🇳🇱
homeshowdomain.nl
2026-10-21 22:01:52
(3 hours ago)
Auto-ban: >3000 req/min op 2026-10-21
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-10-21 21:05:33
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 17:05:27.868110 2026] [security2:error] [pid 25480:tid 25480] [client 187.40.234.46:9750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "awesomeenergyrecords.com"] [uri "/.env"] [unique_id "atkpF142zaRwcQayoXexTwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-21 20:18:00
(5 hours ago)
block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6
Bad Web Bot
🇧🇾
lns.bz
2026-10-21 18:37:17
(7 hours ago)
.env scanning [BY]
Web App Attack
🇳🇱
Mangelot Hosting
2026-10-21 17:52:12
(8 hours ago)
(web_sensitive_file) srv102 Sensitive file probe (.env/.git/backup) 187.40.234.46 (US/United States/ ...
show more
(web_sensitive_file) srv102 Sensitive file probe (.env/.git/backup) 187.40.234.46 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇹🇷
Jova
2026-10-21 17:23:56
(8 hours ago)
Probing a web server for sensitive files (.env, backups, configs): 3 requests.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 17:17:09
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 13:17:02.758309 2026] [security2:error] [pid 13675:tid 13675] [client 187.40.234.46:62108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "awcadvocate.com"] [uri "/.env"] [unique_id "atjzjsDgs6fDDTEaIrJR9gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-21 17:14:18
(8 hours ago)
[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 187.40.234.46 - - [21/Oct/2026:19:14:05 +0200] "GET /.env HTTP/1.1" 301 525 "-" "python-requests/2.32.4"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 16:56:37
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 12:56:33.676588 2026] [security2:error] [pid 15661:tid 15661] [client 187.40.234.46:38304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayinsights.com"] [uri "/.env"] [unique_id "atjuwb7zQdVy6zoU9ba8UgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 16:17:19
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 12:17:12.179571 2026] [security2:error] [pid 12936:tid 12936] [client 187.40.234.46:21226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bairentang.org"] [uri "/.env"] [unique_id "atjliGgc_zUk0LPkIohxDwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 15:57:19
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 11:57:13.296823 2026] [security2:error] [pid 16800:tid 16800] [client 187.40.234.46:50642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayfieldwis.com"] [uri "/.env"] [unique_id "atjg2SheR6bPyAxxzys0FAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
