This IP address has been reported a total of
21
times from
10 distinct
sources.
136.109.20.81 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(PERMBLOCK) 136.109.20.81 has had more than 4 temp blocks in the last 86400 secs; Ports: *; Directio ...
show more(PERMBLOCK) 136.109.20.81 has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: N/A
show less
Port Scan
Anonymous
FortiWeb WAF: 784 attacks detected. Threat Score: 115800. Types: Client Management(392), Block IP Li ...
show moreFortiWeb WAF: 784 attacks detected. Threat Score: 115800. Types: Client Management(392), Block IP List(392). Origin: United States.
show less
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
(mod_security) mod_security (id:11000011) triggered by 136.109.20.81: 1 in the last 86400 secs; Port ...
show more(mod_security) mod_security (id:11000011) triggered by 136.109.20.81: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 08:32:06.330570 2026] [security2:error] [pid 948989:tid 949033] [client 136.109.20.81:34804] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 81.20.109.136.bc.googleusercontent.com"] [hostname "babis.photo"] [uri "/wp-content/plugins/justified-image-grid/timthumb.php"] [unique_id "ai-OVtXD3_cY7WcDuxq_rgAAAJE"]
show less
(mod_security) mod_security (id:11000011) triggered by 136.109.20.81: 1 in the last 86400 secs; Port ...
show more(mod_security) mod_security (id:11000011) triggered by 136.109.20.81: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 07:22:04.273894 2026] [security2:error] [pid 922089:tid 922125] [client 136.109.20.81:57086] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 81.20.109.136.bc.googleusercontent.com"] [hostname "babis.photo"] [uri "/wp-content/plugins/justified-image-grid/timthumb.php"] [unique_id "ai997I2186Wa_UvIHKhO_wAAAYk"]
show less
(mod_security) mod_security (id:11000011) triggered by 136.109.20.81: 1 in the last 86400 secs; Port ...
show more(mod_security) mod_security (id:11000011) triggered by 136.109.20.81: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 01:45:17.538164 2026] [security2:error] [pid 921889:tid 922063] [client 136.109.20.81:36590] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 81.20.109.136.bc.googleusercontent.com"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2021/09/cardano-coin.png"] [unique_id "ai8u_SykT1eM1OfD7bs6IQAAAUg"]
show less
(mod_security) mod_security (id:11000011) triggered by 136.109.20.81: 1 in the last 86400 secs; Port ...
show more(mod_security) mod_security (id:11000011) triggered by 136.109.20.81: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Jun 14 18:15:58.458628 2026] [security2:error] [pid 922089:tid 922138] [client 136.109.20.81:50236] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 81.20.109.136.bc.googleusercontent.com"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/plugins/justified-image-grid/timthumb.php"] [unique_id "ai7Fro2186Wa_UvIHKjSPQAAAZY"]
show less
(mod_security) mod_security (id:210730) triggered by 136.109.20.81 (81.20.109.136.bc.googleuserconte ...
show more(mod_security) mod_security (id:210730) triggered by 136.109.20.81 (81.20.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 15:23:08.081363 2026] [security2:error] [pid 13095:tid 13095] [client 136.109.20.81:52214] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.civilwarzone.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "ai2uHO2G9In1NOpeT5Y5bgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning
show less
(mod_security) mod_security (id:11000011) triggered by 136.109.20.81: 1 in the last 86400 secs; Port ...
show more(mod_security) mod_security (id:11000011) triggered by 136.109.20.81: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 08:40:03.152815 2026] [security2:error] [pid 568633:tid 568694] [client 136.109.20.81:35688] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 81.20.109.136.bc.googleusercontent.com"] [hostname "babis.photo"] [uri "/wp-content/plugins/justified-image-grid/timthumb.php"] [unique_id "aiztMwwee1nHdDysdvf8JAAAAQg"]
show less
(mod_security) mod_security (id:11000011) triggered by 136.109.20.81: 1 in the last 86400 secs; Port ...
show more(mod_security) mod_security (id:11000011) triggered by 136.109.20.81: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 07:21:46.323740 2026] [security2:error] [pid 568634:tid 568718] [client 136.109.20.81:53302] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 81.20.109.136.bc.googleusercontent.com"] [hostname "babis.photo"] [uri "/wp-content/plugins/justified-image-grid/timthumb.php"] [unique_id "aiza2mhA1AVliy02kiGXnwAAAcw"]
show less
(y4) Failed scan -byebye- from 136.109.20.81 (US/United States/81.20.109.136.bc.googleusercontent.co ...
show more(y4) Failed scan -byebye- from 136.109.20.81 (US/United States/81.20.109.136.bc.googleusercontent.com): (CF_ENABLE)
show less