🇻🇮
Axel
2026-10-22 23:37:10
(2 hours ago)
WAF/ModSecurity blocked 4 malicious request(s) (HTTP 403) from this IP. Activity: Found User-Agent a ...
show more
WAF/ModSecurity blocked 4 malicious request(s) (HTTP 403) from this IP. Activity: Found User-Agent associated with scripting/generic HTTP client x4. Latest: 2026-10-22T23:37:10Z.
show less
Hacking
Web App Attack
🇦🇺
2000cn.com.au
2026-10-22 23:17:36
(3 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇹🇷
Jova
2026-10-22 23:14:24
(3 hours ago)
Probing a web server for sensitive files (.env, backups, configs): 3 requests.
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-22 21:59:47
(4 hours ago)
Auto-ban: >3000 req/min op 2026-10-22
Web App Attack
SSH
Hacking
2026-10-22 21:16:03
(5 hours ago)
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 19:46:21
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 15:46:14.546706 2026] [security2:error] [pid 18320:tid 18320] [client 187.40.234.205:61660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baklitjewelry.com"] [uri "/.env"] [unique_id "atpoBq4hD592CAwKocpTUQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-22 19:42:44
(6 hours ago)
Web probing (3 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CR ...
show more
Web probing (3 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 17:45:47
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 13:45:39.883550 2026] [security2:error] [pid 13063:tid 13063] [client 187.40.234.205:29084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bazzoli.com"] [uri "/.env"] [unique_id "atpLw3CasPYWw6RMQrtu7wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 17:14:27
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 13:14:23.244994 2026] [security2:error] [pid 4855:tid 4855] [client 187.40.234.205:53218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bosdkbook.com"] [uri "/.env"] [unique_id "atpEb3kuQmvyyN_eR4F2-gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-22 16:23:18
(10 hours ago)
Web App Attack
🇳🇱
Alt255
2026-10-22 15:52:54
(10 hours ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 187 ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 187.40.234.205 - - \[22/Oct/2026:17:52:43 +0200\] "GET /.env HTTP/1.1" 301 491 "-" "python-requests/2.32.4"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 15:42:05
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:41:56.781293 2026] [security2:error] [pid 15375:tid 15375] [client 187.40.234.205:50670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bergenoaks.com"] [uri "/.env"] [unique_id "atouxAbuqnZ-DBNPFzvtfAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-22 14:57:00
(11 hours ago)
block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-22 14:54:02
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 10:53:57.364790 2026] [security2:error] [pid 19581:tid 19581] [client 187.40.234.205:37676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bikiniadvice.com"] [uri "/.env"] [unique_id "atojhUTfrZ2h7JfB_WV_ZgAAAFs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 14:17:08
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 10:17:01.378904 2026] [security2:error] [pid 30423:tid 30423] [client 187.40.234.205:62244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blockdredge.com"] [uri "/.env"] [unique_id "atoa3evrsYZ6A3zTt_fksAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack