🇦🇺
paulshipley.com.au
2026-11-06 22:24:17
UTC ·
(2 days ago)
[Sat Nov 07 09:24:16.436839 2026] [security2:error] [pid 713638] [client 8.217.212.139:35121] [client 8.217.212.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Sat Nov 07 09:24:16.436839 2026] [security2:error] [pid 713638] [client 8.217.212.139:35121] [client 8.217.212.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "au5TkCmZsVs9WHLYuIS4LQAAAA4"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-11-06 20:17:23
UTC ·
(2 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-06T20:15:08.000Z.
Web App Attack
2026-11-04 20:03:04
UTC ·
(4 days ago)
apache vulnerability scan
Web App Attack
🇺🇸
1gz
2026-11-04 04:52:17
UTC ·
(5 days ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /shqiperi/nami-ne-vlore-policia-shqiptare-dhe-guardia-di-finanza-behen-bashke-video/329005/
UA: TokenFoundryBot/1.0 ([email protected] ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /shqiperi/nami-ne-vlore-policia-shqiptare-dhe-guardia-di-finanza-behen-bashke-video/329005/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-11-01 19:21:00
UTC ·
(1 week ago)
[Mon Nov 02 06:20:59.270033 2026] [security2:error] [pid 21930] [client 8.217.212.139:54172] [client 8.217.212.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUE ...
show more
[Mon Nov 02 06:20:59.270033 2026] [security2:error] [pid 21930] [client 8.217.212.139:54172] [client 8.217.212.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/madrid-style-string-straw-hw-4284/"] [unique_id "aueRG0xn4NOJqdrLNG_igwAAABA"]
...
show less
Web App Attack
🇮🇩
hermawan
2026-11-01 02:09:09
UTC ·
(1 week ago)
[Sun Nov 01 09:09:08.326470 2026] [security2:error] [pid 369816:tid 140141328737984] [client 8.217.212.139:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset- ...
show more
[Sun Nov 01 09:09:08.326470 2026] [security2:error] [pid 369816:tid 140141328737984] [client 8.217.212.139:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:user-agent: TokenFoundryBot/1.0 ([email protected] ) request_line = GET /index.php/profil/meteorologi/list-all-categories/4307-ppid/555563454-laporan-kuasa-pengguna-barang-semester-i-tahun-anggaran-2025-stasiun-klimatologi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4307-ppid/555563454-laporan-kuasa-pengguna-barang-semester-i-tahun-anggaran-2025-stasiun-klimatologi-jawa-timur"] [unique_id "auafRHIpStCe-ynH7KqSkQAAAAM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] t
...
show less
Email Spam
Hacking
🇦🇺
paulshipley.com.au
2026-10-31 23:10:40
UTC ·
(1 week ago)
[Sun Nov 01 10:10:39.624511 2026] [security2:error] [pid 851412] [client 8.217.212.139:4232] [client 8.217.212.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUE ...
show more
[Sun Nov 01 10:10:39.624511 2026] [security2:error] [pid 851412] [client 8.217.212.139:4232] [client 8.217.212.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/brushed-heavy-cotton-cap-with-flame-embroidery-hw-4226/"] [unique_id "auZ1bywDqKbMD3q79HwISAAAABY"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-10-31 19:42:27
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-31T19:40:58.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-29 22:51:27
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-29T22:49:21.000Z.
Web App Attack
🇫🇮
pavel Karpenko
2026-10-29 22:46:15
UTC ·
(1 week ago)
8.217.212.139 - - [30/Oct/2026:01:46:15 +0300] "GET /property_lir.php?id=tj.seganj&tab=ipv6&lang=ru HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=62165 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr= ...
show more
8.217.212.139 - - [30/Oct/2026:01:46:15 +0300] "GET /property_lir.php?id=tj.seganj&tab=ipv6&lang=ru HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=62165 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1793313975.618
show less
DDoS Attack
🇺🇸
francelink.fr
2026-10-28 05:37:25
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-28T05:35:07.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-27 16:17:56
UTC ·
(1 week ago)
[Wed Oct 28 03:17:55.820803 2026] [security2:error] [pid 275778] [client 8.217.212.139:19988] [client 8.217.212.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Wed Oct 28 03:17:55.820803 2026] [security2:error] [pid 275778] [client 8.217.212.139:19988] [client 8.217.212.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellagiftware.com.au"] [uri "/robots.txt"] [unique_id "auDOs0_T8qz6Cu36Jd-KygAAAAc"]
...
show less
Web App Attack
2026-10-26 05:16:12
UTC ·
(2 weeks ago)
apache vulnerability scan
Web App Attack
🇺🇸
1gz
2026-10-26 04:29:50
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/jon-martin/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudfla ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/jon-martin/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-10-26 04:22:34
UTC ·
(2 weeks ago)
[Mon Oct 26 15:22:33.590524 2026] [security2:error] [pid 71402] [client 8.217.212.139:35956] [client 8.217.212.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUE ...
show more
[Mon Oct 26 15:22:33.590524 2026] [security2:error] [pid 71402] [client 8.217.212.139:35956] [client 8.217.212.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/shop/page/3/tel:0398467277"] [unique_id "at7ViWvx_AQnXJBZ2ah7qQAAAA0"]
...
show less
Web App Attack
