🇺🇸
TPI-Abuse
2026-10-09 15:08:23
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 11:08:19.940396 2026] [security2:error] [pid 2369:tid 2369] [client 172.70.111.150:11160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digitalracemedia.com"] [uri "/.htaccess"] [unique_id "askDY-Bd3AdehKl5CMvk2QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 06:31:54
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 02:31:49.046394 2026] [security2:error] [pid 14303:tid 14303] [client 172.70.111.150:10415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reciprodyne.com"] [uri "/.svn/entries"] [unique_id "asc41QQqIqWNBRdmNAFJjAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 00:51:08
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 20:51:00.900085 2026] [security2:error] [pid 5450:tid 5450] [client 172.70.111.150:9835] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pilates-slings.eu"] [uri "/.env.old"] [unique_id "asWXdMUVulpOo_9EZkcqsgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-05 15:29:52
(6 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 06:28:02
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 02:27:54.384919 2026] [security2:error] [pid 6830:tid 6830] [client 172.70.111.150:13096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "horsesaw.com"] [uri "/.git/config"] [unique_id "asNDaoOYFZWuSVFBLqhOlQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
securejdprop
2026-08-21 07:36:12
(1 month ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
🇧🇪
madeit
2026-08-06 04:05:58
(2 months ago)
Web App Attack
🇬🇧
CrystalMaker
2026-07-02 01:31:58
(3 months ago)
Vulnerability scan - GET /actuator/health HTTP/2.0
Hacking
🇳🇱
COMPLEX
2026-05-29 00:19:06
(4 months ago)
Unsolicited TCP traffic | Action: DROP | Port 443
Phishing
🇺🇸
freeutka
2026-05-05 19:51:21
(5 months ago)
WordPress brute-force login attempt on wp-login.php.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 05:35:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 01:35:53.903921 2026] [security2:error] [pid 4149:tid 4149] [client 172.70.111.150:12167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kuddlkat.com"] [uri "/.env.bak"] [unique_id "acoLuT9aH-JA9GU9FScQXgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 00:24:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 20:24:49.136510 2026] [security2:error] [pid 9927:tid 9927] [client 172.70.111.150:10840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.baystreet.news"] [uri "/.env.test"] [unique_id "ab820eeWSTPHh5DEtXWweQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 01:10:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 21:10:35.366029 2026] [security2:error] [pid 30318:tid 30318] [client 172.70.111.150:12451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "consolidatedoperationsgroup.com"] [uri "/.env.save"] [unique_id "ab3wC-tuagOZ23UqCvd2NQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:44:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:44:43.143448 2026] [security2:error] [pid 14117:tid 14117] [client 172.70.111.150:13011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomslawmd.com"] [uri "/.env.test"] [unique_id "ab3p-30vOwq7_ccYSQ9YkAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 08:24:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:24:00.156404 2026] [security2:error] [pid 24257:tid 24257] [client 172.70.111.150:12468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crypto.5995.us"] [uri "/server/.env"] [unique_id "ab0EIDc2YdOlp6TDImEbUwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
