๐บ๐ธ
TPI-Abuse
2026-10-01 15:24:54
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 35.221.174.222 (222.174.221.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 35.221.174.222 (222.174.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 11:24:49.942440 2026] [security2:error] [pid 30755:tid 30772] [client 35.221.174.222:52270] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.garyanddani.guitarmans.com|F|2"] [data ".garyanddani.guitarmans.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.garyanddani.guitarmans.com"] [uri "/z9x8c7v6b5-debug-trigger-www.garyanddani.guitarmans.com"] [unique_id "ar57QUgLJe5Flzlv3UD-FgAAAI8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
updown.io
2026-10-01 14:45:48
(3 days ago)
{"level":"info","ts":1790865942.5563016,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1790865942.5563016,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.221.174.222","remote_port":"42838","client_ip":"35.221.174.222","proto":"HTTP/2.0","method":"GET","host":"status.geekflare.com","uri":"/dist/manifest.json","headers":{"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\""],"Sec-Ch-Ua-Platform":["\"Android\""],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Site":["none"],"Accept-Encoding":["gzip, deflate, br, zstd"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Fetch-Dest":["document"],"Sec-Fetch-User":["?1"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Sec-Ch-Ua-Mobile":["?1"],"Priority":["u=0, i"],"User-Agent":["Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like
...
show less
DDoS Attack
Web App Attack
๐ฌ๐ง
consul.to
2026-10-01 14:26:29
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
๐ฎ๐น
VHosting
2026-10-01 14:25:03
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-01 14:17:58
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 35.221.174.222 (222.174.221.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 35.221.174.222 (222.174.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 10:17:55.295721 2026] [security2:error] [pid 22790:tid 22790] [client 35.221.174.222:40664] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mike-garner.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mike-garner.com"] [uri "/z9x8c7v6b5-debug-trigger-mike-garner.com"] [unique_id "ar5rk7qCW3VV1SVp6g1WYwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
rh24
2026-10-01 14:05:27
(3 days ago)
(badbots) Bad bot user-agent [redacted] from 35.221.174.222 (TW/Taiwan/222.174.221.35.bc.googleuserc ...
show more
(badbots) Bad bot user-agent [redacted] from 35.221.174.222 (TW/Taiwan/222.174.221.35.bc.googleusercontent.com)
show less
Hacking
๐ณ๐ฑ
Site.eu
2026-10-01 13:51:37
(3 days ago)
Excessive 404/403 errors
Brute-Force
Anonymous
2026-10-01 13:22:44
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ฉ๐ช
dbmwebdesign
2026-10-01 12:55:07
(3 days ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack