🇺🇸
francelink.fr
2026-11-14 00:25:28
UTC ·
(4 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-13T22:46:29.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-13 00:30:23
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-12T22:37:57.000Z.
Web App Attack
🇨🇦
1gz
2026-11-12 01:59:13
UTC ·
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/mpj/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF- ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/mpj/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
francelink.fr
2026-11-12 00:19:29
UTC ·
(2 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-11T20:09:02.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-11 19:59:26
UTC ·
(2 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-11T19:56:53.000Z.
Web App Attack
2026-11-11 03:05:19
UTC ·
(3 days ago)
Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=2
Hacking
🇺🇸
francelink.fr
2026-11-10 04:42:24
UTC ·
(4 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-10T04:41:03.000Z.
Web App Attack
2026-11-08 19:32:16
UTC ·
(5 days ago)
apache vulnerability scan
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-08 01:49:00
UTC ·
(6 days ago)
[Sun Nov 08 12:48:58.392709 2026] [security2:error] [pid 862234] [client 8.217.183.195:43774] [client 8.217.183.195] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Sun Nov 08 12:48:58.392709 2026] [security2:error] [pid 862234] [client 8.217.183.195:43774] [client 8.217.183.195] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/30ml-spf50-sunscreen-lotion-ps-pssun01/tel:1300701197"] [unique_id "au_VCicK1C-085Ziw8OiBwAAAAo"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-06 23:02:19
UTC ·
(1 week ago)
[Sat Nov 07 10:02:18.925155 2026] [security2:error] [pid 718635] [client 8.217.183.195:53704] [client 8.217.183.195] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Sat Nov 07 10:02:18.925155 2026] [security2:error] [pid 718635] [client 8.217.183.195:53704] [client 8.217.183.195] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/womens-scoop-neck-t-top-sh-m8800/"] [unique_id "au5cett6d3mcl8Stsuk9pgAAAAk"]
...
show less
Web App Attack
2026-11-04 10:27:30
UTC ·
(1 week ago)
apache vulnerability scan
Web App Attack
🇮🇩
hermawan
2026-11-04 04:19:08
UTC ·
(1 week ago)
[Wed Nov 04 11:19:08.100774 2026] [security2:error] [pid 354778:tid 139767144502976] [client 8.217.183.195:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset- ...
show more
[Wed Nov 04 11:19:08.100774 2026] [security2:error] [pid 354778:tid 139767144502976] [client 8.217.183.195:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:user-agent: TokenFoundryBot/1.0 ([email protected] ) request_line = GET /index.php/profil/meteorologi/list-all-categories/4380-klimatologi/infografis/infografis-klimatologi/infografis-harian/suhu-minimum-harian-di-jawa-timur/suhu-minimum-harian-di-jawa-timur-tahun-2026/555563336-suhu-minimum-harian-di-jawa-timur-tanggal-13-agustus-2026-pukul-07-01-wib-14-agustus-2026-pukul-07-00-wib HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4380-klimatologi/infografis/infografis-klimatologi/infograf
...
show less
Email Spam
Hacking
🇺🇸
Michael DEBILLY
2026-11-03 19:38:26
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-03T19:36:52.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-31 02:01:26
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-31T01:58:38.000Z.
Web App Attack
🇺🇸
1gz
2026-10-29 07:03:53
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/raiffeisen/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudfla ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/raiffeisen/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
