🇺🇸
TPI-Abuse
2026-07-28 11:06:34
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:949110) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 07:06:31.321890 2026] [security2:error] [pid 1793860:tid 1793860] [client 46.101.206.57:54453] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "freedrm.org"] [uri "/.env"] [unique_id "amiNNyJaBOeW1hhoNwM28QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 10:21:44
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 06:21:39.594710 2026] [security2:error] [pid 1187790:tid 1187790] [client 46.101.206.57:57452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cajasdeesperanza.org"] [uri "/.env"] [unique_id "amiCs839nycgJcG3wvy3hgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-28 09:43:08
(3 days ago)
PSCSERV WPSCAN 46.101.206.57
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 09:07:11
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 05:07:04.122728 2026] [security2:error] [pid 2084692:tid 2084692] [client 46.101.206.57:50075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bairentang.org"] [uri "/.env"] [unique_id "amhxOP39oSEOgdnfeoZYvwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
inlink.ltd
2026-07-28 08:17:48
(3 days ago)
dot file probe
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 08:10:37
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 04:10:28.889039 2026] [security2:error] [pid 600915:tid 600915] [client 46.101.206.57:50230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hanlontown.org"] [uri "/.env"] [unique_id "amhj9A0htbW5hWwcBjF6RAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 07:31:04
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 03:30:58.506063 2026] [security2:error] [pid 1770287:tid 1770287] [client 46.101.206.57:49154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackberrycircle.org"] [uri "/.env"] [unique_id "amhaslZN6Rpemvt0F_SUhAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-28 07:30:02
(3 days ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 07:12:48
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 03:12:44.177003 2026] [security2:error] [pid 827944:tid 827944] [client 46.101.206.57:59476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "communityofthecosmos.org"] [uri "/.env"] [unique_id "amhWbHVC3N6iTp_oT7eaSAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-07-28 07:06:26
(3 days ago)
Login credentials theft attempt
Hacking
🇺🇸
TPI-Abuse
2026-07-28 06:42:28
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 02:42:25.048671 2026] [security2:error] [pid 2227030:tid 2227030] [client 46.101.206.57:51858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "appalachianfieldstofamilies.org"] [uri "/.env"] [unique_id "amhPUfdH_lkr2gASKVZv5AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-28 05:06:42
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 04:48:09
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 00:48:01.775155 2026] [security2:error] [pid 8770:tid 8770] [client 46.101.206.57:52393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "glassicannex.org"] [uri "/.env"] [unique_id "amg0gSRnjZiKgJjrK2qVgwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 04:29:23
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 00:29:15.318207 2026] [security2:error] [pid 3129233:tid 3129233] [client 46.101.206.57:60131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "midcityrotary.org"] [uri "/.env"] [unique_id "amgwG6sWGKbuvPAj3EiPyAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 03:07:58
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.101.206.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 23:07:54.015901 2026] [security2:error] [pid 2402625:tid 2402625] [client 46.101.206.57:60136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knowbuddy.org"] [uri "/.env"] [unique_id "amgdCnNQYF2eInQJ0cKteQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack