🇯🇵
S.O.B.A. Dev.
2026-10-27 11:07:27
(1 day ago)
Persistent port scanning or vulnerability scanning
Port Scan
2026-10-18 18:09:31
(1 week ago)
IP matched detection query many 3xx errors.
Brute-Force
🇧🇪
madeit
2026-10-08 05:39:06
(2 weeks ago)
Web App Attack
🇨🇿
Prcek
2026-10-04 06:22:23
(3 weeks ago)
PortScan:HOST=172.70.34.120,DPORTS=443
Port Scan
2026-09-26 22:30:05
(1 month ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇧🇪
madeit
2026-09-26 07:46:25
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-08-25 12:28:12
(2 months ago)
Web App Attack
2026-08-18 03:23:53
(2 months ago)
CrowdSec: crowdsecurity/vpatch-git-config
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-13 17:57:02
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 13:56:56.330123 2026] [security2:error] [pid 18663:tid 18663] [client 172.70.34.120:9919] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 13:56:56.330123 2026] [security2:error] [pid 18663:tid 18663] [client 172.70.34.120:9919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coast22.net"] [uri "/.git/config"] [unique_id "an4FaBoGC6bWzwMdy4fFSwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-11 07:33:12
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 03:33:07.107848 2026] [security2:error] [pid 3713200:tid 3713200] [client 172.70.34.120:1403 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 03:33:07.107848 2026] [security2:error] [pid 3713200:tid 3713200] [client 172.70.34.120:14039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.newlifecommunitycare.org"] [uri "/.git/HEAD"] [unique_id "anrQM1sPMTZ7fwCxz-i5CwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-11 04:56:44
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 00:56:38.040889 2026] [security2:error] [pid 2596134:tid 2596134] [client 172.70.34.120:1300 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 00:56:38.040889 2026] [security2:error] [pid 2596134:tid 2596134] [client 172.70.34.120:13003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.zztp.ws"] [uri "/.git/HEAD"] [unique_id "anqrhuW4UrorjyQmxx6kdwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-11 02:08:45
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 22:08:39.106304 2026] [security2:error] [pid 500:tid 500] [client 172.70.34.120:13963] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 22:08:39.106304 2026] [security2:error] [pid 500:tid 500] [client 172.70.34.120:13963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.paxbrewing.com"] [uri "/.git/HEAD"] [unique_id "anqEJ_k2s77D4UYbZtJ5JAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-07 04:12:02
(2 months ago)
Web App Attack
🇺🇸
wimaxnz
2026-05-17 01:47:44
(5 months ago)
Automated report from 247 Guardian: repeated malicious activity detected. | reason=nginx_badpath
Brute-Force
SSH
Port Scan
2026-05-14 08:04:55
(5 months ago)
(caddyscan) Scanner path probe from 172.70.34.120 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.70.34.120 - - [14/May/2026:07:30:58 +0000] "GET /.git/config HTTP/1. ...
show more
(caddyscan) Scanner path probe from 172.70.34.120 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.70.34.120 - - [14/May/2026:07:30:58 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.70.34.120 - - [14/May/2026:07:42:49 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.70.34.120 - - [14/May/2026:07:48:17 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.70.34.120 - - [14/May/2026:08:04:19 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.70.34.120 - - [14/May/2026:08:04:54 +0000] "GET /.git/config HTTP/1.1"
show less
Port Scan
