🇧🇪
Ivo Vynckier
2026-10-28 15:13:00
(6 hours ago)
187.40.234.223 - - [28/Oct/2026:11:41:44 +0100] "GET /.env HTTP/1.1" 403 117 "-" "python-requests/2.32.4"
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 13:33:47
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 09:33:44.237919 2026] [security2:error] [pid 23831:tid 23831] [client 187.40.234.223:38036] ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 09:33:44.237919 2026] [security2:error] [pid 23831:tid 23831] [client 187.40.234.223:38036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spiht.com"] [uri "/.env"] [unique_id "auH5uBzlS0EwAYiD0PIt3QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 12:59:09
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 08:59:02.001606 2026] [security2:error] [pid 5369:tid 5378] [client 187.40.234.223:16406] M ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 08:59:02.001606 2026] [security2:error] [pid 5369:tid 5378] [client 187.40.234.223:16406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sleazysexquiz.com"] [uri "/.env"] [unique_id "auHxlnAP-ptssbqv58lDugAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-10-28 12:08:18
(10 hours ago)
csagent: score 20.0: secrets grab x2; 2 domain(s) in 0s
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 11:31:14
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 07:31:07.534442 2026] [security2:error] [pid 30172:tid 30172] [client 187.40.234.223:26614] ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 07:31:07.534442 2026] [security2:error] [pid 30172:tid 30172] [client 187.40.234.223:26614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starfrontiers.com"] [uri "/.env"] [unique_id "auHc-y3I_kJeB6ZVYH66DAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-28 11:13:31
(10 hours ago)
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 187.40.234.223 - - [28/Oct/2026:12:13:25 +0100] "GET /.env HTTP/1.1" 404 6365 "-" "python-requests/2.32.4"
...
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-10-28 10:35:07
(11 hours ago)
(mod_security) mod_security (id:949110) triggered by 187.40.234.223 (US/United States/-): N in the last X secs
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 10:26:37
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 06:26:31.311171 2026] [security2:error] [pid 28207:tid 28207] [client 187.40.234.223:40336] ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 06:26:31.311171 2026] [security2:error] [pid 28207:tid 28207] [client 187.40.234.223:40336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "streamlinenz.com"] [uri "/.env"] [unique_id "auHN11t-O-afGGP5AMcdxAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 10:08:36
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 06:08:33.082756 2026] [security2:error] [pid 21177:tid 21177] [client 187.40.234.223:14786] ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 06:08:33.082756 2026] [security2:error] [pid 21177:tid 21177] [client 187.40.234.223:14786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starfateofficial.com"] [uri "/.env"] [unique_id "auHJoen1YYl3wCktMepTxQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 08:29:37
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 04:29:28.945573 2026] [security2:error] [pid 4368:tid 4368] [client 187.40.234.223:64296] M ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 04:29:28.945573 2026] [security2:error] [pid 4368:tid 4368] [client 187.40.234.223:64296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "antoniorufino.com"] [uri "/.env"] [unique_id "auGyaMf7hBq2M1PyyupFqwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
