🇺🇸
francelink.fr
2026-11-07 19:23:23
UTC ·
(2 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-07T19:19:57.000Z.
Web App Attack
🇨🇦
1gz
2026-11-06 19:27:05
UTC ·
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /video-lajme/milani-mposht-juventusin-n-serin-a-pas-katr-vjetsh-video/266206/
UA: TokenFoundryBot/1.0 ([email protected] )
This r ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /video-lajme/milani-mposht-juventusin-n-serin-a-pas-katr-vjetsh-video/266206/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
francelink.fr
2026-11-04 08:12:24
UTC ·
(6 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-04T08:09:22.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-04 05:22:56
UTC ·
(6 days ago)
[Wed Nov 04 16:22:55.847246 2026] [security2:error] [pid 343156] [client 8.217.212.43:39143] [client 8.217.212.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Wed Nov 04 16:22:55.847246 2026] [security2:error] [pid 343156] [client 8.217.212.43:39143] [client 8.217.212.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product-category/mechandise/page/27/"] [unique_id "aurBL_CIc4ADvaE9KI2fdAAAAA4"]
...
show less
Web App Attack
🇺🇸
1gz
2026-10-30 02:11:34
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/komentatori/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudfl ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/komentatori/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇮
pavel Karpenko
2026-10-28 06:09:15
UTC ·
(1 week ago)
8.217.212.43 - - [28/Oct/2026:09:09:15 +0300] "GET /property_org.php?org_id=ORG-ESNS1-RIPE&lang=de HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=18458 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=1 ...
show more
8.217.212.43 - - [28/Oct/2026:09:09:15 +0300] "GET /property_org.php?org_id=ORG-ESNS1-RIPE&lang=de HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=18458 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1793167755.954
show less
DDoS Attack
2026-10-21 03:24:44
UTC ·
(2 weeks ago)
apache vulnerability scan
Web App Attack
🇺🇸
francelink.fr
2026-10-20 17:46:28
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-20T03:45:19.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-20 03:44:48
UTC ·
(3 weeks ago)
[Tue Oct 20 14:44:47.263035 2026] [security2:error] [pid 205369] [client 8.217.212.43:13123] [client 8.217.212.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Tue Oct 20 14:44:47.263035 2026] [security2:error] [pid 205369] [client 8.217.212.43:13123] [client 8.217.212.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product/hi-vis-s-s-cotton-polo-jb-6cphv/"] [unique_id "atbjr-gFmJhldAiONS-RuwAAAAU"]
...
show less
Web App Attack
2026-08-11 02:14:06
UTC ·
(2 months ago)
Botnet flood DDOS activity
Web App Attack
🇺🇦
URAN Publishing Service
2026-08-11 00:17:56
UTC ·
(2 months ago)
[11/Aug/2026:03:17:55 +0300] -- 8.217.212.43 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-08-10 23:51:33
UTC ·
(2 months ago)
[Tue Aug 11 09:51:32.591200 2026] [security2:error] [pid 183384] [client 8.217.212.43:8129] [client 8.217.212.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST ...
show more
[Tue Aug 11 09:51:32.591200 2026] [security2:error] [pid 183384] [client 8.217.212.43:8129] [client 8.217.212.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product-category/mechandise/sports/sports-stress-shapes/"] [unique_id "anpkBOIR5-2gYPyc4KDbDAAAAAY"]
...
show less
Web App Attack
🇺🇦
URAN Publishing Service
2026-07-30 14:28:44
UTC ·
(3 months ago)
[30/Jul/2026:17:28:44 +0300] -- 8.217.212.43 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-07-28 02:34:18
UTC ·
(3 months ago)
Web App Attack
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-21 18:22:18
UTC ·
(4 months ago)
[Mon Jun 22 04:22:17.359691 2026] [security2:error] [pid 1105] [client 8.217.212.43:62725] [client 8.217.212.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST- ...
show more
[Mon Jun 22 04:22:17.359691 2026] [security2:error] [pid 1105] [client 8.217.212.43:62725] [client 8.217.212.43] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "winesbydesign.com.au"] [uri "/product/moet-hamper/"] [unique_id "ajgr2cCMn8kON8NRxR-2pwAAAAI"]
...
show less
Web App Attack
