52.167.144.25:37125] [client 52.167.144.25] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "auSuAs8F16GDNF8wO1ceXgAAAAQ"]
...
show less
|
Web App Attack
|
|
๐ง๐ท
34.95.172.245
|
|
[Sat Oct 31 01:45:42.041224 2026] [security2:error] [pid 654082] [client 34.95.172.245:51542] [clien ...
show more
[Sat Oct 31 01:45:42.041224 2026] [security2:error] [pid 654082] [client 34.95.172.245:51542] [client 34.95.172.245] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mareeshefford.com"] [uri "/z9x8c7v6b5-debug-trigger-www.mareeshefford.com"] [unique_id "auStlkOxPorWi6RX5Z8fqQAAAAs"], referer: https://www.mareeshefford.com/z9x8c7v6b5-debug-trigger-www.mareeshefford.com
...
show less
|
Web App Attack
|
|
๐บ๐ธ
40.77.167.77
|
|
[Sat Oct 31 01:44:08.570666 2026] [security2:error] [pid 670516] [client 40.77.167.77:28969] [client ...
show more
[Sat Oct 31 01:44:08.570666 2026] [security2:error] [pid 670516] [client 40.77.167.77:28969] [client 40.77.167.77] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "auStOCz6B7PUgVSF1SJUjgAAAAc"]
...
show less
|
Web App Attack
|
|
๐ฐ๐ช
197.248.139.149
|
|
[Sat Oct 31 01:38:05.648320 2026] [security2:error] [pid 664984] [client 197.248.139.149:39712] [cli ...
show more
[Sat Oct 31 01:38:05.648320 2026] [security2:error] [pid 664984] [client 197.248.139.149:39712] [client 197.248.139.149] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shop.levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "auSrzQL5VMHCw7IvGfJwEgAAAAE"]
...
show less
|
Web App Attack
|
|
๐บ๐ธ
34.24.215.139
|
|
[Sat Oct 31 01:23:50.697832 2026] [security2:error] [pid 654096] [client 34.24.215.139:52798] [clien ...
show more
[Sat Oct 31 01:23:50.697832 2026] [security2:error] [pid 654096] [client 34.24.215.139:52798] [client 34.24.215.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/.git/config"] [unique_id "auSodv6vBmLlg-E-UhH4cwAAABk"]
...
show less
|
Web App Attack
|
|
๐ง๐ช
34.79.12.228
|
|
[Sat Oct 31 01:14:56.013328 2026] [security2:error] [pid 654087] [client 34.79.12.228:56262] [client ...
show more
[Sat Oct 31 01:14:56.013328 2026] [security2:error] [pid 654087] [client 34.79.12.228:56262] [client 34.79.12.228] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/.aws/config"] [unique_id "auSmYD7ycnI08tjopEgBFwAAABA"]
...
show less
|
Web App Attack
|
|
๐จ๐ณ
117.14.115.116
|
|
talentaymerch.com.au:443 117.14.115.116 - - [31/Oct/2026:01:12:59 +1100] "GET /ipfs/bafkreicyqcbhpic ...
show more
talentaymerch.com.au:443 117.14.115.116 - - [31/Oct/2026:01:12:59 +1100] "GET /ipfs/bafkreicyqcbhpicbos7ev4mrxofwqx6hvvge7pahpta6xuspr44crai5by HTTP/1.1" 404 94356 "-" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36"
...
show less
|
Web App Attack
|
|
๐บ๐ธ
34.181.172.78
|
|
[Sat Oct 31 00:54:56.808497 2026] [security2:error] [pid 666070] [client 34.181.172.78:39322] [clien ...
show more
[Sat Oct 31 00:54:56.808497 2026] [security2:error] [pid 666070] [client 34.181.172.78:39322] [client 34.181.172.78] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellagiftware.com.au"] [uri "/"] [unique_id "auShsH1bg3h4RFMz4P-acwAAAAA"]
...
show less
|
Web App Attack
|
|
๐ฆ๐ช
20.46.43.126
|
|
paulshipley.id.au:443 20.46.43.126 - - [31/Oct/2026:00:48:41 +1100] "GET /admin.php HTTP/1.1" 404 77 ...
show more
paulshipley.id.au:443 20.46.43.126 - - [31/Oct/2026:00:48:41 +1100] "GET /admin.php HTTP/1.1" 404 77172 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
๐บ๐ธ
34.48.27.192
|
|
[Sat Oct 31 00:45:08.430243 2026] [security2:error] [pid 648532] [client 34.48.27.192:43412] [client ...
show more
[Sat Oct 31 00:45:08.430243 2026] [security2:error] [pid 648532] [client 34.48.27.192:43412] [client 34.48.27.192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mareeshefford.com"] [uri "/.git/config"] [unique_id "auSfZG-w-rCJv9WYXVZAIwAAAAU"]
...
show less
|
Web App Attack
|
|
๐บ๐ธ
132.196.59.85
|
|
paulshipley.id.au:443 132.196.59.85 - - [31/Oct/2026:00:43:37 +1100] "GET /radio.php HTTP/1.1" 404 7 ...
show more
paulshipley.id.au:443 132.196.59.85 - - [31/Oct/2026:00:43:37 +1100] "GET /radio.php HTTP/1.1" 404 77117 "-" "-"
...
show less
|
Web App Attack
|
|
๐ซ๐ฎ
65.21.113.250
|
|
[Sat Oct 31 00:38:42.415766 2026] [security2:error] [pid 661926] [client 65.21.113.250:48742] [clien ...
show more
[Sat Oct 31 00:38:42.415766 2026] [security2:error] [pid 661926] [client 65.21.113.250:48742] [client 65.21.113.250] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "auSd4hPWr4ALjGOCM3h1JgAAAAo"]
...
show less
|
Web App Attack
|
|
๐ธ๐ฌ
138.2.76.205
|
|
[Sat Oct 31 00:30:07.415736 2026] [security2:error] [pid 659161] [client 138.2.76.205:54701] [client ...
show more
[Sat Oct 31 00:30:07.415736 2026] [security2:error] [pid 659161] [client 138.2.76.205:54701] [client 138.2.76.205] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "stkildashule.org.au"] [uri "/"] [unique_id "auSb3zcx-vYYuoPpqVmasAAAAAo"]
...
show less
|
Web App Attack
|
|
๐บ๐ธ
216.244.66.243
|
|
[Sat Oct 31 00:22:59.072979 2026] [security2:error] [pid 656537] [client 216.244.66.243:41316] [clie ...
show more
[Sat Oct 31 00:22:59.072979 2026] [security2:error] [pid 656537] [client 216.244.66.243:41316] [client 216.244.66.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "valueaddedpromotions.com.au"] [uri "/valueaddedpromotionscomau"] [unique_id "auSaM3_XER5l7bc1rwyjiwAAAA4"]
...
show less
|
Web App Attack
|
|
๐จ๐ณ
182.242.168.189
|
|
levellapromotions.com.au:443 182.242.168.189 - - [31/Oct/2026:00:20:53 +1100] "GET /ipfs/bafkreicyqc ...
show more
levellapromotions.com.au:443 182.242.168.189 - - [31/Oct/2026:00:20:53 +1100] "GET /ipfs/bafkreicyqcbhpicbos7ev4mrxofwqx6hvvge7pahpta6xuspr44crai5by HTTP/1.1" 404 136783 "-" "Mozilla/5.067805899 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36"
...
show less
|
Web App Attack
|
|
๐บ๐ธ
40.77.167.74
|
|
[Sat Oct 31 00:06:19.214752 2026] [security2:error] [pid 661927] [client 40.77.167.74:30276] [client ...
show more
[Sat Oct 31 00:06:19.214752 2026] [security2:error] [pid 661927] [client 40.77.167.74:30276] [client 40.77.167.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "auSWS0gotLwguM5dfD8AYgAAAAY"]
...
show less
|
Web App Attack
|
|
๐ฆ๐ช
20.46.43.126
|
|
levellapromotions.com.au:443 20.46.43.126 - - [30/Oct/2026:23:57:30 +1100] "GET /admin.php HTTP/1.1" ...
show more
levellapromotions.com.au:443 20.46.43.126 - - [30/Oct/2026:23:57:30 +1100] "GET /admin.php HTTP/1.1" 404 132478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
๐บ๐ธ
40.77.167.38
|
|
[Fri Oct 30 23:56:50.458853 2026] [security2:error] [pid 643005] [client 40.77.167.38:56279] [client ...
show more
[Fri Oct 30 23:56:50.458853 2026] [security2:error] [pid 643005] [client 40.77.167.38:56279] [client 40.77.167.38] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "auSUEqthpzHQyrhiLByibAAAAAc"]
...
show less
|
Web App Attack
|
|
๐บ๐ธ
216.244.66.241
|
|
[Fri Oct 30 23:42:07.951016 2026] [security2:error] [pid 645702] [client 216.244.66.241:40938] [clie ...
show more
[Fri Oct 30 23:42:07.951016 2026] [security2:error] [pid 645702] [client 216.244.66.241:40938] [client 216.244.66.241] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/robots.txt"] [unique_id "auSQn5RgHiUEpQjlVsLheQAAAAM"]
...
show less
|
Web App Attack
|
|
๐จ๐ณ
117.29.52.213
|
|
stkildashule.org.au:443 117.29.52.213 - - [30/Oct/2026:23:29:33 +1100] "GET /ipfs/bafkreicyqcbhpicbo ...
show more
stkildashule.org.au:443 117.29.52.213 - - [30/Oct/2026:23:29:33 +1100] "GET /ipfs/bafkreicyqcbhpicbos7ev4mrxofwqx6hvvge7pahpta6xuspr44crai5by HTTP/1.1" 404 58817 "-" "Mozilla/5.067805899 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36"
...
show less
|
Web App Attack
|