🇺🇸
francelink.fr
2026-11-06 01:17:31
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-05T20:09:22.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-05 19:20:30
UTC ·
(2 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-05T19:17:38.000Z.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-04 19:30:31
UTC ·
(3 days ago)
[Thu Nov 05 06:30:31.330007 2026] [security2:error] [pid 425634] [client 8.217.213.125:42479] [client 8.217.213.125] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Thu Nov 05 06:30:31.330007 2026] [security2:error] [pid 425634] [client 8.217.213.125:42479] [client 8.217.213.125] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/crown-mint-cc051b/tel:1300701197"] [unique_id "auuH16QTRhyVtl_Nu3U6DwAAAAg"]
...
show less
Web App Attack
🇺🇸
Michael DEBILLY
2026-11-03 19:25:30
UTC ·
(4 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-03T19:23:58.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-01 20:16:24
UTC ·
(6 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-01T20:14:28.000Z.
Web App Attack
🇮🇩
hermawan
2026-11-01 01:44:36
UTC ·
(6 days ago)
[Sun Nov 01 08:44:35.998319 2026] [security2:error] [pid 353290:tid 140141307307712] [client 8.217.213.125:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset- ...
show more
[Sun Nov 01 08:44:35.998319 2026] [security2:error] [pid 353290:tid 140141307307712] [client 8.217.213.125:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:user-agent: TokenFoundryBot/1.0 ([email protected] ) request_line = GET /index.php/profil/meteorologi/list-all-categories/4402-ppid/transparansi-kinerja/555563411-laporan-keuangan-stasiun-klimatologi-jawa-timur-semester-ii-tahun-anggaran-2025 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4402-ppid/transparansi-kinerja/555563411-laporan-keuangan-stasiun-klimatologi-jawa-timur-semester-ii-tahun-anggaran-2025"] [unique_id "auaZgz5Ceg_ZYByryi1-5wAAAAY"] [staklim-jatim.bmkg.go.id] [staklim-j
...
show less
Email Spam
Hacking
2026-10-31 22:32:17
UTC ·
(1 week ago)
apache vulnerability scan
Web App Attack
🇺🇸
francelink.fr
2026-10-30 00:49:30
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-30T00:04:49.000Z.
Web App Attack
🇫🇮
pavel Karpenko
2026-10-27 09:25:30
UTC ·
(1 week ago)
8.217.213.125 - - [27/Oct/2026:12:25:30 +0300] "GET /property_lir.php?id=tr.isnet&tab=as&lang=de HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=34198 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195 ...
show more
8.217.213.125 - - [27/Oct/2026:12:25:30 +0300] "GET /property_lir.php?id=tr.isnet&tab=as&lang=de HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=34198 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1793093130.868
show less
DDoS Attack
2026-10-19 12:34:06
UTC ·
(2 weeks ago)
apache vulnerability scan
Web App Attack
🇩🇪
conseilgouz
2026-08-11 01:46:43
UTC ·
(2 months ago)
coe-88 : Bloc AI bots=>/joaktree-person/jt-0-b-4/3!I283(AliyunSec)
Hacking
🇦🇺
paulshipley.com.au
2026-08-11 01:05:46
UTC ·
(2 months ago)
[Tue Aug 11 11:05:45.653956 2026] [security2:error] [pid 189271] [client 8.217.213.125:22039] [client 8.217.213.125] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Tue Aug 11 11:05:45.653956 2026] [security2:error] [pid 189271] [client 8.217.213.125:22039] [client 8.217.213.125] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product-category/mechandise/office_items/office-misc/"] [unique_id "anp1aQThfwn82MnWvvTaAwAAABI"]
...
show less
Web App Attack
🇺🇦
URAN Publishing Service
2026-08-10 23:03:37
UTC ·
(2 months ago)
[11/Aug/2026:02:03:36 +0300] -- 8.217.213.125 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇩🇪
filstal.org
2026-08-10 20:09:07
UTC ·
(2 months ago)
Persistent bad bot: repeated automated abuse detected
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-07-30 14:22:52
UTC ·
(3 months ago)
[30/Jul/2026:17:22:52 +0300] -- 8.217.213.125 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
