🇺🇸
ipblock.com
2026-05-15 09:53:00
(1 month ago)
IPBlock protected site ID [4055-d][s=06].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 06:01:43
(1 month ago)
(mod_security) mod_security (id:212800) triggered by 103.36.91.19 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:212800) triggered by 103.36.91.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 02:01:37.433914 2026] [security2:error] [pid 26604:tid 26604] [client 103.36.91.19:36308] ModSecurity: Access denied with code 403 (phase 2). Match of "rx (?:body|content|description|post|desc|html_message|text)=" against "MATCHED_VAR" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "75"] [id "212800"] [rev "8"] [msg "COMODO WAF: XSS Attack Detected||www.exploratorymusic.net|F|2"] [data "Matched Data: expression=( found within MATCHED_VAR: /hernandez page/meet the strings/mexican guitarron.html?debug=command&expression=(43337*42255)"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.exploratorymusic.net"] [uri "/Hernandez page/Meet the Strings/Mexican Guitarron.html"] [unique_id "agQTwTC_znjCTZeuyuF0MgAAABY"], referer: https://www.exploratorymusic.net/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-05-12 08:00:00
(1 month ago)
IPBlock protected site ID [4055-d][s=03].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-23 01:21:25
(7 months ago)
(mod_security) mod_security (id:212800) triggered by 103.36.91.19 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:212800) triggered by 103.36.91.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 22 21:21:20.210269 2025] [security2:error] [pid 15618:tid 15618] [client 103.36.91.19:35972] ModSecurity: Access denied with code 403 (phase 2). Match of "rx (?:body|content|description|post|desc|html_message|text)=" against "MATCHED_VAR" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "75"] [id "212800"] [rev "8"] [msg "COMODO WAF: XSS Attack Detected||www.nancyscafeandcatering.com|F|2"] [data "Matched Data: expression=( found within MATCHED_VAR: /wp-content/themes/eatery/nav.php?debug=command&expression=(42503*44727)"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-content/themes/eatery/nav.php"] [unique_id "aPmDEAZGy3Pb3IkMoGy3zAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-09-26 18:19:14
(8 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
mnsf
2025-09-25 23:05:05
(8 months ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
🇫🇷
dynamix
2025-09-25 06:54:22
(8 months ago)
Multiple WAF Violations
Web App Attack
🇩🇪
juutis
2025-07-20 19:47:06
(10 months ago)
Multiple WAF abuses - IP blocked
Hacking
Brute-Force
Web App Attack
🇳🇱
Mangelot Hosting
2025-07-15 12:34:25
(11 months ago)
(modsecurity) srv101 ModSecurity 103.36.91.19 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; D ...
show more
(modsecurity) srv101 ModSecurity 103.36.91.19 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇮🇹
VHosting
2025-07-14 21:05:51
(11 months ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-07-14 20:55:52
(11 months ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-07-14 17:00:07
(11 months ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇦🇺
aranguren.org
2025-07-01 23:27:42
(11 months ago)
103.36.91.19 - - [02/Jul/2025:09:27:41 +1000] "GET /890553943.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 ...
show more
103.36.91.19 - - [02/Jul/2025:09:27:41 +1000] "GET /890553943.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"
103.36.91.19 - - [02/Jul/2025:09:27:41 +1000] "GET /.proxyjudge.php.swp HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"
103.36.91.19 - - [02/Jul/2025:09:27:41 +1000] "GET /blglewsbpd HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"
103.36.91.19 - - [02/Jul/2025:09:27:41 +1000] "GET /proxyjudge.php.bak HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"
103.36.91.19 - - [02/Jul/2025:09:27:42 +1000] "GET /dwhtzemwsl HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"
103.36.91.19 - - [02/Jul/2025:09:27:42 +1000] "GET /proxyjudge.php~ HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"
...
show less
Bad Web Bot