🇩🇪
MBombeck
2026-06-08 07:40:14
(5 days ago)
Fail2Ban/traefik-botsearch on ops-01.bombeck.io: banned after 5 failures
Web App Attack
🇩🇪
Bedios GmbH
2026-06-08 06:38:39
(5 days ago)
Login credentials theft attempt
Hacking
🇺🇸
TPI-Abuse
2026-06-08 06:16:10
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 02:16:03.794617 2026] [security2:error] [pid 912:tid 912] [client 46.202.186.249:22688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "victorvictor.biz"] [uri "/core/.env.save"] [unique_id "aiZeI4m7EQgkGXWLMX868gAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-08 06:11:08
(5 days ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 05:57:13
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 01:57:08.403415 2026] [security2:error] [pid 27325:tid 27325] [client 46.202.186.249:50028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kronrod.com"] [uri "/.env"] [unique_id "aiZZtFcI_tGynp4ONxEQxgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 04:23:52
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 00:23:45.882334 2026] [security2:error] [pid 15538:tid 15538] [client 46.202.186.249:26572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "htaautosales.com"] [uri "/dev/.env"] [unique_id "aiZD0TVrYWgoveDwaYUAUAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
paissangroup
2026-06-08 04:08:16
(5 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 23:51:55
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 19:51:51.601449 2026] [security2:error] [pid 31048:tid 31048] [client 46.202.186.249:26084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centrosteckerl.com"] [uri "/laravel/.env"] [unique_id "aiYEF0fCY3b6UZSXA7CEYAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 23:00:44
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 19:00:39.944219 2026] [security2:error] [pid 30222:tid 30222] [client 46.202.186.249:57476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robkraven.com"] [uri "/core/.env.save"] [unique_id "aiX4F9t7Aeh-jBeouXp2_gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 21:34:02
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 17:33:54.241314 2026] [security2:error] [pid 10932:tid 10932] [client 46.202.186.249:35570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hinelaw.com"] [uri "/admin/.env"] [unique_id "aiXjwhDyhGeEyrmmutaMnwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-07 20:00:22
(5 days ago)
(caddyscan) Scanner path probe from 46.202.186.249 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: ...
show more
(caddyscan) Scanner path probe from 46.202.186.249 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 46.202.186.249 - - [07/Jun/2026:20:00:18 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 46.202.186.249 - - [07/Jun/2026:20:00:18 +0000] "GET /members/.env HTTP/1.1"
[REDACTED] 200 2627 46.202.186.249 - - [07/Jun/2026:20:00:18 +0000] "GET /app/.env HTTP/1.1"
[REDACTED] 200 2627 46.202.186.249 - - [07/Jun/2026:20:00:18 +0000] "GET /admin/.env HTTP/1.1"
[REDACTED] 200 2627 46.202.186.249 - - [07/Jun/2026:20:00:18 +0000] "GET /core/.env.save HTTP/1.1"
show less
Port Scan
🇺🇸
TPI-Abuse
2026-06-07 17:22:16
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 13:22:09.438909 2026] [security2:error] [pid 18971:tid 18971] [client 46.202.186.249:61180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "veneerdent.com"] [uri "/dev/.env"] [unique_id "aiWowU56pp7g17X7Bf0rnAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-06-07 14:19:18
(6 days ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 14:18:16
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 46.202.186.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 10:18:09.543131 2026] [security2:error] [pid 9330:tid 9330] [client 46.202.186.249:35970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peterlundman.com"] [uri "/.env"] [unique_id "aiV9ofcVyIu5tJgroYpcOwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-06-07 14:13:19
(6 days ago)
URL Probing: /.env
Web App Attack