🇨🇭
4server
2026-11-10 04:31:38
UTC ·
(19 hours ago)
[TueNov1005:31:33.8000332026][security2:error][pid3809494:tid3809625][client8.217.211.163:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-B ...
show more
[TueNov1005:31:33.8000332026][security2:error][pid3809494:tid3809625][client8.217.211.163:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.fondazionemontgrand.ch\"][uri\"/robots.txt\"][unique_id\"avKeJbYyFq9ScoeQ_qu0sAAAAQo\"]
show less
Hacking
Web App Attack
🇺🇸
francelink.fr
2026-11-10 00:18:21
UTC ·
(23 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-09T20:09:16.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-09 19:38:25
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-09T19:37:45.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-08 19:21:25
UTC ·
(2 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-08T19:20:04.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-07 19:50:29
UTC ·
(3 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-07T19:48:45.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-06 04:54:26
UTC ·
(4 days ago)
[Fri Nov 06 15:54:25.581925 2026] [security2:error] [pid 618097] [client 8.217.211.163:57368] [client 8.217.211.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Fri Nov 06 15:54:25.581925 2026] [security2:error] [pid 618097] [client 8.217.211.163:57368] [client 8.217.211.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/clearance-check-stock-translucent-mint-jar-h-h670/tel:1300701197"] [unique_id "au1dgVlbF0I_w5r-8VY2lwAAAAc"]
...
show less
Web App Attack
2026-11-04 20:01:11
UTC ·
(6 days ago)
apache vulnerability scan
Web App Attack
🇺🇸
francelink.fr
2026-11-04 19:17:24
UTC ·
(6 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-04T19:14:42.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-03 04:30:21
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-02T22:47:03.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-02 22:20:23
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-02T22:16:27.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-01 19:31:12
UTC ·
(1 week ago)
[Mon Nov 02 06:31:11.342558 2026] [security2:error] [pid 19457] [client 8.217.211.163:21820] [client 8.217.211.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUE ...
show more
[Mon Nov 02 06:31:11.342558 2026] [security2:error] [pid 19457] [client 8.217.211.163:21820] [client 8.217.211.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/womens-tie-neck-blouse-sh-m8810/tel:1300701197"] [unique_id "aueTf6dEnz1pRrmOMLp7zwAAAAM"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-10-30 19:54:24
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-30T19:53:14.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-28 16:07:27
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-28T16:04:16.000Z.
Web App Attack
🇫🇮
pavel Karpenko
2026-10-26 04:10:01
UTC ·
(2 weeks ago)
8.217.211.163 - - [26/Oct/2026:07:10:01 +0300] "GET /property_lir.php?id=es.isp&tab=as&lang=es HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=6627 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.13 ...
show more
8.217.211.163 - - [26/Oct/2026:07:10:01 +0300] "GET /property_lir.php?id=es.isp&tab=as&lang=es HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=6627 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1792987801.324
show less
DDoS Attack
🇦🇺
paulshipley.com.au
2026-10-19 12:13:32
UTC ·
(3 weeks ago)
[Mon Oct 19 23:13:31.496823 2026] [security2:error] [pid 116467] [client 8.217.211.163:37981] [client 8.217.211.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Mon Oct 19 23:13:31.496823 2026] [security2:error] [pid 116467] [client 8.217.211.163:37981] [client 8.217.211.163] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/wp-content/uploads/2024/05/M3583-red-yellow.jpg"] [unique_id "atYJayzenRMFtJJACSqUVgAAAAc"]
...
show less
Web App Attack
