🇧🇪
madeit
2026-09-10 22:10:38
(9 hours ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 08:47:40
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 04:47:34.356969 2026] [security2:error] [pid 9865:tid 9865] [client 172.70.174.205:12710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avanyupublishing.com"] [uri "/.git/HEAD"] [unique_id "ao1WpowHArYS8Arw-5dQ1AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
nekopavel
2026-08-23 09:58:49
(2 weeks ago)
172.70.174.205 - - [23/Aug/2026:11:58:47 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
172.70.174.205 - - [23/Aug/2026:11:58:47 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162"-" thighs.moe "-""0.000" "-""Ashburn" "US"
172.70.174.205 - - [23/Aug/2026:11:58:47 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162"-" thighs.moe "-""0.000" "-""Ashburn" "US"
172.70.174.205 - - [23/Aug/2026:11:58:47 +0200]"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162"-" thighs.moe "-""0.000" "-""Ashburn" "US"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇮🇩
securejdprop
2026-08-21 09:05:44
(2 weeks ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
🇺🇸
TPI-Abuse
2026-07-08 01:30:28
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 21:30:18.870699 2026] [security2:error] [pid 19729:tid 19729] [client 172.70.174.205:48509] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kln.ne.jp|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kln.ne.jp"] [uri "/jehovah/yarn-error.log"] [unique_id "ak2oKjOK_S3zE2JgfmedpwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 11:39:46
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 07:39:36.377024 2026] [security2:error] [pid 18761:tid 18761] [client 172.70.174.205:9289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeffjastro.com.jeffj.net"] [uri "/.env.save"] [unique_id "agcF-DbGAmT3L3RN8ndMdwAAABI"], referer: https://www.google.com/search?q=jeffjastro.com.jeffj.net
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 10:49:00
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 06:48:54.642421 2026] [security2:error] [pid 899442:tid 899442] [client 172.70.174.205:11017] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.braunhausmedia.com"] [uri "/.env.development"] [unique_id "adThFsu3KOLsjwCV1zfHEQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 18:12:51
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 14:12:46.294279 2026] [security2:error] [pid 361162:tid 361162] [client 172.70.174.205:11988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.hydrogenplus.net"] [uri "/.env.prod"] [unique_id "adP3nhLzamHtGceZwqX7BQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 05:48:58
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 01:48:49.110642 2026] [security2:error] [pid 9056:tid 9103] [client 172.70.174.205:12234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.schoprint.com"] [uri "/.git/refs/heads/master"] [unique_id "adH3wR4PzY1uQnhw9O2JBgAAAUY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 02:00:57
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 22:00:53.948562 2026] [security2:error] [pid 18329:tid 18329] [client 172.70.174.205:12711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ouguergouz.com"] [uri "/.env.dev"] [unique_id "adHCVdLHGJdYxEI9oPq76gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-04-04 15:06:05
(5 months ago)
Scanning/Probing (16)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 02:51:15
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 22:51:08.997501 2026] [security2:error] [pid 588:tid 588] [client 172.70.174.205:10592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.taekwondoit.com"] [uri "/about-us/private/.env"] [unique_id "adB8nNIUaYx15LUbVtliVgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 19:05:24
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 15:05:19.863580 2026] [security2:error] [pid 20930:tid 20930] [client 172.70.174.205:10818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ambarsolar.com"] [uri "/.env.bak"] [unique_id "adAPb3vqw2JO6ehOVN8u9wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 17:55:12
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 13:54:54.466027 2026] [security2:error] [pid 22512:tid 22512] [client 172.70.174.205:14190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "specialtycomputer.com"] [uri "/app/.env"] [unique_id "ac_-7v2m0ed3jvJGlMqkRgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 16:48:09
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 12:48:03.169518 2026] [security2:error] [pid 6390:tid 6390] [client 172.70.174.205:13697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.roommategames.banis-associates.com"] [uri "/.env.production.local"] [unique_id "ac_vQ3jmHq0iaI1qwABqZgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
