🇪🇸
Gem
2026-11-06 23:07:58
UTC ·
(3 days ago)
Unauthorized web scan.
Web App Attack
🇸🇪
SkyDancer
2026-11-06 10:23:31
UTC ·
(4 days ago)
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
Hacking
Brute-Force
🇫🇷
geot
2026-11-03 14:08:05
UTC ·
(1 week ago)
GET /.env HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 11:41:38
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 06:41:33.174491 2026] [security2:error] [pid 6843:tid 6843] [client 187.40.234.49:52098] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 06:41:33.174491 2026] [security2:error] [pid 6843:tid 6843] [client 187.40.234.49:52098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boblog111.com"] [uri "/.env"] [unique_id "aunIbeSvw6qP4-_eEKFeKwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 11:14:05
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 06:13:57.619963 2026] [security2:error] [pid 8497:tid 8497] [client 187.40.234.49:34864] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 06:13:57.619963 2026] [security2:error] [pid 8497:tid 8497] [client 187.40.234.49:34864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brandoncomputergeeks.com"] [uri "/.env"] [unique_id "aunB9U0AqDrHYrj3jdEVMgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
6o6ep
2026-11-03 09:53:00
UTC ·
(1 week ago)
/.env trap
Port Scan
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 09:31:27
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:31:23.508763 2026] [security2:error] [pid 31384:tid 31384] [client 187.40.234.49:24508] M ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:31:23.508763 2026] [security2:error] [pid 31384:tid 31384] [client 187.40.234.49:24508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calvetparis1937.com"] [uri "/.env"] [unique_id "aump67aFPgn5LdhC1M8LkgAAADs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 08:45:46
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:45:38.990376 2026] [security2:error] [pid 28814:tid 28814] [client 187.40.234.49:7564] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:45:38.990376 2026] [security2:error] [pid 28814:tid 28814] [client 187.40.234.49:7564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calvarycavaliers.org"] [uri "/.env"] [unique_id "aumfMoqynvl8PNq6mlqHXQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 04:05:24
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:05:18.844932 2026] [security2:error] [pid 1775:tid 1775] [client 187.40.234.49:32852] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:05:18.844932 2026] [security2:error] [pid 1775:tid 1775] [client 187.40.234.49:32852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barecreationsaz.com"] [uri "/.env"] [unique_id "auldfnYsnR4Gtz5zLRtL_QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 03:20:58
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:20:53.797188 2026] [security2:error] [pid 3236:tid 3236] [client 187.40.234.49:54742] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:20:53.797188 2026] [security2:error] [pid 3236:tid 3236] [client 187.40.234.49:54742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boatpeople.org"] [uri "/.env"] [unique_id "aulTFd_p2RN-0It5Dv4qMgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-03 02:43:35
UTC ·
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇿
Tripwire
2026-11-03 02:37:38
UTC ·
(1 week ago)
Scanning for exploits - /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 01:21:07
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:21:02.073072 2026] [security2:error] [pid 29080:tid 29080] [client 187.40.234.49:53006] M ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:21:02.073072 2026] [security2:error] [pid 29080:tid 29080] [client 187.40.234.49:53006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boat-registration-greece.com"] [uri "/.env"] [unique_id "auk2_jRKCGJnVgoLYb305wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-03 00:59:09
UTC ·
(1 week ago)
[ti-09al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 187.40.234.49 - - [03/Nov/2026:01:58:48 +0100] "GET /.env HTTP/1.1" 301 473 "-" "python-requests/2.32.4"
...
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-11-03 00:33:08
UTC ·
(1 week ago)
Bad bot ignoring robot.txt
Bad Web Bot
