🇺🇸
1gz
2026-10-29 05:33:33
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/26-vjecrj-a/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudfl ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/26-vjecrj-a/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
Alt255
2026-10-27 11:34:22
UTC ·
(1 week ago)
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 8.217.212.194 - - [27/Oct/2026:12:34:01 +0100] "GET /manager/status HTTP/1.1" 301 482 "-" "TokenFoundryBot/1.0 (
[email protected] )"
...
Bad Web Bot
Web App Attack
🇫🇮
pavel Karpenko
2026-10-26 04:11:38
UTC ·
(2 weeks ago)
8.217.212.194 - - [26/Oct/2026:07:11:38 +0300] "GET /property_lir.php?id=de.storck&lang=de HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=32122 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.1 ...
show more
8.217.212.194 - - [26/Oct/2026:07:11:38 +0300] "GET /property_lir.php?id=de.storck&lang=de HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=32122 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1792987898.719
show less
DDoS Attack
🇺🇸
francelink.fr
2026-10-20 18:11:27
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-20T04:43:12.000Z.
Web App Attack
🇺🇸
1gz
2026-10-20 04:24:50
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /sport/ish-i-partizanit-ndahet-me-drenicen-27-vjecari-zyrtarizon-largimin/906903/
UA: TokenFoundryBot/1.0 ([email protected] )
Th ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /sport/ish-i-partizanit-ndahet-me-drenicen-27-vjecari-zyrtarizon-largimin/906903/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-10-20 03:31:35
UTC ·
(2 weeks ago)
[Tue Oct 20 14:31:34.140121 2026] [security2:error] [pid 203774] [client 8.217.212.194:19866] [client 8.217.212.194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Tue Oct 20 14:31:34.140121 2026] [security2:error] [pid 203774] [client 8.217.212.194:19866] [client 8.217.212.194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/slides-h-oa029/"] [unique_id "atbgloyVVPzI9pe2uecdOwAAAAg"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-10-19 12:07:26
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-19T12:06:16.000Z.
Web App Attack
🇫🇷
Sklurk
2026-08-11 01:49:45
UTC ·
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
conseilgouz
2026-08-11 00:50:22
UTC ·
(2 months ago)
coe-88 : Bloc AI bots=>/joaktree-person/jt-0-j-4/3!I241(AliyunSec)
Hacking
🇺🇦
URAN Publishing Service
2026-08-10 19:55:43
UTC ·
(2 months ago)
[10/Aug/2026:22:55:42 +0300] -- 8.217.212.194 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-07-30 13:59:28
UTC ·
(3 months ago)
[30/Jul/2026:16:59:28 +0300] -- 8.217.212.194 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇩🇪
london2038.com
2026-07-28 00:39:08
UTC ·
(3 months ago)
Too many failed requests
8.217.212.194 - - [27/Jul/2026:23:12:34 +0200] "GET /index.php?from=20250208115726&hidebots=0&hideminor=1&hidemyself=1&limit=500&target=Exinde&title=Special%3ARecentChangesLinked HTTP/1.1" 404 29304 "-" "AliyunSecBot/Aliyun ( ...
show more
Too many failed requests
8.217.212.194 - - [27/Jul/2026:23:12:34 +0200] "GET /index.php?from=20250208115726&hidebots=0&hideminor=1&hidemyself=1&limit=500&target=Exinde&title=Special%3ARecentChangesLinked HTTP/1.1" 404 29304 "-" "AliyunSecBot/Aliyun ([email protected] )"
8.217.212.194 - - [27/Jul/2026:23:14:57 +0200] "GET /index.php?title=Special:RecentChangesLinked&userExpLevel=registered&hidebots=0&days=30&from=20250208115353&target=Probability_Modulator HTTP/1.1" 404 29595 "-" "AliyunSecBot/Aliyun ([email protected] )"
8.217.212.194 - - [27/Jul/2026:23:20:19 +0200] "GET /index.php?days=30&from=20250209044525&hidemyself=1&limit=100&target=Feasibility_Modulator&title=Special%3ARecentChangesLinked HTTP/1.1" 404 29320 "-" "AliyunSecBot/Aliyun ([email protected] )"
8.217.212.194 - - [27/Jul/2026:23:42:13 +0200] "GET /index.php?from=20250211130907&fromFormatted=13%3A09%2C+11+February+2025&target=Mini-Game&title=Special%3ARecentChangesLinked HTTP/1.1" 404 28306 "-" "Al
...
show less
Web Spam
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-06-21 16:41:31
UTC ·
(4 months ago)
[Mon Jun 22 02:41:31.218428 2026] [security2:error] [pid 929661] [client 8.217.212.194:42847] [client 8.217.212.194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Mon Jun 22 02:41:31.218428 2026] [security2:error] [pid 929661] [client 8.217.212.194:42847] [client 8.217.212.194] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "winesbydesign.com.au"] [uri "/product/snack-lovers/"] [unique_id "ajgUOzQs2g1d3kQ49nNRjgAAAAA"]
...
show less
Web App Attack
🇩🇪
conseilgouz
2026-06-19 01:15:08
UTC ·
(4 months ago)
vee-88 : Bloc AI bots=>/robots.txt(AliyunSec)
Hacking
🇩🇪
filstal.org
2026-06-07 01:09:10
UTC ·
(5 months ago)
Persistent bad bot: repeated automated abuse detected
Bad Web Bot
Web App Attack
