🇳🇱
Savvii
2026-10-17 10:47:22
(48 minutes ago)
20 attempts against mh_ha-misbehave-ban on yeti
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 10:36:50
(58 minutes ago)
(mod_security) mod_security (id:210730) triggered by 35.240.14.114 (114.14.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.240.14.114 (114.14.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 06:36:45.028455 2026] [security2:error] [pid 12930:tid 12930] [client 35.240.14.114:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||haywardcarpentry.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "haywardcarpentry.com"] [uri "/z9x8c7v6b5-debug-trigger-haywardcarpentry.com"] [unique_id "atNPvUwuk8rqulsi81rBUwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 10:20:06
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 35.240.14.114 (114.14.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.240.14.114 (114.14.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 06:20:01.942683 2026] [security2:error] [pid 3137:tid 3137] [client 35.240.14.114:60708] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||harrisonwilde.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "harrisonwilde.com"] [uri "/z9x8c7v6b5-debug-trigger-harrisonwilde.com"] [unique_id "atNL0XrALqrVOlwOVe3BRQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-10-17 09:03:14
(2 hours ago)
{"level":"info","ts":1792227793.440612,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1792227793.440612,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.240.14.114","remote_port":"39850","client_ip":"35.240.14.114","proto":"HTTP/2.0","method":"POST","host":"status.gunnerstoday.com","uri":"/graphql","headers":{"Sec-Fetch-Mode":["cors"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Dest":["empty"],"Content-Type":["application/json"],"Sec-Fetch-Site":["same-origin"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Referer":["https://status.gunnerstoday.com"],"Origin":["https://status.gunnerstoday.com"],"Content-Length":["86"],"Accept-Language":["en-US,en;q=0.9"],"Accept":["*/*"],"Priority":["u=1, i"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Brave\";v=\"152\""]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name
...
show less
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 08:48:50
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.240.14.114 (114.14.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.14.114 (114.14.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 04:48:42.766794 2026] [security2:error] [pid 31936:tid 31936] [client 35.240.14.114:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globetechsecurities.com"] [uri "/img../.env"] [unique_id "atM2aiDiTivJItdQojGsLgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-10-17 08:14:31
(3 hours ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
🇬🇧
masterguru
2026-10-17 07:26:15
(4 hours ago)
Too much 404 requests in 1 minute. Operator GE matched 20 at IP:block_script. (46020-185)
Hacking
🇳🇱
Site.eu
2026-10-17 07:06:29
(4 hours ago)
Excessive 404/403 errors
Brute-Force
🇦🇺
rubixstudios
2026-10-17 06:32:02
(5 hours ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 06:29:31
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.240.14.114 (114.14.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.14.114 (114.14.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 02:29:27.008586 2026] [security2:error] [pid 14807:tid 14807] [client 35.240.14.114:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.gregquinn.com"] [uri "/.htpasswd"] [unique_id "atMVx8Nnh-pKQacnTr0RiAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-10-17 04:22:29
(7 hours ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000-122)
show less
Bad Web Bot
🇮🇹
VHosting
2026-10-17 04:15:04
(7 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-10-17 04:15:03
(7 hours ago)
Multiple WAF Violations
Web App Attack