🇧🇪
madeit
2026-10-08 21:30:42
(10 hours ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 15:35:52
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 11:35:30.902149 2026] [security2:error] [pid 12738:tid 12738] [client 172.70.110.33:10014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.midway-island.com"] [uri "/.env.dev"] [unique_id "ase4QniWfEriPjGhlIk5ggAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 00:46:27
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 20:46:19.766301 2026] [security2:error] [pid 20015:tid 20015] [client 172.70.110.33:11498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stukabird.com"] [uri "/.env.local"] [unique_id "asWWW4Px90Bowzc6CkhVkQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 02:22:52
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 22:22:46.940316 2026] [security2:error] [pid 22507:tid 22513] [client 172.70.110.33:13982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "taxelon.com"] [uri "/.htaccess"] [unique_id "asMJ9g-qt4PwMhkLZR1AywAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mawan
2026-08-22 05:47:45
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇮🇩
securejdprop
2026-08-21 10:21:34
(1 month ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
🇧🇷
chronos
2026-06-13 11:56:02
(3 months ago)
2026-06-13 08:39:12 UTC-3||Unauthorized connection attempt detected for port scanning
Port Scan
🇺🇸
TPI-Abuse
2026-03-26 19:50:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 15:50:35.490369 2026] [security2:error] [pid 23094:tid 23094] [client 172.70.110.33:10032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.teenybikinigirls.com"] [uri "/app/.env"] [unique_id "acWOC1VoomZ2-pM1i0zyiwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 19:41:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 15:41:38.567666 2026] [security2:error] [pid 31158:tid 31158] [client 172.70.110.33:13714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alejandrogorsse.com"] [uri "/.env"] [unique_id "acQ6ck9lgcoke38PV5JJBgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 01:01:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 21:01:08.995343 2026] [security2:error] [pid 17064:tid 17064] [client 172.70.110.33:9646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.konstantiasofokleous.com"] [uri "/.env.development"] [unique_id "ab8_VPmTQ_ixyEDwUbwayAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 01:43:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 21:43:21.821560 2026] [security2:error] [pid 11135:tid 11135] [client 172.70.110.33:10465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ptfea.org"] [uri "/.env.production"] [unique_id "ab33uQJziAyvgSPUgiWhHQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:03:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:03:42.685593 2026] [security2:error] [pid 2332:tid 2332] [client 172.70.110.33:11798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.advantagept.org"] [uri "/.env.backup"] [unique_id "ab3gXg4eDjomKXQoGnJ05gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 03:21:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:21:10.711365 2026] [security2:error] [pid 5537:tid 5537] [client 172.70.110.33:13588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gayebrown.tulsatvmemories.com"] [uri "/.envrc"] [unique_id "aby9Js7gvvuZ_BBsz0yjTAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 02:35:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:35:44.989156 2026] [security2:error] [pid 25059:tid 25059] [client 172.70.110.33:12497] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.northmyrtlebeachcondos.com"] [uri "/server/.env"] [unique_id "abyygGSq3IqOE9xydFIoPgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 01:58:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 21:58:10.516593 2026] [security2:error] [pid 7093:tid 7093] [client 172.70.110.33:11035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.debosden.com"] [uri "/.env.local"] [unique_id "abypsmieQtfKCpuLZj39KQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
