🇺🇸
TPI-Abuse
2026-09-07 01:52:42
(11 hours ago)
(mod_security) mod_security (id:210730) triggered by 136.115.5.16 (16.5.115.136.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 136.115.5.16 (16.5.115.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 21:52:36.997546 2026] [security2:error] [pid 604:tid 604] [client 136.115.5.16:35762] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||homerbiz.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "homerbiz.com"] [uri "/z9x8c7v6b5-debug-trigger-homerbiz.com"] [unique_id "ap4Y5K_D0H4N7ziJTNi0DwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
revslowmo
2026-09-07 01:16:01
(11 hours ago)
Bot attempt ssh bruteforce
Brute-Force
SSH
🇩🇪
itsolon
2026-09-07 00:43:33
(12 hours ago)
[07/Sep/2026:02:43:32 +0200] 17887418123.276104 136.115.5.16 0 217.154.7.177 443
[07/Sep/2026:02:43: ...
show more
[07/Sep/2026:02:43:32 +0200] 17887418123.276104 136.115.5.16 0 217.154.7.177 443
[07/Sep/2026:02:43:32 +0200] 178874181297.409589 136.115.5.16 0 217.154.7.177 443
[07/Sep/2026:02:43:32 +0200] 178874181231.285840 136.115.5.16 0 217.154.7.177 443
[07/Sep/2026:02:43:32 +0200] 178874181241.046836 136.115.5.16 0 217.154.7.177 443
[07/Sep/2026:02:43:32 +0200] 178874181218.185206 136.115.5.16 0 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
Anonymous
2026-09-06 22:41:36
(14 hours ago)
By Attack Lagwatch(waf)
DDoS Attack
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇩🇪
itsolon
2026-09-06 21:06:57
(16 hours ago)
[06/Sep/2026:23:06:56 +0200] 178872881699.441811 136.115.5.16 35468 217.154.7.177 443
[06/Sep/2026:2 ...
show more
[06/Sep/2026:23:06:56 +0200] 178872881699.441811 136.115.5.16 35468 217.154.7.177 443
[06/Sep/2026:23:06:56 +0200] 178872881616.008810 136.115.5.16 35468 217.154.7.177 443
[06/Sep/2026:23:06:56 +0200] 178872881690.121408 136.115.5.16 35468 217.154.7.177 443
[06/Sep/2026:23:06:56 +0200] 178872881643.427439 136.115.5.16 35468 217.154.7.177 443
[06/Sep/2026:23:06:56 +0200] 178872881618.663879 136.115.5.16 35468 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
🇺🇸
slay3r9903
2026-09-06 20:52:49
(16 hours ago)
IP address blocked by Cloudflare security rules due to suspicious activity and security violations.
Hacking
Bad Web Bot
🇺🇸
slay3r9903
2026-09-06 20:34:53
(16 hours ago)
Wazuh rule 100308: NPM sensitive-path storm: rule 100304 ≥5 times in 10s from same IP
Brute-Force
Port Scan
🇨🇭
leo1305
2026-09-06 17:22:47
(19 hours ago)
CrowdSec detection | scenario: http-probing
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 15:14:30
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.115.5.16 (16.5.115.136.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 136.115.5.16 (16.5.115.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 11:14:22.289492 2026] [security2:error] [pid 6509:tid 6509] [client 136.115.5.16:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hondabvi.com"] [uri "/assets../.env"] [unique_id "ap2DTtROw2N9i6Q9B9IeEwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-06 14:21:56
(22 hours ago)
Multiple WAF Violations
Web App Attack
🇩🇪
itsolon
2026-09-06 14:14:02
(22 hours ago)
[06/Sep/2026:16:14:01 +0200] 178870404163.678481 136.115.5.16 0 217.154.7.177 443
[06/Sep/2026:16:14 ...
show more
[06/Sep/2026:16:14:01 +0200] 178870404163.678481 136.115.5.16 0 217.154.7.177 443
[06/Sep/2026:16:14:01 +0200] 178870404147.482961 136.115.5.16 0 217.154.7.177 443
[06/Sep/2026:16:13:59 +0200] 178870403946.532542 136.115.5.16 0 217.154.7.177 443
[06/Sep/2026:16:14:01 +0200] 178870404193.744421 136.115.5.16 0 217.154.7.177 443
[06/Sep/2026:16:13:59 +0200] 178870403917.842487 136.115.5.16 0 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-06 14:04:11
(23 hours ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
itsolon
2026-09-06 12:46:32
(1 day ago)
[06/Sep/2026:14:46:31 +0200] 178869879178.535305 136.115.5.16 41748 217.154.7.177 443
[06/Sep/2026:1 ...
show more
[06/Sep/2026:14:46:31 +0200] 178869879178.535305 136.115.5.16 41748 217.154.7.177 443
[06/Sep/2026:14:46:31 +0200] 178869879149.028506 136.115.5.16 41748 217.154.7.177 443
[06/Sep/2026:14:46:31 +0200] 178869879174.850198 136.115.5.16 41748 217.154.7.177 443
[06/Sep/2026:14:46:31 +0200] 178869879157.976135 136.115.5.16 41748 217.154.7.177 443
[06/Sep/2026:14:46:31 +0200] 178869879160.295024 136.115.5.16 41748 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
🇲🇾
Rizzy
2026-09-06 12:32:15
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇦🇺
Klaverstyn
2026-09-06 12:07:59
(1 day ago)
High-volume automated HTTP scanning
Web App Attack