🇺🇸
francelink.fr
2026-11-12 19:33:23
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-12T19:30:36.000Z.
Web App Attack
2026-11-11 21:05:26
UTC ·
(2 days ago)
Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=2
Hacking
🇫🇷
Sklurk
2026-11-08 01:41:42
UTC ·
(6 days ago)
Web App Attack
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-05 19:59:47
UTC ·
(1 week ago)
[Fri Nov 06 06:59:46.902671 2026] [security2:error] [pid 566855] [client 8.217.213.80:24367] [client 8.217.213.80] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Fri Nov 06 06:59:46.902671 2026] [security2:error] [pid 566855] [client 8.217.213.80:24367] [client 8.217.213.80] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/light-bulb-with-mini-jellybeans-100g-cc074a/tel:1300701197"] [unique_id "auzgMi_qC-wO78y6SadnbwAAAAM"]
...
show less
Web App Attack
🇫🇷
COMAITE
2026-11-01 19:29:38
UTC ·
(1 week ago)
SQL injection attempt from 8.217.213.80.
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-01 04:54:59
UTC ·
(1 week ago)
[Sun Nov 01 15:54:59.329024 2026] [security2:error] [pid 881148] [client 8.217.213.80:45084] [client 8.217.213.80] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Sun Nov 01 15:54:59.329024 2026] [security2:error] [pid 881148] [client 8.217.213.80:45084] [client 8.217.213.80] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shop.levellapromotions.com.au"] [uri "/product/pen-plastic-2/tel:1300701197"] [unique_id "aubGI-5Ds29_e9L-x6rxvwAAAAE"]
...
show less
Web App Attack
🇺🇸
francelink.fr
2026-10-31 19:21:23
UTC ·
(1 week ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-31T19:19:36.000Z.
Web App Attack
🇺🇸
1gz
2026-10-31 01:42:21
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/akse-rrugore/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudf ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/akse-rrugore/
UA: TokenFoundryBot/1.0 ([email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
francelink.fr
2026-10-30 19:46:31
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-30T19:45:13.000Z.
Web App Attack
🇫🇮
pavel Karpenko
2026-10-27 09:20:46
UTC ·
(2 weeks ago)
8.217.213.80 - - [27/Oct/2026:12:20:46 +0300] "GET /property_org.php?org_id=ORG-WW29-RIPE&lang=fr HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=12348 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=19 ...
show more
8.217.213.80 - - [27/Oct/2026:12:20:46 +0300] "GET /property_org.php?org_id=ORG-WW29-RIPE&lang=fr HTTP/1.1" 404 162 "-" "TokenFoundryBot/1.0 ([email protected] )" client_port=12348 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1793092846.557
show less
DDoS Attack
🇺🇸
francelink.fr
2026-10-21 00:45:23
UTC ·
(3 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-20T04:59:18.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-20 01:38:24
UTC ·
(3 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-20T01:36:13.000Z.
Web App Attack
🇪🇸
librebit
2026-08-11 03:32:22
UTC ·
(3 months ago)
Brute force
Brute-Force
🇺🇦
URAN Publishing Service
2026-08-10 23:51:58
UTC ·
(3 months ago)
[11/Aug/2026:02:51:58 +0300] -- 8.217.213.80 Ban reason: User-Agent AliyunSecBot
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-30 14:25:25
UTC ·
(3 months ago)
[Fri Jul 31 00:25:25.485359 2026] [security2:error] [pid 535388] [client 8.217.213.80:16539] [client 8.217.213.80] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Fri Jul 31 00:25:25.485359 2026] [security2:error] [pid 535388] [client 8.217.213.80:16539] [client 8.217.213.80] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/product/hot-chocolate-kit-lindt-cc009j/tel:1300701197"] [unique_id "amte1c6N1Eout7dAgQJSlAAAAAY"]
...
show less
Web App Attack
