🇺🇸
TPI-Abuse
2026-10-21 08:37:11
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 04:37:06.537769 2026] [security2:error] [pid 20479:tid 20479] [client 187.40.234.144:63936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "awakenings.info"] [uri "/.env"] [unique_id "ath5srDC0CN6E3S_9GDyIQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 07:22:24
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 03:22:19.698114 2026] [security2:error] [pid 4545:tid 4545] [client 187.40.234.144:37088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bentechconstruction.com"] [uri "/.env"] [unique_id "athoK8HtYf2K0fuacjmS_wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 04:42:55
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 00:42:50.376250 2026] [security2:error] [pid 22207:tid 22207] [client 187.40.234.144:38724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigredgraphicdesign.com"] [uri "/.env"] [unique_id "athCyqaSUnunkBAi1uKbiAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
alessio loto
2026-10-21 04:04:02
(6 hours ago)
WAF Detection: Security_Scanner_Blocked (Abusive IP). AI Confirmed Attack Payload.
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-21 01:43:20
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:43:15.157277 2026] [security2:error] [pid 15708:tid 15708] [client 187.40.234.144:63854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bennoyes.com"] [uri "/.env"] [unique_id "atgYs1ZfcM1e5IDKQy0u3QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 01:24:30
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:24:26.450230 2026] [security2:error] [pid 24623:tid 24630] [client 187.40.234.144:59162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "benningtonlawoffice.com"] [uri "/.env"] [unique_id "atgUSiGKFWQg88KNUUtetAAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 22:40:52
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 18:40:47.804930 2026] [security2:error] [pid 15403:tid 15403] [client 187.40.234.144:3024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bruskiewitz.com"] [uri "/.env"] [unique_id "atft74st7k6Eogz4E7ziSgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-20 21:59:46
(12 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-19.
show less
Web App Attack
SSH
Hacking
🇳🇱
Alt255
2026-10-20 19:45:59
(14 hours ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 187.40.234.144 - - [20/Oct/2026:21:45:51 +0200] "GET /.env HTTP/1.1" 301 591 "-" "python-requests/2.32.4"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 19:08:45
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 15:08:39.953316 2026] [security2:error] [pid 4130:tid 4130] [client 187.40.234.144:59550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cinziallc.com"] [uri "/.env"] [unique_id "ate8N0-hJ5_7LZhWmlpn_QAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 17:54:35
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 13:54:30.872555 2026] [security2:error] [pid 7787:tid 7787] [client 187.40.234.144:11304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "concreting.net"] [uri "/.env"] [unique_id "ateq1qL_wnXhirfM_MRFdgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 17:22:22
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 13:22:18.238648 2026] [security2:error] [pid 2115:tid 2115] [client 187.40.234.144:46614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caralis.com"] [uri "/.env"] [unique_id "atejSlTs4aKa3sPyLzTSawAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 15:29:05
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 11:28:59.878840 2026] [security2:error] [pid 23141:tid 23141] [client 187.40.234.144:24276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brunerdevelopment.com"] [uri "/.env"] [unique_id "ateIu740nH2t657YY5lS2gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 14:13:09
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 10:13:05.606480 2026] [security2:error] [pid 15431:tid 15431] [client 187.40.234.144:23494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coyotebytes.com"] [uri "/.env"] [unique_id "atd28bBk3dcuW_rnTzTSowAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 13:49:26
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 09:49:22.258624 2026] [security2:error] [pid 14985:tid 14985] [client 187.40.234.144:62468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cmyk-intl.com"] [uri "/.env"] [unique_id "atdxYjQ2s9xZI2tbD8whdQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
