🇹🇷
muratkaya665
2026-07-20 02:03:23
(2 days ago)
IPS Attack Blocked by server.mura******.com.tr Fortigate-80E. Attack Name: Atlassian.Server.S.Endpoi ...
show more
IPS Attack Blocked by server.mura******.com.tr Fortigate-80E. Attack Name: Atlassian.Server.S.Endpoint.Information.Disclosure. Dest Port: 80. Service: HTTP. Message: applications3: Atlassian.Server.S.Endpoint.Information.Disclosure.
show less
Hacking
🇺🇸
TPI-Abuse
2026-07-15 20:53:24
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 16:53:17.403383 2026] [security2:error] [pid 5727:tid 5727] [client 172.70.110.34:11549] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.tekbit.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.tekbit.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "alfzPeS0VuvzvgVNTRGBPQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-07-12 04:08:54
(1 week ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 04:49:04
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 00:48:57.793713 2026] [security2:error] [pid 4607:tid 4607] [client 172.70.110.34:22464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.johnprimerano.com"] [uri "/.env.old"] [unique_id "ajInOdBIpabkRQrFuJHtPgAAACo"], referer: https://www.google.com/search?q=webmail.johnprimerano.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
WebServ
2026-04-29 06:17:21
(2 months ago)
Blocked by ufw after 5 attempts in last 300s.
Brute-Force
🇳🇱
homeshowdomain.nl
2026-04-20 22:02:39
(3 months ago)
Auto-ban: >3000 req/min op 2026-04-20
Web App Attack
SSH
Hacking
🇦🇺
oncord
2026-04-19 14:42:07
(3 months ago)
Form spam
Web Spam
🇺🇸
mnsf
2026-04-02 05:06:18
(3 months ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 05:55:52
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 01:55:48.290344 2026] [security2:error] [pid 9992:tid 9992] [client 172.70.110.34:10353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.teenybikinigirls.com"] [uri "/.env.test"] [unique_id "acth5I44eXSVVcwNt_HJNQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 10:18:19
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 06:18:14.730383 2026] [security2:error] [pid 18661:tid 18661] [client 172.70.110.34:13418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.batonrougecustomcabinets.com"] [uri "/.env1"] [unique_id "acpN5hVetTcEdH4IfSZQCAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 18:31:08
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 14:31:03.012478 2026] [security2:error] [pid 7395:tid 7395] [client 172.70.110.34:12991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.pastorg.com"] [uri "/.env"] [unique_id "acA1Z6ckiBJAf5eKyMIojAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:03:28
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:03:23.850132 2026] [security2:error] [pid 2599:tid 2599] [client 172.70.110.34:14297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.advantagept.org"] [uri "/.env.development"] [unique_id "ab3gS3aL0TIH381M_w-VSgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 08:24:01
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:23:54.965544 2026] [security2:error] [pid 2239:tid 2239] [client 172.70.110.34:13847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crypto.5995.us"] [uri "/docker/.env"] [unique_id "ab0EGn15uUJkHO1sjxPAlwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 07:04:19
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:04:14.073819 2026] [security2:error] [pid 4392:tid 4392] [client 172.70.110.34:13897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.setx-law.com"] [uri "/.envrc"] [unique_id "abzxbr5J_aLr1Rd9pHyqRgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 06:48:55
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 02:48:48.542678 2026] [security2:error] [pid 28347:tid 28347] [client 172.70.110.34:13743] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.partnersforaccess.net"] [uri "/.env.local"] [unique_id "abzt0BLuwDIxBxwOSNEJagAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack