2026-11-08 07:51:15
UTC ·
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-11-08 03:53:10
UTC ·
(1 day ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
2026-11-07 03:02:29
UTC ·
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 05:28:18
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 46.161.44.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 00:28:14.112957 2026] [security2:error] [pid 9387:tid 9387] [client 46.161.44.62:46688] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 46.161.44.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 00:28:14.112957 2026] [security2:error] [pid 9387:tid 9387] [client 46.161.44.62:46688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingfishergroupllc.com"] [uri "/.env.stage"] [unique_id "aulw7oIVn63sYbdpfZRV0AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-08-16 19:05:14
UTC ·
(2 months ago)
Scanning/Probing (30)
Brute-Force
Web App Attack
🇮🇱
spd.co.il
2026-08-16 12:01:53
UTC ·
(2 months ago)
Web application attack detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-03 02:32:34
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 46.161.44.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 22:32:31.135791 2026] [security2:error] [pid 3977481:tid 3977481] [client 46.161.44.62:60339] ...
show more
(mod_security) mod_security (id:210492) triggered by 46.161.44.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 22:32:31.135791 2026] [security2:error] [pid 3977481:tid 3977481] [client 46.161.44.62:60339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "apcalculusexamprep.com"] [uri "/.env.production"] [unique_id "am_9v8KTgYT2edOKTV7iPAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-19 21:59:19
UTC ·
(3 months ago)
Auto-ban: >3000 req/min op 2026-07-19
Web App Attack
SSH
Hacking
🇳🇱
Mangelot Hosting
2026-06-21 23:36:01
UTC ·
(4 months ago)
(modsecurity) srv103 ModSecurity 46.161.44.62 (RU/Russia/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
alecj.com
2026-06-12 13:48:49
UTC ·
(4 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-11 13:35:43
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 46.161.44.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 09:35:36.584812 2026] [security2:error] [pid 14193:tid 14193] [client 46.161.44.62:36599] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 46.161.44.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 09:35:36.584812 2026] [security2:error] [pid 14193:tid 14193] [client 46.161.44.62:36599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alrightletsgo.com"] [uri "/.env.dev"] [unique_id "aiq5qNSHSKf9ZDbMaeV2owAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 19:27:36
UTC ·
(4 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-06-06 15:17:52
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 46.161.44.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 11:17:46.596629 2026] [security2:error] [pid 3007:tid 3007] [client 46.161.44.62:50761] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 46.161.44.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 11:17:46.596629 2026] [security2:error] [pid 3007:tid 3007] [client 46.161.44.62:50761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "controlaltsuccess.com"] [uri "/.env.qa"] [unique_id "aiQ6GipekMFVVREfMEEknwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-05-15 22:03:38
UTC ·
(5 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-14.
Web App Attack
SSH
Hacking
