🇬🇧
openstrike.co.uk
2026-02-14 06:14:05
(4 months ago)
11 attacks on env grabbing URLs, VC URLs:
GET /.env.local HTTP/1.1
GET /new/.git/config HTTP/1.1
Hacking
🇺🇸
mnsf
2026-02-13 07:05:38
(4 months ago)
Too many Status 40X (12)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇩🇪
Carsten
2026-02-12 05:05:22
(4 months ago)
GET [.env]
Port Scan
🇺🇸
myagent.site
2026-02-11 00:56:15
(4 months ago)
Blocking for trying to access an exploit file: /config/.env
Hacking
🇺🇸
TPI-Abuse
2026-02-10 01:46:50
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.47 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 20:46:44.080008 2026] [security2:error] [pid 2209252:tid 2209252] [client 209.50.187.47:40897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "general.graphics"] [uri "/admin/.env"] [unique_id "aYqOBH949PmgKv4-Eiyz-QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-26 09:53:11
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
2026-01-05 20:11:43
(5 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
Hacking
Brute-Force
🇵🇱
sefinek.net
2025-12-11 10:48:02
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇪🇸
10dencehispahard SL
2025-11-26 10:22:20
(6 months ago)
Bot scanning for environment files .env
Web Spam
Web App Attack
🇳🇱
homeshowdomain.nl
2025-11-25 23:03:45
(6 months ago)
Auto-ban: >3000 req/min op 2025-11-25
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-25 04:44:09
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.47 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:44:01.825718 2025] [security2:error] [pid 5656:tid 5656] [client 209.50.187.47:46933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.glslightingandcontrols.com"] [uri "/.env"] [unique_id "aSU0EZOHVYWMfopuEg8PdwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:24:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.47 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:24:31.583219 2025] [security2:error] [pid 23288:tid 23288] [client 209.50.187.47:45473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.freerein.info"] [uri "/.svn/wc.db"] [unique_id "aSUvf8-0_NlC1ghatDLIqwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:29:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.47 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:29:43.542676 2025] [security2:error] [pid 12955:tid 12955] [client 209.50.187.47:39955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.socialsimulations.banis-associates.com"] [uri "/.env"] [unique_id "aSUip6xIc7K1Y14gWtZJ5wAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:44:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.47 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:44:25.482982 2025] [security2:error] [pid 28988:tid 28988] [client 209.50.187.47:23877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.carolineburkedesigns.com"] [uri "/.svn/wc.db"] [unique_id "aSUYCWzI_FiZfeqHBICkVAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:08:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.47 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:08:06.516104 2025] [security2:error] [pid 12991:tid 12991] [client 209.50.187.47:50949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bigkevsperformance.com"] [uri "/.svn/wc.db"] [unique_id "aSUPhoohHnk7tOPC7dfs6AAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack