🇺🇸
TPI-Abuse
2026-10-15 01:56:06
(1 day ago)
(mod_security) mod_security (id:240000) triggered by 135.136.48.58 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 135.136.48.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 21:56:02.859929 2026] [security2:error] [pid 15395:tid 15418] [client 135.136.48.58:22347] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||maxpowered.jp|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "maxpowered.jp"] [uri "/images/stories/themes.php"] [unique_id "atAysr6RQOVQ1G1OFkdfJQAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
lindi
2026-10-15 01:55:08
(1 day ago)
Probing for resource vulnerabilities
...
Web Spam
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
2026-10-14 06:24:39
(2 days ago)
IP matched detection query many 3xx errors.
Brute-Force
🇩🇪
EGP Abuse Dept
2026-10-14 05:13:18
(2 days ago)
Scanning for web/db/file exploits on www.verandamedemblik.nl
SQL Injection
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-13 16:34:38
(2 days ago)
Excessive 404/403 errors
Brute-Force
🇩🇪
BlueWire Hosting
2026-10-02 20:30:50
(1 week ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇳🇱
Alt255
2026-10-02 18:07:05
(1 week ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 135.136.48.58 - - [02/Oct/2026:20:06:55 +0200] "GET /wp-content/plugins/buddypress/alfa.php HTTP/1.1" 301 497 "-" "Go-http-client/1.1"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-02 17:17:43
(1 week ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 135 ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 135.136.48.58 - - \[02/Oct/2026:19:17:30 +0200\] "GET /wp-content/plugins/buddypress/alfa.php HTTP/1.1" 301 499 "-" "Go-http-client/1.1"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
filstal.org
2026-10-02 17:15:59
(1 week ago)
Bad bot activity detected (automated scraping/probing).
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-10-02 15:34:27
(1 week ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 135.136.48.58 (SA/Saudi Arabia/-): 3 in the la ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 135.136.48.58 (SA/Saudi Arabia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/10/02 17:34:23 [error] 1149562#1149562: *230467 access forbidden by rule, client: 135.136.48.58, server: villapardi.it, request: "GET /wp-includes/core.php HTTP/1.1", host: "villapardi.it"
2026/10/02 17:34:24 [error] 1149562#1149562: *230467 access forbidden by rule, client: 135.136.48.58, server: villapardi.it, request: "GET /wp-includes/cookie.php HTTP/1.1", host: "villapardi.it"
2026/10/02 17:34:25 [error] 1149562#1149562: *230467 access forbidden by rule, client: 135.136.48.58, server: villapardi.it, request: "GET /wp-includes/woocommerce-call.php HTTP/1.1", host: "villapardi.it"
show less
Port Scan
🇳🇱
Alt255
2026-09-29 17:40:38
(2 weeks ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 135.136.48.58 - - [29/Sep/2026:19:40:24 +0200] "GET /wp-content/plugins/buddypress/alfa.php HTTP/1.1" 403 558 "-" "Go-http-client/1.1"
...
show less
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-29 17:40:02
(2 weeks ago)
crowdsecurity/http-wordpress-scan
Brute-Force
Web App Attack
🇨🇭
backslash
2026-09-29 13:27:00
(2 weeks ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-20 16:46:19
(3 weeks ago)
(mod_security) mod_security (id:240000) triggered by 135.136.48.58 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 135.136.48.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 12:46:10.647300 2026] [security2:error] [pid 7472:tid 7472] [client 135.136.48.58:38015] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.bvnboysbasketball.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.bvnboysbasketball.com"] [uri "/images/stories/themes.php"] [unique_id "arAN0nigFO0rw3uRHACnZgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-20 15:01:47
(3 weeks ago)
Excessive 404/403 errors
Brute-Force
