🇺🇸
TPI-Abuse
2026-11-07 19:25:28
UTC ·
(18 minutes ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 14:25:20.322814 2026] [security2:error] [pid 27296:tid 27296] [client 187.40.234.87:47834] M ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 14:25:20.322814 2026] [security2:error] [pid 27296:tid 27296] [client 187.40.234.87:47834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "burnshieldmena.com"] [uri "/.env"] [unique_id "au97IHv2mVTSoQt2O6NQHQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 19:04:21
UTC ·
(39 minutes ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 14:04:16.014369 2026] [security2:error] [pid 9388:tid 9388] [client 187.40.234.87:63312] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 14:04:16.014369 2026] [security2:error] [pid 9388:tid 9388] [client 187.40.234.87:63312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bodeur.com"] [uri "/.env"] [unique_id "au92MJ2cTzGZBVntmc8lbAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 18:40:10
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:40:06.809539 2026] [security2:error] [pid 10805:tid 10805] [client 187.40.234.87:8272] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:40:06.809539 2026] [security2:error] [pid 10805:tid 10805] [client 187.40.234.87:8272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barpubsigns.com"] [uri "/.env"] [unique_id "au9whhCBA7M89rhPSY-wDAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-11-07 17:44:41
UTC ·
(1 hour ago)
URL Probing: /.env
Web App Attack
🇳🇱
Alt255
2026-11-07 17:20:02
UTC ·
(2 hours ago)
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 187.40.234.87 - - [07/Nov/2026:18:19:46 +0100] "GET /.env HTTP/1.1" 301 570 "-" "python-requests/2.32.4"
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 17:11:35
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 12:11:32.548591 2026] [security2:error] [pid 18683:tid 18683] [client 187.40.234.87:57662] M ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 12:11:32.548591 2026] [security2:error] [pid 18683:tid 18683] [client 187.40.234.87:57662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "become-a-medicalsalesrep.com"] [uri "/.env"] [unique_id "au9bxOWDDeiYnQkK6TJzTgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 16:28:57
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 11:28:50.018340 2026] [security2:error] [pid 19483:tid 19483] [client 187.40.234.87:36042] M ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 11:28:50.018340 2026] [security2:error] [pid 19483:tid 19483] [client 187.40.234.87:36042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bizzybeejunkremoval.com"] [uri "/.env"] [unique_id "au9RwtxnWAV_ayBVla1c8wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 16:06:08
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 11:06:01.331003 2026] [security2:error] [pid 23358:tid 23358] [client 187.40.234.87:58004] M ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 11:06:01.331003 2026] [security2:error] [pid 23358:tid 23358] [client 187.40.234.87:58004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "burnbuns.com"] [uri "/.env"] [unique_id "au9MaUiU1G7eN3N5YwZqKwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 15:32:05
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:32:01.152512 2026] [security2:error] [pid 5803:tid 5803] [client 187.40.234.87:65236] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:32:01.152512 2026] [security2:error] [pid 5803:tid 5803] [client 187.40.234.87:65236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beckomberga.org"] [uri "/.env"] [unique_id "au9EcUzvm6gowfDwgQNMYwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 15:14:20
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:14:13.670584 2026] [security2:error] [pid 1519599:tid 1519618] [client 187.40.234.87:5270 ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:14:13.670584 2026] [security2:error] [pid 1519599:tid 1519618] [client 187.40.234.87:52704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baronannaly.com"] [uri "/.env"] [unique_id "au9ARYiyVBlPHsSKsYgjxwAAAQw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 14:37:21
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 09:37:14.658442 2026] [security2:error] [pid 8911:tid 8911] [client 187.40.234.87:29044] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 09:37:14.658442 2026] [security2:error] [pid 8911:tid 8911] [client 187.40.234.87:29044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "burlison.com"] [uri "/.env"] [unique_id "au83mv8yvS7PwILbApgLqAAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 14:18:42
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 09:18:39.914396 2026] [security2:error] [pid 16971:tid 16971] [client 187.40.234.87:23560] M ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.234.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 09:18:39.914396 2026] [security2:error] [pid 16971:tid 16971] [client 187.40.234.87:23560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beckersystems.net"] [uri "/.env"] [unique_id "au8zP9sxWuFeILAv6LRakwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
chronos
2026-10-02 22:03:51
UTC ·
(1 month ago)
Generic malicious activity: Tentativa de varredura de porta TCP... | Port: 59601 | Proto: TCP | Location: Brazil, Betim
Port Scan
Hacking
🇺🇸
ipblock.com
2026-09-03 12:41:00
UTC ·
(2 months ago)
IPBlock protected site ID [4055-d][s=02].
Persistent 404, vulnerability scanner
Hacking
Bad Web Bot
Web App Attack
