🇦🇺
paulshipley.com.au
2026-11-11 01:31:30
UTC ·
(7 hours ago)
[Wed Nov 11 12:31:30.075796 2026] [security2:error] [pid 325025] [client 8.217.212.249:29833] [client 8.217.212.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Wed Nov 11 12:31:30.075796 2026] [security2:error] [pid 325025] [client 8.217.212.249:29833] [client 8.217.212.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/store/page/76/"] [unique_id "avPFcq7xueD5v_GNJjulJgAAAAk"]
...
show less
Web App Attack
2026-11-08 02:05:15
UTC ·
(3 days ago)
apache vulnerability scan
Web App Attack
🇺🇸
Michael DEBILLY
2026-11-03 19:54:25
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-03T19:53:33.000Z.
Web App Attack
🇺🇸
1gz
2026-10-30 02:47:56
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/protetuesit/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudfl ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/protetuesit/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇮🇩
hermawan
2026-10-30 02:01:43
UTC ·
(1 week ago)
[Fri Oct 30 09:01:42.286868 2026] [security2:error] [pid 316234:tid 139623313422016] [client 8.217.212.249:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset- ...
show more
[Fri Oct 30 09:01:42.286868 2026] [security2:error] [pid 316234:tid 139623313422016] [client 8.217.212.249:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:user-agent: TokenFoundryBot/1.0 ([email protected] ) request_line = GET /index.php/analisis-bulanan/4299-analisis-distribusi-hujan/analisis-distribusi-curah-hujan/analisis-distribusi-curah-hujan-jawa-timur-bulanan/analisis-bulanan-distribusi-curah-hujan-di-provinsi-jawa-timur-tahun-2025/555562709-analisis-bulanan-distribusi-curah-hujan-bulan-desember-tahun-2025-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/4299-analisis-distribusi-hujan/analisis-distribusi-curah-hujan/analisis-distribu
...
show less
Email Spam
Hacking
🇺🇸
francelink.fr
2026-10-29 10:51:27
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-29T10:46:47.000Z.
Web App Attack
🇺🇸
1gz
2026-10-29 06:55:28
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/mara-frroku/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudfl ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/mara-frroku/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇮
pavel Karpenko
2026-10-26 04:04:51
UTC ·
(2 weeks ago)
8.217.212.249 - - [26/Oct/2026:07:04:51 +0300] "GET /property_lir.php?id=fr.transatel&lang=en HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=60477 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.13 ...
show more
8.217.212.249 - - [26/Oct/2026:07:04:51 +0300] "GET /property_lir.php?id=fr.transatel&lang=en HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=60477 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1792987491.289
show less
DDoS Attack
🇺🇸
francelink.fr
2026-10-20 04:41:25
UTC ·
(3 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-20T04:39:56.000Z.
Web App Attack
🇺🇦
URAN Publishing Service
2026-08-10 20:08:28
UTC ·
(3 months ago)
[10/Aug/2026:23:08:27 +0300] -- 8.217.212.249 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-07-30 23:50:17
UTC ·
(3 months ago)
Form spam
Web Spam
🇩🇪
conseilgouz
2026-07-30 16:06:36
UTC ·
(3 months ago)
coe-88 : Bloc AI bots=>/en/joaktree-person/jt-0-j-4/3!I315(AliyunSec)
Hacking
🇺🇦
URAN Publishing Service
2026-07-30 15:46:10
UTC ·
(3 months ago)
[30/Jul/2026:18:46:09 +0300] -- 8.217.212.249 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2026-06-21 17:03:16
UTC ·
(4 months ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇩🇪
filstal.org
2026-06-07 00:39:09
UTC ·
(5 months ago)
Persistent bad bot: repeated automated abuse detected
Bad Web Bot
Web App Attack
