🇳🇱
homeshowdomain.nl
2026-06-08 21:59:54
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-07.
show less
Web App Attack
SSH
Hacking
🇳🇱
e.fierstra
2026-06-08 13:20:57
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
xxkodedxx
2026-06-08 11:33:45
(2 days ago)
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get in 10m window.
...
show more
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get in 10m window.
Active: 11:33:09 UTC
Volume: 12 honeypot probe(s)
Bait taken: /laravel/.env, /backend/.env, /admin/.env, /app/.env, /api/.env
UA: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-06-08 09:02:34
(2 days ago)
Web vulnerability probing: /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 08:46:22
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 46.202.183.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.202.183.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 04:46:16.297902 2026] [security2:error] [pid 8064:tid 8064] [client 46.202.183.86:37706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "namadiscount.com"] [uri "/.env"] [unique_id "aiaBWKbEZmU0E5UlDZr0agAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 07:40:46
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 46.202.183.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.202.183.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 03:40:41.296569 2026] [security2:error] [pid 4080:tid 4080] [client 46.202.183.86:38792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spanishchristmascards.net"] [uri "/core/.env"] [unique_id "aiZx-d2HLr57R-DpICekQgAAADc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 07:13:48
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 46.202.183.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.202.183.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 03:13:42.812862 2026] [security2:error] [pid 13482:tid 13482] [client 46.202.183.86:46032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "k2medianetworks.com"] [uri "/laravel/.env"] [unique_id "aiZrpqxuy6a0n5woL-u-fQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 06:04:45
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 46.202.183.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.202.183.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 02:04:40.707740 2026] [security2:error] [pid 13741:tid 13741] [client 46.202.183.86:51902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thehunterstomb.com"] [uri "/.env.save"] [unique_id "aiZbeHI25tBKn79AH870oAAAAF0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-06-08 03:16:34
(3 days ago)
WebAttack or semilar from 46.202.183.86
Web App Attack
🇳🇱
debestelapp
2026-06-08 02:05:06
(3 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 23:24:33
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 46.202.183.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.202.183.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 19:24:30.417002 2026] [security2:error] [pid 28458:tid 28458] [client 46.202.183.86:38098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "totho.com"] [uri "/core/.env"] [unique_id "aiX9rrTE3zJqO32sDAL8QgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-07 23:10:01
(3 days ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 22:02:27
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 46.202.183.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 46.202.183.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 18:02:21.616011 2026] [security2:error] [pid 13656:tid 13678] [client 46.202.183.86:16396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yrcs.net"] [uri "/app/.env"] [unique_id "aiXqbV-zRjYD013NV9PmNAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-06-07 21:37:14
(3 days ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 46.202.183.86 (US/United States/-): ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 46.202.183.86 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇫🇷
Lunix
2026-06-07 21:13:37
(3 days ago)
Brute-Force
Web App Attack