🇩🇪
pltcldvlpr
2026-06-14 23:32:14
(1 month ago)
Bogus Useragent: 185.76.9.37 - - [14/Jun/2026:14:57:12 +0200] "GET /protocol?id=th_6_131&offset=250& ...
show more
Bogus Useragent: 185.76.9.37 - - [14/Jun/2026:14:57:12 +0200] "GET /protocol?id=th_6_131&offset=250&seq=278 HTTP/1.1" 403 5 "-" "Opera/9.44.(Windows CE; sq-ML) Presto/2.9.182 Version/10.00" asn=60068 org="Datacamp Limited" country=SE
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-17 04:39:33
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 185.76.9.37 (unn-185-76-9-37.datapacket.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 185.76.9.37 (unn-185-76-9-37.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 00:39:27.497784 2026] [security2:error] [pid 18973:tid 18973] [client 185.76.9.37:51594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.loriatrading.com"] [uri "/config/.env"] [unique_id "aglGf_iPWMpjeNGBxRsTiQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-05-17 04:34:47
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 02:06:43
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 185.76.9.37 (unn-185-76-9-37.datapacket.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 185.76.9.37 (unn-185-76-9-37.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 22:06:38.317678 2026] [security2:error] [pid 15008:tid 15008] [client 185.76.9.37:54748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.115"] [uri "/.env"] [unique_id "agkirhy2xvWtgEHrqbHE8AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-05-17 01:51:43
(2 months ago)
http-sensitive-files - IP: 185.76.9.37 - time="2026-05-17T03:51:43+02:00" level=info msg="(555f66b4 ...
show more
http-sensitive-files - IP: 185.76.9.37 - time="2026-05-17T03:51:43+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 185.76.9.37 (SE/60068) : 4h ban on Ip 185.76.9.37" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 01:45:48
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 185.76.9.37 (unn-185-76-9-37.datapacket.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 185.76.9.37 (unn-185-76-9-37.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 21:45:45.045954 2026] [security2:error] [pid 11590:tid 11590] [client 185.76.9.37:55698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tankercontrol.com"] [uri "/config/.env"] [unique_id "agkdyXm_b0fvpQ_XGbBfGAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-22 17:03:41
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 185.76.9.37 (unn-185-76-9-37.datapacket.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 185.76.9.37 (unn-185-76-9-37.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 13:03:33.727152 2026] [security2:error] [pid 8776:tid 8776] [client 185.76.9.37:47206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.siouxfallslimos.com"] [uri "/.env"] [unique_id "aej_ZZp0oGNQ39GQ23dDGQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
gtheo99
2026-04-18 23:59:58
(3 months ago)
(cpanel) Failed cPanel login from 185.76.9.37 (SE/Sweden/unn-185-76-9-37.datapacket.com): 2 in the l ...
show more
(cpanel) Failed cPanel login from 185.76.9.37 (SE/Sweden/unn-185-76-9-37.datapacket.com): 2 in the last 900 secs
show less
Brute-Force
Web App Attack
🇺🇸
nowyouknow
2026-04-10 04:14:34
(3 months ago)
(From [email protected] ) Greetings,
Struggling to get a flawless sun-kissed look?
Our ...
show more
(From [email protected] ) Greetings,
Struggling to get a flawless sun-kissed look?
Our exclusive cut-outs and fabrics let the sun hit evenly.
Feel confident with flawless tanning and stylish swimwear.
Get your perfect tan swimsuit here:
https://tanthroughchic.shop
With style and sun-kissed vibes.
show less
Phishing
Web Spam
🇮🇳
liveaspankaj
2026-03-04 18:58:39
(4 months ago)
DDoS attack: 100 requests in 5m (GET / or repair.php).
DDoS Attack
🇫🇷
COMAITE
2026-01-27 16:27:13
(5 months ago)
SQL injection attempt from 185.76.9.37.
Web App Attack
🇷🇺
Agrohim
2026-01-10 10:31:33
(6 months ago)
Gate Inet blocked for categories:
DDoS Attack
Ping of Death
Port Scan
Hacking
Brute-Force
🇳🇿
Antinson
2026-01-03 08:06:14
(6 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
ipblock.com
2026-01-03 06:26:00
(6 months ago)
IPBlock protected site ID [4055-d][s=01].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-02 16:58:32
(6 months ago)
(mod_security) mod_security (id:240000) triggered by 185.76.9.37 (unn-185-76-9-37.datapacket.com): 1 ...
show more
(mod_security) mod_security (id:240000) triggered by 185.76.9.37 (unn-185-76-9-37.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 11:58:27.674218 2026] [security2:error] [pid 13754:tid 13754] [client 185.76.9.37:50796] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.newenglandchristmascards.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.newenglandchristmascards.com"] [uri "/images/stories/themes.php"] [unique_id "aVf5M_4QY6BWQgF93JsSlAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack