๐บ๐ธ
TPI-Abuse
2026-06-29 11:36:06
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 07:36:00.976462 2026] [security2:error] [pid 3885:tid 3885] [client 150.107.74.88:48993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aantariaconstructions.com"] [uri "/api/.env"] [unique_id "akJYoJIxup-YgLMoz0V3tQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-28 23:59:11
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 19:59:06.444025 2026] [security2:error] [pid 12503:tid 12517] [client 150.107.74.88:40385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barkdullit.com.ceol.us"] [uri "/.env"] [unique_id "akG1SseIsQSXwvBDvKlYHQAAAUw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-28 23:34:39
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 19:34:31.225093 2026] [security2:error] [pid 19661:tid 19737] [client 150.107.74.88:38909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettleofgold.com"] [uri "/.env"] [unique_id "akGvh_M6IDDTwOEcdZ4K8wAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-27 21:13:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 17:13:02.955237 2026] [security2:error] [pid 17538:tid 17538] [client 150.107.74.88:52205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.handymaneats.com.pluralmatrix.net"] [uri "/.env"] [unique_id "akA83nAHbhQGOcw8lMgO7gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Al Coholic
2026-06-27 05:47:25
(2 days ago)
Detected By Fail2ban
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-06-26 23:15:01
(2 days ago)
suspicious request in access.log
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-26 22:02:41
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-25.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-26 15:45:21
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 11:45:14.263991 2026] [security2:error] [pid 2284:tid 2284] [client 150.107.74.88:51659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.formationone.com"] [uri "/.env.test.local"] [unique_id "aj6eih8SnzwyYwOAKhI8NwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-26 13:25:36
(3 days ago)
150.107.74.88 - - [26/Jun/2026:15:25:35 +0200] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Window ...
show more
150.107.74.88 - - [26/Jun/2026:15:25:35 +0200] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"
show less
Web App Attack
๐ซ๐ฎ
as211431.net
2026-06-26 09:17:40
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from AU.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from AU.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /config
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2026-06-26 01:07:19
(3 days ago)
Automated web scanner. Requested suspicious paths: /server/.env. UTC: 2026-06-26 00:55:04.
Web App Attack
๐บ๐ธ
mnsf
2026-06-25 21:30:46
(3 days ago)
Abuse Detected (1)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-25 17:06:17
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 13:06:11.481498 2026] [security2:error] [pid 17934:tid 17934] [client 150.107.74.88:47271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alhill.com"] [uri "/.env.production"] [unique_id "aj1gAyFYGLhs0mfMxBIQjQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-25 15:48:55
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 11:48:49.400994 2026] [security2:error] [pid 12580:tid 12580] [client 150.107.74.88:59351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peterjohnsonauthor.com"] [uri "/.env.production"] [unique_id "aj1N4aby-b0qyEs3x98ZswAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-25 15:07:15
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 150.107.74.88 (150.107.74.88): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 11:07:07.985869 2026] [security2:error] [pid 29723:tid 29743] [client 150.107.74.88:42695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nicholsinvest.com"] [uri "/.env.local"] [unique_id "aj1EG65Ly7w40wWuQjCxewAAANA"]
show less
Brute-Force
Bad Web Bot
Web App Attack