🇧🇷
Peregrine
2026-06-18 09:01:59
(1 day ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 209.99.186.233 162.158.217.45 - - [18/Jun/2026:06:01:53 - ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 209.99.186.233 162.158.217.45 - - [18/Jun/2026:06:01:53 -0300] "GET /.env HTTP/1.1" 404 414
show less
Bad Web Bot
🇫🇷
Baking333
2026-06-18 08:59:10
(1 day ago)
[redacted] 209.99.186.233 - - [18/Jun/2026:09:59:07 +0100] "GET /.env HTTP/2.0" 301 292 "-" "-" [red ...
show more
[redacted] 209.99.186.233 - - [18/Jun/2026:09:59:07 +0100] "GET /.env HTTP/2.0" 301 292 "-" "-" [redacted] 209.99.186.233 - - [18/Jun/2026:09:59:08 +0100] "GET /fr/.env/ HTTP/2.0" 404 26941 "-" "-"
show less
Bad Web Bot
Web App Attack
🇳🇱
nate naten
2026-06-18 03:37:21
(1 day ago)
HoneyTrap: env_file attempt on /.env from Switzerland
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-06-18 02:05:00
(1 day ago)
IPBlock protected site ID [3390-wh].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2026-06-14 08:38:01
(5 days ago)
Cloudflare WAF: Request Path: /api/.env Request Query: Host: www.elhacker.net userAgent: Action: b ...
show more
Cloudflare WAF: Request Path: /api/.env Request Query: Host: www.elhacker.net userAgent: Action: block Source: firewallManaged ASN Description: SKN Subnet & Telecom Ltd Country: CH Method: GET Timestamp: 2026-06-14T08:38:01Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇺🇸
Matthew Ping
2026-06-14 03:15:03
(5 days ago)
ModSecurity rule 949110 triggered on dedicated4785. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
🇪🇸
el-brujo
2026-06-14 02:30:07
(5 days ago)
Cloudflare WAF: Request Path: /.env Request Query: Host: elhacker.net userAgent: Action: block Sou ...
show more
Cloudflare WAF: Request Path: /.env Request Query: Host: elhacker.net userAgent: Action: block Source: firewallManaged ASN Description: SKN Subnet & Telecom Ltd Country: CH Method: GET Timestamp: 2026-06-14T02:30:07Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇺🇸
en0
2026-06-13 18:32:53
(5 days ago)
209.99.186.233 was recorded 3 times by 1 hosts attempting to connect to 1 unique ports. Incident cou ...
show more
209.99.186.233 was recorded 3 times by 1 hosts attempting to connect to 1 unique ports. Incident counter (4h, 24h, all-time): 3, 4, 4
show less
Port Scan
🇵🇱
sefinek.net
2026-06-12 08:30:00
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from CH.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from CH.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /core/.env | UA: Empty string • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇵🇱
sefinek.net
2026-06-10 21:06:40
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from CH.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from CH.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /.env | UA: Empty string • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇪🇸
el-brujo
2026-06-10 06:21:11
(1 week ago)
Cloudflare WAF: Request Path: / Request Query: Host: foro.elhacker.net:2096 userAgent: Mozilla/5.0 ...
show more
Cloudflare WAF: Request Path: / Request Query: Host: foro.elhacker.net:2096 userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Action: block Source: firewallManaged ASN Description: SKN Subnet & Telecom Ltd Country: CH Method: GET Timestamp: 2026-06-10T06:21:11Z ruleId: 8e361ee4328f4a3caf6caf3e664ed6fe. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇬🇧
Oakley
2026-06-09 15:14:36
(1 week ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇫🇷
conseilgouz
2026-06-09 09:10:27
(1 week ago)
hae-7 : Trying access unauthorized files/dir=>/.env
Hacking
🇺🇸
TPI-Abuse
2026-06-09 02:27:56
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 209.99.186.233 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.99.186.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:27:39.129412 2026] [security2:error] [pid 4050:tid 4050] [client 209.99.186.233:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.socialstudiesforkids.com"] [uri "/lib/.env"] [unique_id "aid6GwAwRjtQ2LIGCFOlhAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-06-09 01:21:26
(1 week ago)
209.99.186.233 - - [09/Jun/2026:02:21:24 +0100] "GET /webmail HTTP/1.1" 404 1117 "-" "Mozilla/5.0 (M ...
show more
209.99.186.233 - - [09/Jun/2026:02:21:24 +0100] "GET /webmail HTTP/1.1" 404 1117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
show less
Bad Web Bot