Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.env.dev.local
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot
This report ...
show moreTriggered Cloudflare WAF (firewallCustom) from BE.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.env.dev.local
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
(mod_security) mod_security (id:949110) triggered by 207.175.101.50 (BE/Belgium/50.101.175.207.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ...
show moreHTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-srv1)
show less
Bad Web Bot
Anonymous
Attempted access to sensitive endpoint (/.env.supabase) detected. Automated scan or unauthorized probing.
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 207.175.101.50 (BE/Belgium/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 207.175.101.50 (BE/Belgium/50.101.175.207.b ...
show moreMalicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 207.175.101.50 (BE/Belgium/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 207.175.101.50 (BE/Belgium/50.101.175.207.bc.googleusercontent.com): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown