JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

67.21.33.212

Neutral Activity

Abuse confidence score ?

0% Low Risk

15 reports

11 reporters · latest 11 months ago

ISP	H4Y Technologies LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS397373
Domain Name	h4y.us
Country	🇺🇸 United States of America
City	Bend, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

67.21.33.212 has been reported 15 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 67.21.33.212

This IP address has been reported a total of 15 times from 11 distinct sources. 67.21.33.212 was first reported on June 12th 2025, and the most recent report was 11 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Tom USA	2025-10-09 23:31:00 (11 months ago)	IM360 WAF: Laravel Apps Leaking Secrets exploit attempt\|\|MV:androxgh0st\|\|RSV:7.36\|\|T:APACHE\|\| M360 ... show more IM360 WAF: Laravel Apps Leaking Secrets exploit attempt\|\|MV:androxgh0st\|\|RSV:7.36\|\|T:APACHE\|\| M360 WAF: Laravel .env file access\|\|RSV:7.36\|\|T:APACHE\|\|QS:\|\| show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-10-09 23:17:30 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 67.21.33.212 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 67.21.33.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 09 19:17:25.017284 2025] [security2:error] [pid 5545:tid 5545] [client 67.21.33.212:63128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.143"] [uri "/.env"] [unique_id "aOhChajn-hP9iTmKckIKyQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 www.tana.it	2025-10-09 23:01:16 (11 months ago)	PHP scan	Web App Attack
🇺🇸 TPI-Abuse	2025-10-09 22:20:28 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 67.21.33.212 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 67.21.33.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 09 18:20:24.112920 2025] [security2:error] [pid 20582:tid 20582] [client 67.21.33.212:63680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.203"] [uri "/.env"] [unique_id "aOg1KF9qJSEXVaH2F9_MBwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 alecj.com	2025-10-09 22:18:05 (11 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch	Web App Attack
🇩🇪 Teufel100	2025-10-09 22:00:23 (11 months ago)	ModSecurity rejected a query'	Hacking Brute-Force Web App Attack
🇺🇸 OceanTreasure	2025-10-09 21:20:04 (11 months ago)	tcp/80; /.env* dotfile probe (R21): "GET /.env" @ 2025-10-09T21:19:52Z	Web App Attack
🇺🇸 TPI-Abuse	2025-10-09 21:12:30 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 67.21.33.212 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 67.21.33.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 09 17:12:26.289381 2025] [security2:error] [pid 29358:tid 29358] [client 67.21.33.212:56512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.150"] [uri "/.env"] [unique_id "aOglOhG0EsyNuMTVhHf6JgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 jaapeldoorn	2025-10-09 20:54:34 (11 months ago)	[Thu Oct 09 22:54:31.047755 2025] [authz_core:error] [pid 497088:tid 497129] [client 67.21.33.212:58 ... show more [Thu Oct 09 22:54:31.047755 2025] [authz_core:error] [pid 497088:tid 497129] [client 67.21.33.212:58330] AH01630: client denied by server configuration: /var/www [Thu Oct 09 22:54:31.664532 2025] [authz_core:error] [pid 497088:tid 497128] [client 67.21.33.212:58376] AH01630: client denied by server configuration: /var/www [Thu Oct 09 22:54:32.764112 2025] [authz_core:error] [pid 497088:tid 497141] [client 67.21.33.212:58441] AH01630: client denied by server configuration: /var/www ... show less	Brute-Force
🇩🇪 Honeypot-EU-Fru	2025-10-09 20:47:45 (11 months ago)	67.21.33.212 - - [redacted] [09/Oct/2025:22:47:43 +0200] "GET /.env HTTP/1.1" 404 188 "-" "Mozilla/5 ... show more 67.21.33.212 - - [redacted] [09/Oct/2025:22:47:43 +0200] "GET /.env HTTP/1.1" 404 188 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-10-09 20:12:19 (11 months ago)	Port probe to tcp/80 (http) [srv127]	Port Scan Bad Web Bot Web App Attack
🇩🇪 _ArminS_	2025-10-09 20:07:49 (11 months ago)	WEB-Scan 54088:80 detected 2025.10.09 22:07:49 blocked until 2025.11.28 14:10:36	Port Scan
🇺🇸 TPI-Abuse	2025-10-09 20:04:32 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 67.21.33.212 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 67.21.33.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 09 16:04:25.135179 2025] [security2:error] [pid 14429:tid 14429] [client 67.21.33.212:64882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.48"] [uri "/.env"] [unique_id "aOgVSeGmJ8qRlw2xM9iyPgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-09 19:47:52 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 67.21.33.212 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 67.21.33.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 09 15:47:49.282388 2025] [security2:error] [pid 26078:tid 26078] [client 67.21.33.212:58659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.183"] [uri "/.env"] [unique_id "aOgRZVky4SINF5bp48_L8AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-12 16:02:21 (1 year ago)	Web attack	Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.135

🇫🇮 157.180.57.79

🇳🇱 77.239.124.177

🇺🇸 70.169.4.117

🇲🇾 47.254.255.62

🇺🇸 40.76.138.219

🇬🇧 34.105.232.138

🇮🇳 34.93.134.173

🇺🇸 188.114.97.11

🇧🇷 177.19.165.90

🇺🇦 176.36.139.231

🇧🇩 160.236.8.28

🇩🇿 154.248.105.147

🇧🇬 46.10.201.90

🇺🇸 20.46.232.164

🇵🇰 202.47.54.169

🇵🇰 175.107.218.32

🇻🇳 171.233.47.155

🇰🇷 121.188.249.31

🇳🇱 109.160.32.143