๐ช๐ธ
tutaim.com
2026-10-11 22:00:08
(5 days ago)
โ [12/10/26] This IP has been detected performing multiple attacks on websites (1716 attempts blocke ...
show more
โ [12/10/26] This IP has been detected performing multiple attacks on websites (1716 attempts blocked). Potential malicious activity.
show less
Brute-Force
SSH
Web App Attack
FTP Brute-Force
๐บ๐ธ
VirtualAllocEx
2026-10-11 14:21:19
(5 days ago)
Cloudflare automated security report.
Events: 9.
Sources: firewallCustom.
Request paths: /.env.prod, ...
show more
Cloudflare automated security report.
Events: 9.
Sources: firewallCustom.
Request paths: /.env.prod, /admin/.env, /docker/.env, /scripts/.env, /apps/.env.
Countries: JP.
ASNs: 396982.
User agents: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot), Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot, Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot).
show less
Web App Attack
๐ช๐ธ
tutaim.com
2026-10-11 13:00:05
(5 days ago)
โ [11/10/26] This IP has been detected performing multiple attacks on websites (1716 attempts blocke ...
show more
โ [11/10/26] This IP has been detected performing multiple attacks on websites (1716 attempts blocked). Potential malicious activity.
show less
Brute-Force
SSH
Web App Attack
FTP Brute-Force
๐บ๐ธ
VirtualAllocEx
2026-10-11 12:10:37
(5 days ago)
Cloudflare automated security report.
Action: BLOCK; events: 5.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 5.
Sources: firewallCustom.
Request paths: /app/.env, /server/.env, /dist/.env, /admin, /@fs/.env.
Countries: JP.
ASNs: 396982.
User agents: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot), CCBot/2.0 (https://commoncrawl.org/faq/), Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler), Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] ).
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 10:00:16
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.146.62.167 (167.62.146.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.146.62.167 (167.62.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 06:00:05.131523 2026] [security2:error] [pid 18020:tid 18020] [client 34.146.62.167:49188] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cier.xyz|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cier.xyz"] [uri "/localhost.key"] [unique_id "asteJZ1FzieJfz0OCu1McAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 09:27:58
(5 days ago)
Cloudflare automated security report.
Action: BLOCK; events: 12.
Sources: firewallCustom.
Request pa ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 12.
Sources: firewallCustom.
Request paths: /media../.env, /public../.env, /api/console/api_server, /api/orders/..%2f..%2fproc/self/environ, /api/orders/..%2fadmin/config.json.
Countries: JP.
ASNs: 396982.
User agents: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot, Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36, Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot, DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot).
show less
Web App Attack
๐ช๐ธ
tutaim.com
2026-10-11 09:00:04
(5 days ago)
โ [11/10/26] This IP has been detected performing multiple attacks on websites (1184 attempts blocke ...
show more
โ [11/10/26] This IP has been detected performing multiple attacks on websites (1184 attempts blocked). Potential malicious activity.
show less
Brute-Force
SSH
Web App Attack
FTP Brute-Force
๐บ๐ธ
VirtualAllocEx
2026-10-11 08:26:45
(5 days ago)
Cloudflare automated security report.
Action: BLOCK; events: 10.
Sources: firewallCustom.
Request pa ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 10.
Sources: firewallCustom.
Request paths: /conf/.env, /project/.env, /.env::$DATA, /.env.local::$DATA, /api/data/..%2f..%2f.env.
Countries: JP.
ASNs: 396982.
User agents: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot), Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/), CCBot/2.0 (https://commoncrawl.org/faq/), Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/), Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html).
show less
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 06:25:11
(6 days ago)
Cloudflare automated security report.
Action: BLOCK; events: 9.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 9.
Sources: firewallCustom.
Request paths: //.env, /api/uploads/%2e%2e%2f%2e%2e%2f.env, /api/orders/..%2fadmin/config.json, /.env.local, /.env.development::$DATA.
Countries: JP.
ASNs: 396982.
User agents: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/), Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot), DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot, Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/).
show less
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 05:39:34
(6 days ago)
Cloudflare automated security report.
Action: BLOCK; events: 8.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 8.
Sources: firewallCustom.
Request paths: /id_rsa, /assets../.env, /.env.production::$DATA, /.env.development, /api/orders/..%2fadmin/config.json.
Countries: JP.
ASNs: 396982.
User agents: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot, Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot), Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot).
show less
Web App Attack
๐ช๐ธ
tutaim.com
2026-10-11 04:00:10
(6 days ago)
โ [11/10/26] This IP has been detected performing multiple attacks on websites (592 attempts blocked ...
show more
โ [11/10/26] This IP has been detected performing multiple attacks on websites (592 attempts blocked). Potential malicious activity.
show less
Brute-Force
SSH
Web App Attack
FTP Brute-Force
๐ฉ๐ช
hbrks
2026-10-11 03:26:57
(6 days ago)
144 attack(s) detected, such as these: {"event":"web_block","ip":"34.146.62.167","host":"p4u.xyz","r ...
show more
144 attack(s) detected, such as these: {"event":"web_block","ip":"34.146.62.167","host":"p4u.xyz","request":"GET /_designDraftToken_.TRPwOa14.js HTTP/2.0","user_agent":"","reason":"Status-404","timestamp":"2026-10-11T03:26:57 00:00","logentry":"p4u.xyz 34.146.62.167 - - [11/Oct/2026:03:26:57 0000] \"GET /_designDraftToken_.TRPwOa14.js HTTP/2.0\" 404 0 \"-\" \"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36\" \"172.25.79.37:5000\""} * Report Details *: https://p4u.xyz/ZESME0DKGZT/1* IP Details *: https://p4u.xyz/ZESME0DKGZT/2
show less
Web Spam
Hacking
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-11 03:25:57
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.62.167 (167.62.146.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.62.167 (167.62.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 23:25:49.432693 2026] [security2:error] [pid 13137:tid 13163] [client 34.146.62.167:40446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oftv.xyz"] [uri "/.git/HEAD"] [unique_id "assBvfAvfSNvHoRtJqSY2gAAANc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 03:10:48
(6 days ago)
Cloudflare automated security report.
Action: BLOCK; events: 6.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 6.
Sources: firewallCustom.
Request paths: /.env.prod, /userfiles, /%2eenv, /.env.local::$DATA, /.env.development.
Countries: JP.
ASNs: 396982.
User agents: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/), DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot), Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/).
show less
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 02:36:00
(6 days ago)
Cloudflare automated security report.
Action: BLOCK; events: 8.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 8.
Sources: firewallCustom.
Request paths: //.env, /%2eenv, /build../.env, /js../.env, /.svn/entries.
Countries: JP.
ASNs: 396982.
User agents: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/), Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot, Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/), Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot).
show less
Web App Attack