🇺🇸
francelink.fr
2026-11-05 20:15:23
UTC ·
(4 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-05T20:13:21.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-04 19:17:13
UTC ·
(5 days ago)
[Thu Nov 05 06:17:13.013926 2026] [security2:error] [pid 423332] [client 8.217.175.178:45198] [client 8.217.175.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Thu Nov 05 06:17:13.013926 2026] [security2:error] [pid 423332] [client 8.217.175.178:45198] [client 8.217.175.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/robots.txt"] [unique_id "auuEuZEkKiJDeUV4rvvwxAAAAAQ"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-11-02 00:07:21
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-01T04:23:09.000Z.
Web App Attack
2026-11-01 19:51:45
UTC ·
(1 week ago)
apache vulnerability scan
Web App Attack
🇺🇸
francelink.fr
2026-11-01 02:09:26
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-01T02:07:37.000Z.
Web App Attack
🇬🇧
gigatech
2026-10-31 23:30:04
UTC ·
(1 week ago)
Webserver Probing
Web App Attack
🇺🇸
francelink.fr
2026-10-31 00:44:26
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-30T19:58:51.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-30 02:41:26
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-30T02:39:10.000Z.
Web App Attack
🇺🇸
1gz
2026-10-30 02:14:39
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/clarified/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflar ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/clarified/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
francelink.fr
2026-10-29 22:58:24
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-29T22:55:10.000Z.
Web App Attack
🇫🇮
pavel Karpenko
2026-10-26 04:10:30
UTC ·
(2 weeks ago)
8.217.175.178 - - [26/Oct/2026:07:10:30 +0300] "GET /property_lir.php?id=nl.12cevents&lang=de HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=15980 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.13 ...
show more
8.217.175.178 - - [26/Oct/2026:07:10:30 +0300] "GET /property_lir.php?id=nl.12cevents&lang=de HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=15980 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1792987830.151
show less
DDoS Attack
🇦🇺
paulshipley.com.au
2026-08-11 03:32:18
UTC ·
(2 months ago)
[Tue Aug 11 13:32:17.250148 2026] [security2:error] [pid 201158] [client 8.217.175.178:7669] [client 8.217.175.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUE ...
show more
[Tue Aug 11 13:32:17.250148 2026] [security2:error] [pid 201158] [client 8.217.175.178:7669] [client 8.217.175.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "anqXwf7TjlyIMoqI5Olh4gAAAAU"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-08-11 01:05:21
UTC ·
(2 months ago)
[Tue Aug 11 11:05:20.518422 2026] [security2:error] [pid 189267] [client 8.217.175.178:29965] [client 8.217.175.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Tue Aug 11 11:05:20.518422 2026] [security2:error] [pid 189267] [client 8.217.175.178:29965] [client 8.217.175.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product-category/mechandise/kids_stuff/plush_yoys/"] [unique_id "anp1UI-gItIPVUETH41ETwAAAAw"]
...
show less
Web App Attack
🇩🇪
conseilgouz
2026-08-10 23:48:15
UTC ·
(2 months ago)
coe-88 : Bloc AI bots=>/joaktree-person/jt-0-j-4/3!I1021(AliyunSec)
Hacking
🇺🇦
URAN Publishing Service
2026-08-10 21:11:50
UTC ·
(2 months ago)
[11/Aug/2026:00:11:49 +0300] -- 8.217.175.178 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
