|
🇬🇧
[email protected]
|
|
...
|
Brute-Force
SSH
|
|
|
🇩🇪
Vegascosmetics
|
|
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
|
Bad Web Bot
|
|
|
🇨🇦
1gz
|
|
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
|
🇧🇪
cmbplf
|
|
339 requests with url.path *.env
|
Brute-Force
Bad Web Bot
|
|
|
🇺🇸
ipblock.com
|
|
IPBlock protected site ID [669-fx].
Exploit request, vulnerability scanner.
|
Hacking
Bad Web Bot
Web App Attack
|
|
|
🇷🇸
Smel
|
|
HTTP/80/443/8080 Unauthorized Probe, Hack -
|
Hacking
Web App Attack
|
|
|
🇪🇸
el-brujo
|
|
Cloudflare WAF: Request Path: /.env Request Query: Host: elhacker.net userAgent: Mozilla/5.0 Action ...
show more
Cloudflare WAF: Request Path: /.env Request Query: Host: elhacker.net userAgent: Mozilla/5.0 Action: block Source: firewallManaged ASN Description: DIGITALOCEAN-ASN Country: SG Method: GET Timestamp: 2025-12-23T11:54:03Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
|
Hacking
SQL Injection
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 165.22.58.15 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 165.22.58.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 01:56:18.321085 2025] [security2:error] [pid 4524:tid 4524] [client 165.22.58.15:55620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "socialstudiesforkids.com"] [uri "/.env"] [unique_id "aUo9EnxOkn0CfaAXoSYzPQAAAAo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
rdpguard.com
|
|
RdpGuard detected brute-force attempt on HTTP
|
Brute-Force
|
|
|
Anonymous
|
|
suspicious request in access.log
|
Web App Attack
|
|
|
🇯🇵
ki3
|
|
Fail2Ban: Web App Attacks and Forum Spam 165.22.58.15 1766458519.0(JST)
|
Web Spam
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 165.22.58.15 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 165.22.58.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 22 20:00:16.490265 2025] [security2:error] [pid 4727:tid 4727] [client 165.22.58.15:55834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "n3fjp.com"] [uri "/.env"] [unique_id "aUnpoOje16-SL9ulTw87HQAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 165.22.58.15 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 165.22.58.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 22 18:45:33.716529 2025] [security2:error] [pid 15524:tid 15524] [client 165.22.58.15:60126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "learningbyshipping.com"] [uri "/.env"] [unique_id "aUnYHSQQ0fJVI41hUPy3qgAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇧🇪
voormedia
|
|
Accessed trap at '/.env'
|
Web App Attack
|
|
|
🇩🇪
Bedios GmbH
|
|
Login credentials theft attempt
|
Hacking
|
|