Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SatNov0723:18:56.6361632026][security2:error][pid301616:tid301736][client8.217.190.93:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOC ...
show more[SatNov0723:18:56.6361632026][security2:error][pid301616:tid301736][client8.217.190.93:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"avvnicolaurbani.ch\"][uri\"/category/comunicati-stampa/cs-italia/page/309/\"][unique_id\"au-j0MoiyQqCzYiJkZtGXAAAARI\"]
show less
[SunNov0123:31:10.7932512026][security2:error][pid3463140:tid3463291][client8.217.190.93:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BL ...
show more[SunNov0123:31:10.7932512026][security2:error][pid3463140:tid3463291][client8.217.190.93:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"avvnicolaurbani.ch\"][uri\"/seminario-sulle-neuroscienze-a-tokyo/\"][unique_id\"aue9roz7aIUa_5vM8kiaWwAAAQg\"]
show less
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/aak-chairman/
UA: TokenFoundryBot/1.0 ([email protected])
This report was generated by:
https://github.com/sefinek/Cloudf ...
show moreTriggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/aak-chairman/
UA: TokenFoundryBot/1.0 ([email protected])
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
[WedOct2804:42:10.6726132026][security2:error][pid346999:tid347110][client8.217.190.93:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOC ...
show more[WedOct2804:42:10.6726132026][security2:error][pid346999:tid347110][client8.217.190.93:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"avvnicolaurbani.ch\"][uri\"/category/comunicati-stampa/cs-italia/page/294/\"][unique_id\"auFvEmO_Yh6sEs1UNuosRQAAAJQ\"]
show less
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/judgments/
UA: TokenFoundryBot/1.0 ([email protected])
This report was generated by:
https://github.com/sefinek/Cloudflar ...
show moreTriggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/judgments/
UA: TokenFoundryBot/1.0 ([email protected])
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Web vulnerability scanning / probing from 8.217.190.93: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 2 hits; paths: /tracker?destination=tracker%3Fpage%3D90%26order%3Dname%26sort%3Ddesc% ...
show moreWeb vulnerability scanning / probing from 8.217.190.93: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 2 hits; paths: /tracker?destination=tracker%3Fpage%3D90%26order%3Dname%26sort%3Ddesc%26page%253D8%3D&order=title&page=113&sort=desc, /tracker?destination=tracker%3Fpage%3D99%26order%3Dtitle%26sort%3Ddesc%26%252524Path%3Djjvvfkndzvucamns&order=title&page=64&sort=asc.
show less