🇺🇸
francelink.fr
2026-11-08 01:38:21
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-08T01:30:15.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-04 19:17:15
UTC ·
(4 days ago)
[Thu Nov 05 06:17:14.186507 2026] [security2:error] [pid 423776] [client 8.210.79.83:44130] [client 8.210.79.83] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST- ...
show more
[Thu Nov 05 06:17:14.186507 2026] [security2:error] [pid 423776] [client 8.210.79.83:44130] [client 8.210.79.83] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/one-day-caps-ba-oneday/"] [unique_id "auuEulMtZPvRNCWemLiNRgAAAA0"]
...
show less
Web App Attack
2026-11-04 07:59:36
UTC ·
(5 days ago)
apache vulnerability scan
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-04 05:02:19
UTC ·
(5 days ago)
[Wed Nov 04 16:02:18.853929 2026] [security2:error] [pid 341970] [client 8.210.79.83:41325] [client 8.210.79.83] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST- ...
show more
[Wed Nov 04 16:02:18.853929 2026] [security2:error] [pid 341970] [client 8.210.79.83:41325] [client 8.210.79.83] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/honour-caps-ba-honour/"] [unique_id "auq8Wu1CVWanM55-6QvrJwAAAA0"]
...
show less
Web App Attack
🇺🇸
1gz
2026-11-01 04:27:56
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/vejshte/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare- ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/vejshte/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
francelink.fr
2026-10-31 19:13:24
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-31T19:12:48.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-21 00:41:25
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-20T04:20:35.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-20 04:48:58
UTC ·
(2 weeks ago)
[Tue Oct 20 15:48:58.149877 2026] [security2:error] [pid 211782] [client 8.210.79.83:51833] [client 8.210.79.83] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST- ...
show more
[Tue Oct 20 15:48:58.149877 2026] [security2:error] [pid 211782] [client 8.210.79.83:51833] [client 8.210.79.83] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/gig-bamboo-bluetooth-speaker-ll9462/"] [unique_id "atbyumEnXmgKmfrN1SoGoQAAAAA"]
...
show less
Web App Attack
2026-10-20 04:32:46
UTC ·
(2 weeks ago)
apache vulnerability scan
Web App Attack
🇺🇦
URAN Publishing Service
2026-08-10 20:08:27
UTC ·
(2 months ago)
[10/Aug/2026:23:08:26 +0300] -- 8.210.79.83 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇺🇸
avgsmoe
2026-08-09 01:00:37
UTC ·
(3 months ago)
REPEAT offender. Observed 1438 times.
Port Scan
Brute-Force
🇺🇸
avgsmoe
2026-08-07 15:00:17
UTC ·
(3 months ago)
REPEAT offender. Observed 1408 times.
Port Scan
Brute-Force
🇺🇸
avgsmoe
2026-08-06 11:59:13
UTC ·
(3 months ago)
REPEAT offender. Observed 1353 times.
Port Scan
Brute-Force
🇹🇷
neron
2026-08-03 20:29:42
UTC ·
(3 months ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇺🇸
avgsmoe
2026-07-31 20:00:07
UTC ·
(3 months ago)
REPEAT offender. Observed 1320 times.
Port Scan
Brute-Force
