🇦🇺
paulshipley.com.au
2026-11-06 22:19:40
UTC ·
(1 day ago)
[Sat Nov 07 09:19:38.867893 2026] [security2:error] [pid 711991] [client 8.217.179.180:28609] [client 8.217.179.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Sat Nov 07 09:19:38.867893 2026] [security2:error] [pid 711991] [client 8.217.179.180:28609] [client 8.217.179.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/robots.txt"] [unique_id "au5SehaNfWs78jp4xhSWNwAAAAc"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-01 04:50:48
UTC ·
(1 week ago)
[Sun Nov 01 15:50:47.518238 2026] [security2:error] [pid 880804] [client 8.217.179.180:36709] [client 8.217.179.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Sun Nov 01 15:50:47.518238 2026] [security2:error] [pid 880804] [client 8.217.179.180:36709] [client 8.217.179.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shop.levellapromotions.com.au"] [uri "/product/stubby-holders-3/tel:1300701197"] [unique_id "aubFJ-6EokWNpxqZlhBTnAAAAAM"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-11-01 04:46:24
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-01T04:43:45.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-31 23:31:17
UTC ·
(1 week ago)
[Sun Nov 01 10:31:16.848329 2026] [security2:error] [pid 852663] [client 8.217.179.180:54907] [client 8.217.179.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Sun Nov 01 10:31:16.848329 2026] [security2:error] [pid 852663] [client 8.217.179.180:54907] [client 8.217.179.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/hook-ballpoint-pen-ll3295/"] [unique_id "auZ6RGb0xqtggTAjkusF2QAAAAI"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-10-29 10:53:25
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-29T10:48:12.000Z.
Web App Attack
🇫🇮
pavel Karpenko
2026-10-28 06:09:40
UTC ·
(1 week ago)
8.217.179.180 - - [28/Oct/2026:09:09:40 +0300] "GET /property_org.php?org_id=ORG-GA410-RIPE&lang=de HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=62900 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr= ...
show more
8.217.179.180 - - [28/Oct/2026:09:09:40 +0300] "GET /property_org.php?org_id=ORG-GA410-RIPE&lang=de HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=62900 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1793167780.591
show less
DDoS Attack
🇦🇺
paulshipley.com.au
2026-10-27 07:34:01
UTC ·
(1 week ago)
[Tue Oct 27 18:34:00.149500 2026] [security2:error] [pid 225351] [client 8.217.179.180:57233] [client 8.217.179.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Tue Oct 27 18:34:00.149500 2026] [security2:error] [pid 225351] [client 8.217.179.180:57233] [client 8.217.179.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "winesbydesign.com.au"] [uri "/product/fifty-acre-sauvignon-blanc/tel:0394849829"] [unique_id "auBT6LaWjIxO6Zw7LScSMwAAAAk"]
...
show less
Web App Attack
🇺🇸
1gz
2026-10-20 04:30:26
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kompjuter--internet/apple-kompania-me-e-admiruar-ne-bote/368353/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was ge ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kompjuter--internet/apple-kompania-me-e-admiruar-ne-bote/368353/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-10-19 13:43:02
UTC ·
(2 weeks ago)
[Tue Oct 20 00:43:01.239957 2026] [security2:error] [pid 121903] [client 8.217.179.180:39145] [client 8.217.179.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Tue Oct 20 00:43:01.239957 2026] [security2:error] [pid 121903] [client 8.217.179.180:39145] [client 8.217.179.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/square-plastic-jar-choc-beans-cc025b/tel:1300701197"] [unique_id "atYeZdckcsuIBC3vVfph9AAAAAE"]
...
show less
Web App Attack
🇩🇪
conseilgouz
2026-08-11 02:02:28
UTC ·
(2 months ago)
coe-88 : Bloc AI bots=>/joaktree-person/jt-0-j-4/3!I266(AliyunSec)
Hacking
🇨🇦
1gz
2026-08-11 00:24:51
UTC ·
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/woman-found-dead-near-the-fshajt-bridge-in-gjakova/951949/
UA: AliyunSecBot/Aliyun ([email protected] )
This repo ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /english/woman-found-dead-near-the-fshajt-bridge-in-gjakova/951949/
UA: AliyunSecBot/Aliyun ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇦
URAN Publishing Service
2026-08-10 19:53:45
UTC ·
(2 months ago)
[10/Aug/2026:22:53:45 +0300] -- 8.217.179.180 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-07-30 15:38:24
UTC ·
(3 months ago)
[30/Jul/2026:18:38:24 +0300] -- 8.217.179.180 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-06-21 17:12:16
UTC ·
(4 months ago)
Web App Attack
Web App Attack
🇫🇷
bigorre.org
2026-06-21 14:47:23
UTC ·
(4 months ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
