🇺🇸
TPI-Abuse
2026-10-12 12:18:59
(29 minutes ago)
(mod_security) mod_security (id:210730) triggered by 136.109.253.60 (60.253.109.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 136.109.253.60 (60.253.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 08:18:57.304659 2026] [security2:error] [pid 29743:tid 29743] [client 136.109.253.60:32878] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||inspiraciongaleria.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "inspiraciongaleria.com"] [uri "/z9x8c7v6b5-debug-trigger-inspiraciongaleria.com"] [unique_id "aszQMXu0OSff7lropOja8wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
lns.bz
2026-10-12 12:15:01
(33 minutes ago)
Web app attack [PL.Lu]
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 11:45:10
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 136.109.253.60 (60.253.109.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.109.253.60 (60.253.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 07:45:04.859321 2026] [security2:error] [pid 31280:tid 31280] [client 136.109.253.60:52764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "insearchofgod.org"] [uri "/media../.env"] [unique_id "aszIQHo1ILmPIMqteQIKHQAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-10-12 11:37:35
(1 hour ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 11:17:35
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 136.109.253.60 (60.253.109.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 136.109.253.60 (60.253.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 07:17:28.212222 2026] [security2:error] [pid 20136:tid 20140] [client 136.109.253.60:37756] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||inongap.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "inongap.com"] [uri "/z9x8c7v6b5-debug-trigger-inongap.com"] [unique_id "aszByJRh6ectWBSe8vicQwAAAMI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-12 11:15:45
(1 hour ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
dbmwebdesign
2026-10-12 11:00:20
(1 hour ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇫🇷
Octopuce
2026-10-12 10:41:19
(2 hours ago)
Aggressive web search of vulnerable pages: /static/..;/.env /uploads../.env /css../.env /media../.en ...
show more
Aggressive web search of vulnerable pages: /static/..;/.env /uploads../.env /css../.env /media../.env /images../.env ...
show less
Web App Attack
🇧🇪
cmbplf
2026-10-12 10:11:04
(2 hours ago)
39.041 requests in 1 hour (1w6d22h)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-12 10:10:10
(2 hours ago)
(mod_security) mod_security (id:210580) triggered by 136.109.253.60 (60.253.109.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210580) triggered by 136.109.253.60 (60.253.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 06:10:04.940392 2026] [security2:error] [pid 16367:tid 16367] [client 136.109.253.60:46910] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||inmaine.us|F|2"] [data "Matched Data: proc/self/environ found within ARGS:file: /proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "inmaine.us"] [uri "/api/system/fileView"] [unique_id "asyx_C8dlSVFjpY0V_yWvAAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 09:52:38
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 136.109.253.60 (60.253.109.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 136.109.253.60 (60.253.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 05:52:31.701034 2026] [security2:error] [pid 5468:tid 5468] [client 136.109.253.60:58396] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ink2wear.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ink2wear.com"] [uri "/z9x8c7v6b5-debug-trigger-ink2wear.com"] [unique_id "asyt31d9y3lFz2U0_0TcHQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-10-12 09:31:43
(3 hours ago)
excessive HTTP 404 errors
Bad Web Bot
2026-10-12 09:23:00
(3 hours ago)
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, Bad ...
show more
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, BadPath=18,8, Diversity=10,5, CanaryOverride=90.
show less
Web App Attack
Bad Web Bot
2026-10-12 09:15:22
(3 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 136.109.253.60 (US/United States/60.253 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 136.109.253.60 (US/United States/60.253.109.136.bc.googleusercontent.com)
show less
SQL Injection
2026-10-12 09:14:34
(3 hours ago)
2026/10/12 09:14:31 [error] 3693534#3693534: *213658 [client 136.109.253.60] ModSecurity: Access den ...
show more
2026/10/12 09:14:31 [error] 3693534#3693534: *213658 [client 136.109.253.60] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `40' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 40)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "ingeltechgh.com"] [uri "/"] [unique_id "179179647112.937927"] [ref ""], client: 136.109.253.60, server: ingeltechgh.com, request: "POST / HTTP/2.0", host: "ingeltechgh.com"
2026/10/12 09:14:31 [error] 3693534#3693534: *213658 [client 136.109.253.60] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `40' ) [file "/usr/local/owasp-modsecurit
...
show less
Brute-Force
