🇨🇿
Prcek
2026-10-08 00:24:37
(1 day ago)
PortScan:HOST=172.70.231.108,DPORTS=443
Port Scan
🇺🇸
TPI-Abuse
2026-10-06 13:03:36
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 09:03:29.873033 2026] [security2:error] [pid 19657:tid 19657] [client 172.70.231.108:10386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tell-me-first.com"] [uri "/.env"] [unique_id "asTxoQbkLCvmZyJ2XSec2gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Jacqb
2026-10-06 04:29:17
(3 days ago)
Adres potencjalnie niebezpieczny
Brute-Force
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-05 06:54:15
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 02:54:10.337037 2026] [security2:error] [pid 18035:tid 18035] [client 172.70.231.108:11280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kaleidoscope-glass.com"] [uri "/.htaccess"] [unique_id "asNJksPNYFrqyZ_w7neiYwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-03 07:04:26
(6 days ago)
Web App Attack
🇧🇪
madeit
2026-08-23 09:31:27
(1 month ago)
Web App Attack
🇮🇩
securejdprop
2026-08-21 06:39:16
(1 month ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
🇩🇪
acadeova
2026-06-03 02:14:57
(4 months ago)
🚨 Recon detected (nft drop)
SRC=172.70.231.108
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(jour ...
show more
🚨 Recon detected (nft drop)
SRC=172.70.231.108
Observed=TCP dpt=80 in=enp0s6 ttl=54
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
🇩🇪
acadeova
2026-05-31 11:38:13
(4 months ago)
🚨 Recon detected (nft drop)
SRC=172.70.231.108
Observed=TCP dpt=80 in=enp0s6 ttl=57
Time=recent(jour ...
show more
🚨 Recon detected (nft drop)
SRC=172.70.231.108
Observed=TCP dpt=80 in=enp0s6 ttl=57
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
🇩🇪
acadeova
2026-05-23 08:58:21
(4 months ago)
🚨 Recon detected (nft drop)
SRC=172.70.231.108
Observed=TCP dpt=80 in=enp0s6 ttl=57
Time=recent(jour ...
show more
🚨 Recon detected (nft drop)
SRC=172.70.231.108
Observed=TCP dpt=80 in=enp0s6 ttl=57
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
🇺🇸
TPI-Abuse
2026-04-02 12:52:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 08:52:40.692324 2026] [security2:error] [pid 26542:tid 26542] [client 172.70.231.108:10546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.microbooty.com"] [uri "/.env.dev.local"] [unique_id "ac5mmFi4hZyAqHzjDAzn9AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 23:30:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 19:30:31.729470 2026] [security2:error] [pid 28967:tid 28967] [client 172.70.231.108:10573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.alejandrogorsse.com"] [uri "/.env.production"] [unique_id "ac2ql5S-jp-stgoUPmiPywAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 03:42:00
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 23:41:56.459190 2026] [security2:error] [pid 23124:tid 23124] [client 172.70.231.108:10266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.consultnv.com"] [uri "/.env.dist"] [unique_id "acX8hDyRpsKLVqEoz2ZbjQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 16:16:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 12:16:33.224187 2026] [security2:error] [pid 8348:tid 8348] [client 172.70.231.108:13502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.marinestorage.com"] [uri "/.env~"] [unique_id "acVb4bTfj0ZrmkQCy7EZwQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 13:09:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 09:09:21.306068 2026] [security2:error] [pid 1486:tid 1486] [client 172.70.231.108:10037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ohanameetup.party"] [uri "/config/.env.local"] [unique_id "acUwAdxCHwYlaDMxmxunbQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
