🇦🇺
paulshipley.com.au
2026-11-06 05:42:05
UTC ·
(2 days ago)
[Fri Nov 06 16:42:04.401737 2026] [security2:error] [pid 619869] [client 8.217.213.123:53022] [client 8.217.213.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Fri Nov 06 16:42:04.401737 2026] [security2:error] [pid 619869] [client 8.217.213.123:53022] [client 8.217.213.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/bic-super-clip-h-g1895/tel:1300701197"] [unique_id "au1orNl_UH5pBSK9zI-NigAAAAQ"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-11-04 20:28:25
UTC ·
(3 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-04T20:26:45.000Z.
Web App Attack
2026-10-31 01:29:43
UTC ·
(1 week ago)
apache vulnerability scan
Web App Attack
🇺🇸
francelink.fr
2026-10-30 19:55:25
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-30T19:53:16.000Z.
Web App Attack
🇫🇮
pavel Karpenko
2026-10-26 04:10:35
UTC ·
(1 week ago)
8.217.213.123 - - [26/Oct/2026:07:10:35 +0300] "GET /property_lir.php?id=bg.ctel&tab=as&lang=de HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=5559 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.1 ...
show more
8.217.213.123 - - [26/Oct/2026:07:10:35 +0300] "GET /property_lir.php?id=bg.ctel&tab=as&lang=de HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=5559 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1792987835.763
show less
DDoS Attack
🇫🇷
Sklurk
2026-10-20 03:44:37
UTC ·
(2 weeks ago)
Web App Attack
Web App Attack
🇦🇺
paulshipley.com.au
2026-08-11 03:46:04
UTC ·
(2 months ago)
[Tue Aug 11 13:46:04.070015 2026] [security2:error] [pid 203464] [client 8.217.213.123:6236] [client 8.217.213.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUE ...
show more
[Tue Aug 11 13:46:04.070015 2026] [security2:error] [pid 203464] [client 8.217.213.123:6236] [client 8.217.213.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product-category/mechandise/health_beauty_medical/medicinal-confectionery/"] [unique_id "anqa_Eh5R7YYyOqkm_j2bgAAAAM"]
...
show less
Web App Attack
2026-08-11 02:24:06
UTC ·
(2 months ago)
Botnet flood DDOS activity
Web App Attack
🇦🇺
paulshipley.com.au
2026-08-11 02:21:59
UTC ·
(2 months ago)
[Tue Aug 11 12:21:58.678128 2026] [security2:error] [pid 194725] [client 8.217.213.123:42027] [client 8.217.213.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Tue Aug 11 12:21:58.678128 2026] [security2:error] [pid 194725] [client 8.217.213.123:42027] [client 8.217.213.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/clip-lock-jar-jelly-beans-cc019a-20a/tel:1300701197"] [unique_id "anqHRvobBGsvSbb4LE6cKgAAAAI"]
...
show less
Web App Attack
🇫🇷
Sklurk
2026-08-11 01:28:27
UTC ·
(2 months ago)
Web App Attack
Web App Attack
🇷🇺
Mga Admin
2026-08-10 23:49:16
UTC ·
(2 months ago)
8.217.213.123 - - [11/Aug/2026:06:49:15 +0700] "GET /sgit_ugit_cbp_data/SH_disc_output_done.csv.gz HTTP/1.1" 404 196 "-" "AliyunSecBot/Aliyun (
[email protected] )"
...
Web App Attack
🇩🇪
filstal.org
2026-08-05 12:39:17
UTC ·
(3 months ago)
Persistent bad bot: repeated automated abuse detected
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-30 16:02:49
UTC ·
(3 months ago)
[Fri Jul 31 02:02:48.899922 2026] [security2:error] [pid 544220] [client 8.217.213.123:42883] [client 8.217.213.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Fri Jul 31 02:02:48.899922 2026] [security2:error] [pid 544220] [client 8.217.213.123:42883] [client 8.217.213.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/luggage-case-mms-50g-cc070d/"] [unique_id "amt1qFX4P_xykxbLw2zvHQAAAAw"]
...
show less
Web App Attack
🇺🇦
URAN Publishing Service
2026-07-30 15:34:33
UTC ·
(3 months ago)
[30/Jul/2026:18:34:33 +0300] -- 8.217.213.123 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-15 21:01:50
UTC ·
(4 months ago)
[Tue Jun 16 07:01:49.606758 2026] [security2:error] [pid 166707] [client 8.217.213.123:21632] [client 8.217.213.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Tue Jun 16 07:01:49.606758 2026] [security2:error] [pid 166707] [client 8.217.213.123:21632] [client 8.217.213.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/product-category/clothing-and-uniforms/wearable-blankets-oodies/"] [unique_id "ajBoPV51MZGThCce9AvQZQAAAAM"]
...
show less
Web App Attack
