🇧🇪
voormedia
2026-06-20 02:24:58
(5 days ago)
Accessed trap at '/.env'
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 00:05:23
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 20:05:18.586982 2026] [security2:error] [pid 5082:tid 5082] [client 194.62.107.215:45995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.leadslibrary.net"] [uri "/.env"] [unique_id "ajSHvpf7r5fMBKWVJ-kqGAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 23:49:39
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 19:49:32.130618 2026] [security2:error] [pid 15528:tid 15528] [client 194.62.107.215:20725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ecomim.com"] [uri "/.env"] [unique_id "ajSEDMvNSKQve3wy4EdK0gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
etu brutus
2026-06-18 20:48:57
(6 days ago)
194.62.107.215 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 16:53:18
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 12:53:12.943916 2026] [security2:error] [pid 13331:tid 13464] [client 194.62.107.215:32225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hdtv55.com"] [uri "/.env"] [unique_id "ajQieHNzZ89ltr-u9DXEhwAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-06-18 14:15:56
(6 days ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 14:06:38
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 10:06:31.881621 2026] [security2:error] [pid 4362:tid 4362] [client 194.62.107.215:24557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theledman.com"] [uri "/.env"] [unique_id "ajP7Z2A6pKtfUpaPbu7QagAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-06-18 13:46:59
(6 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-18 13:24:13
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 09:24:05.677217 2026] [security2:error] [pid 25770:tid 25797] [client 194.62.107.215:35651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.resort4pets.com"] [uri "/.env"] [unique_id "ajPxdRrVGN1abdCZY05gJQAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 13:02:04
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 09:02:01.168233 2026] [security2:error] [pid 20227:tid 20227] [client 194.62.107.215:45285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.polishedspaservices.com"] [uri "/.env"] [unique_id "ajPsSSfzIkVCEgwFr_shhwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 12:29:43
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 08:29:37.737087 2026] [security2:error] [pid 16463:tid 16463] [client 194.62.107.215:25911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roachranch.com"] [uri "/.env"] [unique_id "ajPksU9W7GkuKjfU1rzbEQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 12:05:59
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 08:05:54.209597 2026] [security2:error] [pid 22372:tid 22372] [client 194.62.107.215:26729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.john-bell-associates.com"] [uri "/.env"] [unique_id "ajPfIsFCv91bPVEKjvbkswAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-18 10:32:43
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 09:04:31
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 05:04:24.070887 2026] [security2:error] [pid 14848:tid 14848] [client 194.62.107.215:23227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.xcengineering.xyz"] [uri "/.env"] [unique_id "ajO0mPXW7oHtEuZbXNrDEQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 07:48:27
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 194.62.107.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 03:48:23.850497 2026] [security2:error] [pid 17767:tid 17792] [client 194.62.107.215:23779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fastestcopyright.com"] [uri "/.env"] [unique_id "ajOixxB6sSfkcxcPoMKnUAAAAVc"]
show less
Brute-Force
Bad Web Bot
Web App Attack