🇺🇸
francelink.fr
2026-11-08 22:51:23
UTC ·
(15 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-08T22:48:40.000Z.
Web App Attack
🇨🇦
1gz
2026-11-08 02:00:11
UTC ·
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-T ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-11-04 10:33:04
UTC ·
(5 days ago)
[Wed Nov 04 21:33:02.982133 2026] [security2:error] [pid 369339] [client 8.217.210.98:12829] [client 8.217.210.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Wed Nov 04 21:33:02.982133 2026] [security2:error] [pid 369339] [client 8.217.210.98:12829] [client 8.217.210.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/test-tube-acrylic-chewy-fruits-cc031e/tel:1300701197"] [unique_id "ausJ3rHYESxxw-sitPRDAwAAAAs"]
...
show less
Web App Attack
2026-11-04 08:36:32
UTC ·
(5 days ago)
apache vulnerability scan
Web App Attack
🇦🇺
Bay13
2026-11-04 07:28:30
UTC ·
(5 days ago)
CrowdSec:custom/modsecurity
Web App Attack
🇫🇷
COMAITE
2026-11-02 19:55:05
UTC ·
(6 days ago)
SQL injection attempt from 8.217.210.98.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-01 19:45:59
UTC ·
(1 week ago)
[Mon Nov 02 06:45:58.980852 2026] [security2:error] [pid 21929] [client 8.217.210.98:50534] [client 8.217.210.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST ...
show more
[Mon Nov 02 06:45:58.980852 2026] [security2:error] [pid 21929] [client 8.217.210.98:50534] [client 8.217.210.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/stemless-shatterproof-champagne-glass-h-s709/tel:1300701197"] [unique_id "aueW9ioavWoFhbmsOf0zpwAAAA4"]
...
show less
Web App Attack
🇩🇪
Phenix Info
2026-11-01 19:32:41
UTC ·
(1 week ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
🇺🇸
francelink.fr
2026-11-01 04:46:24
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-01T04:43:46.000Z.
Web App Attack
🇫🇮
pavel Karpenko
2026-10-29 05:02:13
UTC ·
(1 week ago)
8.217.210.98 - - [29/Oct/2026:08:02:13 +0300] "GET /property_org.php?org_id=ORG-FT129-RIPE&lang=es HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=10677 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=1 ...
show more
8.217.210.98 - - [29/Oct/2026:08:02:13 +0300] "GET /property_org.php?org_id=ORG-FT129-RIPE&lang=es HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=10677 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1793250133.343
show less
DDoS Attack
🇺🇸
francelink.fr
2026-10-29 00:15:35
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-28T16:04:11.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-28 06:55:26
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-28T06:54:34.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-20 18:05:27
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-20T04:11:24.000Z.
Web App Attack
🇺🇸
SX Communications
2026-10-20 04:30:40
UTC ·
(2 weeks ago)
Web vulnerability scanning / probing from 8.217.210.98: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 1 hits; paths: /tracker?destination=tracker%3Forder%3Dtitle%26sort%3Dasc%26page%3D106 ...
show more
Web vulnerability scanning / probing from 8.217.210.98: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 1 hits; paths: /tracker?destination=tracker%3Forder%3Dtitle%26sort%3Dasc%26page%3D106&order=type&page=82&sort=desc.
show less
Port Scan
Hacking
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-20 04:05:47
UTC ·
(2 weeks ago)
[Tue Oct 20 15:05:46.351553 2026] [security2:error] [pid 207961] [client 8.217.210.98:58498] [client 8.217.210.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Tue Oct 20 15:05:46.351553 2026] [security2:error] [pid 207961] [client 8.217.210.98:58498] [client 8.217.210.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/wp-content/uploads/2019/06/TC-114085-300x300.jpg"] [unique_id "atbomjbxs9fIwT07f3MOGgAAAAI"]
...
show less
Web App Attack
