2026-10-17 08:07:32
(5 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ES, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ES, Attack patterns: WordPress scanning
show less
Bad Web Bot
Web App Attack
2026-10-16 07:11:25
(1 day ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ES, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ES, Attack patterns: WordPress scanning
show less
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-13 18:37:38
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
solution.it
2026-10-13 17:03:48
(3 days ago)
[Tue Oct 13 19:03:48.640913 2026] [php7:error] [pid 3333038:tid 3333038] [client 212.30.33.70:41493] ...
show more
[Tue Oct 13 19:03:48.640913 2026] [php7:error] [pid 3333038:tid 3333038] [client 212.30.33.70:41493] script '/var/www/html/bypass.php' not found or unable to stat
show less
Web App Attack
🇳🇱
Alt255
2026-10-12 22:48:55
(4 days ago)
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 212.30.33.70 - - [13/Oct/2026:00:48:54 +0200] "GET /.wp/wso.php HTTP/1.1" 301 546 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-12 17:19:30
(4 days ago)
Multiple WAF Violations
Web App Attack
🇸🇪
vaia.cloud
2026-10-12 14:05:06
(4 days ago)
crowdsecurity/http-backdoors-attempts
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 03:49:02
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 212.30.33.70 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 212.30.33.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 23:48:58.742597 2026] [security2:error] [pid 19594:tid 19615] [client 212.30.33.70:28377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "property-management-companies-chicago.com"] [uri "/.env"] [unique_id "assHKo-v6jlbLDh8sIIVLQAAAVE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 01:52:36
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 212.30.33.70 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 212.30.33.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:52:29.827657 2026] [security2:error] [pid 6919:tid 6919] [client 212.30.33.70:52709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vonkugelgen.com"] [uri "/.env"] [unique_id "asrr3dlJGOCaLxsTOmqoKgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 01:19:47
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 212.30.33.70 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 212.30.33.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:19:41.491254 2026] [security2:error] [pid 17027:tid 17027] [client 212.30.33.70:39553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "urlpick.com"] [uri "/.env"] [unique_id "asrkLdYbtNsUEasykIrOVAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 18:44:03
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 212.30.33.70 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 212.30.33.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 14:43:55.795388 2026] [security2:error] [pid 11505:tid 11505] [client 212.30.33.70:42143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "naturalunfinishedfurniture.com"] [uri "/.env"] [unique_id "asaS6zJdXFtNhaWiXf_xRwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
factor1
2026-09-19 13:53:07
(3 weeks ago)
CrowdSec at saturn Reports Abuse
Web App Attack
🇮🇹
VHosting
2026-09-11 00:30:04
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇦
URAN Publishing Service
2026-08-23 19:09:36
(1 month ago)
[23/Aug/2026:22:09:36 +0300] -- 212.30.33.70 Ban reason: User-Agent Go-http-client
Bad Web Bot
Web App Attack
2026-08-22 00:24:15
(1 month ago)
denied traffic to a honeypot network. destination port 53.
Port Scan
Hacking