🇧🇷
radardatelecom
2026-11-11 16:55:05
UTC ·
(1 day ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
2026-11-11 15:15:05
UTC ·
(2 days ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Attack Signature Blocked: /brands/shopby/manufacturer-grandstream-rcf-lsi-evoko-ask_proxima-projectiondesign-xyz-fortinet.html?p=3 | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇪🇸
masterguru
2026-11-10 19:38:40
UTC ·
(2 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. (1100000-122)
Bad Web Bot
🇩🇪
arnisolutions
2026-11-10 14:18:49
UTC ·
(3 days ago)
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 1 day(s) between 2026-11-10 and 2026-11-10 (UTC). 1 further address(es) from the same network showed abusive behaviour. Sample requ ...
show more
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 1 day(s) between 2026-11-10 and 2026-11-10 (UTC). 1 further address(es) from the same network showed abusive behaviour. Sample request: GET /.env HTTP/1.1
show less
Web App Attack
Hacking
🇳🇱
Alt255
2026-11-10 11:54:43
UTC ·
(3 days ago)
[cb17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 187.40.235.172 - - [10/Nov/2026:12:54:38 +0100] "GET /.env HTTP/2.0" 301 214 "-" "python-requests/2.32.4"
...
Bad Web Bot
Web App Attack
2026-11-09 18:27:01
UTC ·
(3 days ago)
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:43:49
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 187.40.235.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:43:43.754941 2026] [security2:error] [pid 11011:tid 11011] [client 187.40.235.172:54668] ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.235.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:43:43.754941 2026] [security2:error] [pid 11011:tid 11011] [client 187.40.235.172:54668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oligofoundry.com"] [uri "/.env"] [unique_id "avH4P49uBOxfntEYn2f13wAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:17:50
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 187.40.235.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:17:47.004697 2026] [security2:error] [pid 24955:tid 24955] [client 187.40.235.172:44122] ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.235.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:17:47.004697 2026] [security2:error] [pid 24955:tid 24955] [client 187.40.235.172:44122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lasertherapyoc.com"] [uri "/.env"] [unique_id "avHkG3xo-P652nOEym7uFgAAAGM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:38:31
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 187.40.235.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:38:26.141418 2026] [security2:error] [pid 29484:tid 29484] [client 187.40.235.172:5260] ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.235.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:38:26.141418 2026] [security2:error] [pid 29484:tid 29484] [client 187.40.235.172:5260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kurtkaufman.com"] [uri "/.env"] [unique_id "avHa4okjzWDSeQyGcDbp-wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:32:20
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 187.40.235.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:32:16.688661 2026] [security2:error] [pid 14207:tid 14207] [client 187.40.235.172:54794] ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.235.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:32:16.688661 2026] [security2:error] [pid 14207:tid 14207] [client 187.40.235.172:54794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pa-ksa.com"] [uri "/.env"] [unique_id "avHLYDUtoPYLk12114W-tQAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Stara
2026-11-09 09:31:55
UTC ·
(4 days ago)
Excessive requests and user agent spoofing, forum attackers, cms spammers, bad bots and python probe scripts
Bad Web Bot
Web Spam
🇺🇸
TPI-Abuse
2026-11-09 02:28:58
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 187.40.235.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:28:51.642213 2026] [security2:error] [pid 24197:tid 24197] [client 187.40.235.172:14722] ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.235.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:28:51.642213 2026] [security2:error] [pid 24197:tid 24197] [client 187.40.235.172:14722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kurikka.eu"] [uri "/.env"] [unique_id "avEv45Ua_qFHlqvGi5fwYgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:39:15
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 187.40.235.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:39:11.461279 2026] [security2:error] [pid 19683:tid 19683] [client 187.40.235.172:15784] ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.235.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:39:11.461279 2026] [security2:error] [pid 19683:tid 19683] [client 187.40.235.172:15784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oldworldfineantiques.com"] [uri "/.env"] [unique_id "avEWL1e4Bf7zPqkqT30PXAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 17:11:48
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 187.40.235.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:11:44.153640 2026] [security2:error] [pid 22555:tid 22555] [client 187.40.235.172:11086] ...
show more
(mod_security) mod_security (id:210492) triggered by 187.40.235.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:11:44.153640 2026] [security2:error] [pid 22555:tid 22555] [client 187.40.235.172:11086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nwarchitect.com"] [uri "/.env"] [unique_id "avCtUJogu0pboDQfV1DDdgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Tripwire
2026-11-08 17:06:42
UTC ·
(4 days ago)
Scanning for exploits - /.env
Web App Attack
