🇫🇷
masterguru
2026-07-08 11:12:32
(2 hours ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 135.136.42.219 (CN/China/-): 2 in the ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 135.136.42.219 (CN/China/-): 2 in the last 3600 secs (0-196)
show less
Hacking
🇬🇧
consul.to
2026-07-08 10:38:01
(2 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
Ba-Yu
2026-07-08 07:10:38
(6 hours ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇷🇴
INTEQ
2026-07-08 03:42:33
(9 hours ago)
Web attack from 135.136.42.219
Web App Attack
🇫🇷
dynamix
2026-07-08 03:39:41
(9 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-07-07 22:17:38
(15 hours ago)
(mod_security) mod_security (id:240000) triggered by 135.136.42.219 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240000) triggered by 135.136.42.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 18:17:32.157611 2026] [security2:error] [pid 21128:tid 21128] [client 135.136.42.219:45369] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||turtlehill.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "turtlehill.org"] [uri "/images/stories/themes.php"] [unique_id "ak16_P8d8-c1C8gGbkOJcAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-29 15:01:10
(1 week ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 135.136.42.219 (CN/China/-): 1 in the ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 135.136.42.219 (CN/China/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-06-28 16:02:19
(1 week ago)
(mod_security) mod_security (id:240000) triggered by 135.136.42.219 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240000) triggered by 135.136.42.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 12:02:11.599383 2026] [security2:error] [pid 12930:tid 12930] [client 135.136.42.219:50881] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||steambalancing.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "steambalancing.com"] [uri "/images/stories/themes.php"] [unique_id "akFFg0DBRRC5iX6g4MeMtQAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 02:25:05
(1 week ago)
(mod_security) mod_security (id:240000) triggered by 135.136.42.219 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240000) triggered by 135.136.42.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 22:24:57.475467 2026] [security2:error] [pid 27355:tid 27355] [client 135.136.42.219:44095] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||restorasiekosistem.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "restorasiekosistem.com"] [uri "/images/stories/themes.php"] [unique_id "akCF-YxO7UsSl4_YnD4YkAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-06-27 19:39:35
(1 week ago)
Aggressive web search of vulnerable pages: /wp-includes/js/jquery/jquery.php /function.php /wp-inclu ...
show more
Aggressive web search of vulnerable pages: /wp-includes/js/jquery/jquery.php /function.php /wp-includes/block-supports/autoload_classmap.php /w ...
show less
Web App Attack
2026-06-24 02:12:41
(2 weeks ago)
Multiple, malicious web requests detected
Port Scan
Hacking
🇬🇧
consul.to
2026-06-24 02:12:03
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
consul.to
2026-06-22 13:52:38
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
consul.to
2026-06-21 13:15:16
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
masterguru
2026-06-21 02:24:03
(2 weeks ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)
Hacking