🇺🇸
alsmanifesto
2026-09-13 19:37:55
(1 month ago)
Enumerated hostnames across our wildcard domain (access.fluentops.org) against fluentops.org. 244 re ...
show more
Enumerated hostnames across our wildcard domain (access.fluentops.org) against fluentops.org. 244 requests, 2026-09-13 19:37:54 UTC. Blocked at our edge.
show less
Port Scan
Bad Web Bot
🇳🇱
melroy89
2026-09-13 17:05:41
(1 month ago)
2026/09/13 19:05:40 [error] 1609249#1609249: *269221 limiting requests, excess: 5.599 by zone "ip", ...
show more
2026/09/13 19:05:40 [error] 1609249#1609249: *269221 limiting requests, excess: 5.599 by zone "ip", client: "136.107.200.155", server: "_", request_line: "GET /config.json.js HTTP/1.1", host: "aad.melroy.org"
2026/09/13 19:05:41 [error] 1609247#1609247: *269222 limiting requests, excess: 5.711 by zone "ip", client: "136.107.200.155", server: "_", request_line: "GET /public/env.js HTTP/1.1", host: "aad.melroy.org"
2026/09/13 19:05:41 [error] 1609247#1609247: *269222 limiting requests, excess: 5.339 by zone "ip", client: "136.107.200.155", server: "_", request_line: "GET /sw.js HTTP/1.1", host: "aad.melroy.org"
...
show less
Web App Attack
🇫🇷
dynamix
2026-09-13 15:29:45
(1 month ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 14:39:42
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 136.107.200.155 (155.200.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210730) triggered by 136.107.200.155 (155.200.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 10:39:37.841328 2026] [security2:error] [pid 2173:tid 2173] [client 136.107.200.155:55050] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tsaifd.org|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tsaifd.org"] [uri "/privatekey.key"] [unique_id "aqa1qcTgw5QvEdGFZTsYTAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-09-13 14:37:50
(1 month ago)
🔥 VERY AGGRESSIVE SCANNER probed over 200 inexistent files and PHP scripts in less than an hour.
Hacking
Web App Attack
🇩🇪
Teufel100
2026-09-13 13:54:32
(1 month ago)
ModSecurity rejected a query
Brute-Force
Hacking
Web App Attack
🇨🇦
polycoda
2026-09-13 13:39:57
(1 month ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
Hacking
Bad Web Bot
Web App Attack
🇺🇸
bigscoots.com
2026-09-13 12:46:57
(1 month ago)
(PERMBLOCK) 136.107.200.155 (US/United States/155.200.107.136.bc.googleusercontent.com) has had more ...
show more
(PERMBLOCK) 136.107.200.155 (US/United States/155.200.107.136.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Brute-Force
SSH
🇪🇸
elcruzado.es
2026-09-13 12:35:17
(1 month ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 136.107.200.155 (US/ ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 136.107.200.155 (US/United States/155.200.107.136.bc.googleusercontent.com)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-13 12:25:41
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 136.107.200.155 (155.200.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.200.155 (155.200.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 08:25:35.253845 2026] [security2:error] [pid 18569:tid 18569] [client 136.107.200.155:45948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mccachren.org"] [uri "/.github/.env"] [unique_id "aqaWPwjAGa_4gSIow4NSJgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
bazter.pro
2026-09-13 12:22:44
(1 month ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 12:00:09
(1 month ago)
(mod_security) mod_security (id:210580) triggered by 136.107.200.155 (155.200.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210580) triggered by 136.107.200.155 (155.200.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 08:00:02.738912 2026] [security2:error] [pid 6462:tid 6462] [client 136.107.200.155:0] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".ssh/id_rsa" at ARGS:filename. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||kirklandhighlands.org|F|2"] [data "Matched Data: .ssh/id_rsa found within ARGS:filename: file:/root/.ssh/id_rsa"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "kirklandhighlands.org"] [uri "/__vite_rsc_findSourceMapURL"] [unique_id "aqaQQvr-dzHOPchBN9rkqAAAAAQ"], referer: http://kirklandhighlands.org/__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-09-13 10:54:10
(1 month ago)
Repeated requests for suspicious nonexistent URLs, for example: /z9x8c7v6b5-debug-trigger-humancente ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /z9x8c7v6b5-debug-trigger-humancentereddesign.org (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)")
show less
Web App Attack
🇺🇸
WizardsToolkit
2026-09-13 10:20:59
(1 month ago)
tried to access forbidden files; attempted to access /static//app/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 10:08:25
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 136.107.200.155 (155.200.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.200.155 (155.200.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 06:08:18.236818 2026] [security2:error] [pid 14942:tid 14942] [client 136.107.200.155:57144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "exhaustthelimits.org"] [uri "/.git/HEAD"] [unique_id "aqZ2EpjmRZyG0aupf0a1uwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack