๐ธ๐ฌ
213.35.111.231
5 hours ago
[Sun Nov 01 21:13:48.483742 2026] [security2:error] [pid 863603] [client 213.35.111.231:60066] [clie ...
show more
[Sun Nov 01 21:13:48.483742 2026] [security2:error] [pid 863603] [client 213.35.111.231:60066] [client 213.35.111.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "angleseaarthouse.com.au"] [uri "/"] [unique_id "aucQ3Bxlj7LqykgM1PziggAAAAo"]
...
show less
Web App Attack
๐บ๐ธ
54.173.38.195
5 hours ago
[Sun Nov 01 21:10:44.588428 2026] [security2:error] [pid 901131] [client 54.173.38.195:59948] [clien ...
show more
[Sun Nov 01 21:10:44.588428 2026] [security2:error] [pid 901131] [client 54.173.38.195:59948] [client 54.173.38.195] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "valueaddedpromotions.com.au"] [uri "/"] [unique_id "aucQJPEeYtqgxB2H8eg2zgAAAAE"]
...
show less
Web App Attack
๐ฎ๐ฉ
103.235.74.94
5 hours ago
levellapromotions.com.au:443 103.235.74.94 - - [01/Nov/2026:21:09:05 +1100] "GET /wp-admin/css/ HTTP ...
show more
levellapromotions.com.au:443 103.235.74.94 - - [01/Nov/2026:21:09:05 +1100] "GET /wp-admin/css/ HTTP/1.1" 403 782 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
levellapromotions.com.au:443 103.235.74.94 - - [01/Nov/2026:21:09:05 +1100] "GET /wp-admin/images/ HTTP/1.1" 403 782 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
levellapromotions.com.au:443 103.235.74.94 - - [01/Nov/2026:21:09:06 +1100] "GET /wp-admin/includes/ HTTP/1.1" 403 782 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
levellapromotions.com.au:443 103.235.74.94 - - [01/Nov/2026:21:09:07 +1100] "GET /wp-admin/js/ HTTP/1.1" 403 782 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
levellapromotions.com.au:443 103.235.74.94 - - [01/Nov/2026:21:09:08 +1100] "GET /wp-admin/maint/ HTTP/1.1" 403 782 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
levellapromotions.com.au:443 103.235.74.94 - - [01/Nov/2026:21:09:16 +1100] "GET /wp-content/languages/ HTTP/1.1" 404 132283 "-" "Mozilla/5.0 (compatible; WP-Saf
...
show less
Web App Attack
๐ฆ๐ช
20.46.43.126
5 hours ago
mareeshefford.com:443 20.46.43.126 - - [01/Nov/2026:21:07:44 +1100] "GET /admin.php HTTP/1.1" 404 47 ...
show more
mareeshefford.com:443 20.46.43.126 - - [01/Nov/2026:21:07:44 +1100] "GET /admin.php HTTP/1.1" 404 47062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐จ๐ณ
58.19.81.154
5 hours ago
paulshipley.id.au:443 58.19.81.154 - - [01/Nov/2026:21:07:02 +1100] "GET /ipfs/bafkreicyqcbhpicbos7e ...
show more
paulshipley.id.au:443 58.19.81.154 - - [01/Nov/2026:21:07:02 +1100] "GET /ipfs/bafkreicyqcbhpicbos7ev4mrxofwqx6hvvge7pahpta6xuspr44crai5by HTTP/1.1" 404 81435 "-" "Mozilla/4.047745454 Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)"
...
show less
Web App Attack
๐บ๐ธ
35.187.132.128
5 hours ago
[Sun Nov 01 21:06:21.400104 2026] [security2:error] [pid 910500] [client 35.187.132.128:40336] [clie ...
show more
[Sun Nov 01 21:06:21.400104 2026] [security2:error] [pid 910500] [client 35.187.132.128:40336] [client 35.187.132.128] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "aucPHRlOtUuAHyx9EytYMAAAAA8"], referer: http://www.levellapromotions.com.au
...
show less
Web App Attack
๐บ๐ธ
35.187.132.133
5 hours ago
[Sun Nov 01 21:06:20.136557 2026] [security2:error] [pid 910048] [client 35.187.132.133:50707] [clie ...
show more
[Sun Nov 01 21:06:20.136557 2026] [security2:error] [pid 910048] [client 35.187.132.133:50707] [client 35.187.132.133] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "aucPHGieqWIxjbgwqL6hEgAAAAQ"], referer: http://www.levellapromotions.com.au
...
show less
Web App Attack
๐บ๐ธ
35.187.132.134
5 hours ago
[Sun Nov 01 21:06:18.199353 2026] [security2:error] [pid 908706] [client 35.187.132.134:46316] [clie ...
show more
[Sun Nov 01 21:06:18.199353 2026] [security2:error] [pid 908706] [client 35.187.132.134:46316] [client 35.187.132.134] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "aucPGqWJoRyqIKSkzykY_wAAAAc"], referer: http://levellapromotions.com.au
...
show less
Web App Attack
๐ง๐ช
34.76.27.30
5 hours ago
[Sun Nov 01 21:04:52.721488 2026] [security2:error] [pid 863603] [client 34.76.27.30:55686] [client ...
show more
[Sun Nov 01 21:04:52.721488 2026] [security2:error] [pid 863603] [client 34.76.27.30:55686] [client 34.76.27.30] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dlcarterauthor.com"] [uri "/.aws/.env"] [unique_id "aucOxBxlj7LqykgM1PziegAAAAo"]
...
show less
Web App Attack
๐จ๐ณ
124.31.104.240
5 hours ago
levellapromotions.com.au:443 124.31.104.240 - - [01/Nov/2026:21:04:21 +1100] "GET /ipfs/bafkreicyqcb ...
show more
levellapromotions.com.au:443 124.31.104.240 - - [01/Nov/2026:21:04:21 +1100] "GET /ipfs/bafkreicyqcbhpicbos7ev4mrxofwqx6hvvge7pahpta6xuspr44crai5by HTTP/1.1" 404 136626 "-" "Mozilla/4.074482891 Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0"
...
show less
Web App Attack
๐ฟ๐ฆ
102.32.104.71
5 hours ago
support.paulshipley.com.au:443 102.32.104.71 - - [01/Nov/2026:21:01:49 +1100] "POST /wp/wp-login.php ...
show more
support.paulshipley.com.au:443 102.32.104.71 - - [01/Nov/2026:21:01:49 +1100] "POST /wp/wp-login.php HTTP/1.1" 404 34501 "https://support.paulshipley.com.au/wp/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:148.0) Gecko/20100101 Firefox/148.0"
...
show less
Web App Attack
๐บ๐ธ
157.22.75.54
5 hours ago
[Sun Nov 01 20:42:56.683665 2026] [security2:error] [pid 908519] [client 157.22.75.54:46415] [client ...
show more
[Sun Nov 01 20:42:56.683665 2026] [security2:error] [pid 908519] [client 157.22.75.54:46415] [client 157.22.75.54] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "aucJoJK0b9N5tBgwvLMVOAAAAA4"], referer: https://levellapromotions.com.au/the-gist-of-gifts-promotional-products-ideas-that-will-surely-work/
...
show less
Web App Attack
๐บ๐ธ
170.168.97.219
5 hours ago
[Sun Nov 01 20:42:55.577919 2026] [security2:error] [pid 908516] [client 170.168.97.219:9695] [clien ...
show more
[Sun Nov 01 20:42:55.577919 2026] [security2:error] [pid 908516] [client 170.168.97.219:9695] [client 170.168.97.219] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "aucJn4VPK1j4sFgcR-22gQAAAAk"], referer: https://levellapromotions.com.au/the-gist-of-gifts-promotional-products-ideas-that-will-surely-work/
...
show less
Web App Attack
๐บ๐ธ
191.96.150.27
5 hours ago
[Sun Nov 01 20:42:54.454628 2026] [security2:error] [pid 908522] [client 191.96.150.27:13816] [clien ...
show more
[Sun Nov 01 20:42:54.454628 2026] [security2:error] [pid 908522] [client 191.96.150.27:13816] [client 191.96.150.27] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "aucJnnLSn8_8rlBx_UQtCgAAAAI"], referer: https://levellapromotions.com.au/the-gist-of-gifts-promotional-products-ideas-that-will-surely-work/
...
show less
Web App Attack
๐บ๐ธ
155.212.109.122
5 hours ago
[Sun Nov 01 20:42:53.238740 2026] [security2:error] [pid 907917] [client 155.212.109.122:10031] [cli ...
show more
[Sun Nov 01 20:42:53.238740 2026] [security2:error] [pid 907917] [client 155.212.109.122:10031] [client 155.212.109.122] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "aucJncGEOOqJEskR5i9vjQAAAAo"], referer: https://levellapromotions.com.au/the-gist-of-gifts-promotional-products-ideas-that-will-surely-work/
...
show less
Web App Attack
๐ฒ๐พ
37.0.12.233
5 hours ago
iaki.com.au:443 37.0.12.233 - - [01/Nov/2026:20:37:13 +1100] "GET /?author=1 HTTP/1.1" 404 778 "-" " ...
show more
iaki.com.au:443 37.0.12.233 - - [01/Nov/2026:20:37:13 +1100] "GET /?author=1 HTTP/1.1" 404 778 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฎ๐ณ
49.43.154.209
6 hours ago
support.paulshipley.com.au:443 49.43.154.209 - - [01/Nov/2026:20:25:23 +1100] "GET /wp/wp-login.php ...
show more
support.paulshipley.com.au:443 49.43.154.209 - - [01/Nov/2026:20:25:23 +1100] "GET /wp/wp-login.php HTTP/1.1" 404 27459 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/155.0.8059.37 Mobile/15E148 Safari/604.1"
...
show less
Web App Attack
๐ง๐ฉ
103.167.209.202
6 hours ago
support.paulshipley.com.au:443 103.167.209.202 - - [01/Nov/2026:20:25:16 +1100] "POST /wp/wp-login.p ...
show more
support.paulshipley.com.au:443 103.167.209.202 - - [01/Nov/2026:20:25:16 +1100] "POST /wp/wp-login.php HTTP/1.1" 404 34500 "https://support.paulshipley.com.au/wp/wp-login.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/155.0.8059.37 Mobile/15E148 Safari/604.1"
...
show less
Web App Attack
๐ณ๐ฑ
195.234.109.176
6 hours ago
levellapromotions.com.au:443 195.234.109.176 - - [01/Nov/2026:20:19:07 +1100] "GET /wp-content/plugi ...
show more
levellapromotions.com.au:443 195.234.109.176 - - [01/Nov/2026:20:19:07 +1100] "GET /wp-content/plugins/wp-fastest-cache-premium/pro/images/blank.gif HTTP/1.1" 404 136359 "-" "Photon/1.0"
...
show less
Web App Attack
๐บ๐ธ
216.244.66.241
6 hours ago
[Sun Nov 01 20:18:56.122494 2026] [security2:error] [pid 902684] [client 216.244.66.241:40636] [clie ...
show more
[Sun Nov 01 20:18:56.122494 2026] [security2:error] [pid 902684] [client 216.244.66.241:40636] [client 216.244.66.241] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/robots.txt"] [unique_id "aucEAMR0WONJ9QRkdoT9UAAAAAM"]
...
show less
Web App Attack
๐ซ๐ฎ
65.21.164.231
6 hours ago
[Sun Nov 01 20:18:27.995000 2026] [security2:error] [pid 887888] [client 65.21.164.231:57088] [clien ...
show more
[Sun Nov 01 20:18:27.995000 2026] [security2:error] [pid 887888] [client 65.21.164.231:57088] [client 65.21.164.231] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/robots.txt"] [unique_id "aucD4-yVq2e-ZLJ3TuBKKgAAAAI"]
...
show less
Web App Attack
๐ฉ๐ช
201.79.91.54
6 hours ago
[Sun Nov 01 20:14:39.983998 2026] [security2:error] [pid 903673] [client 201.79.91.54:51172] [client ...
show more
[Sun Nov 01 20:14:39.983998 2026] [security2:error] [pid 903673] [client 201.79.91.54:51172] [client 201.79.91.54] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "aucC_9lEErgPySvOQJkXJQAAAAE"]
...
show less
Web App Attack
๐ณ๐ฑ
178.162.168.22
6 hours ago
[Sun Nov 01 20:13:05.297683 2026] [security2:error] [pid 887918] [client 178.162.168.22:14058] [clie ...
show more
[Sun Nov 01 20:13:05.297683 2026] [security2:error] [pid 887918] [client 178.162.168.22:14058] [client 178.162.168.22] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "embodiment.mareeshefford.com"] [uri "/.env"] [unique_id "aucCoREXWsqGNvxg04bs4QAAAAU"]
...
show less
Web App Attack
๐ซ๐ท
104.28.196.58
6 hours ago
[Sun Nov 01 20:11:00.825276 2026] [security2:error] [pid 857423] [client 104.28.196.58:13598] [clien ...
show more
[Sun Nov 01 20:11:00.825276 2026] [security2:error] [pid 857423] [client 104.28.196.58:13598] [client 104.28.196.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "talentaymerch.com.au"] [uri "/.env"] [unique_id "aucCJDip-66BQDP5zgPjYgAAAAM"], referer: https://www.google.com/search?q=talentaymerch.com.au
...
show less
Web App Attack
๐ซ๐ท
104.28.228.58
6 hours ago
[Sun Nov 01 20:10:52.075700 2026] [security2:error] [pid 858624] [client 104.28.228.58:26855] [clien ...
show more
[Sun Nov 01 20:10:52.075700 2026] [security2:error] [pid 858624] [client 104.28.228.58:26855] [client 104.28.228.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "talentaymerch.com.au"] [uri "/.git/HEAD"] [unique_id "aucCHJblRp0riwHlIkpNkgAAAAU"]
...
show less
Web App Attack