Anonymous
2026-07-27 16:31:57
(9 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ฎ๐ณ
evicky2002
2026-07-27 06:00:00
(19 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
Anonymous
2026-07-26 12:22:42
(1 day ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-26 12:20:43
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 212.32.69.244 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.32.69.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 08:20:35.592032 2026] [security2:error] [pid 3223420:tid 3223420] [client 212.32.69.244:58273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konahawaii.com"] [uri "/.env"] [unique_id "amX7k9N2zzVk99SRLpHh4QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-26 12:08:58
(1 day ago)
cloudlinux2 fail2ban: 2026-07-26 14:05:11,563 fail2ban.filter [1888]: INFO [recidive] Fou ...
show more
cloudlinux2 fail2ban: 2026-07-26 14:05:11,563 fail2ban.filter [1888]: INFO [recidive] Found 212.32.69.244 - 2026-07-26 14:05:11cloudlinux2 fail2ban: 2026-07-26 14:05:04,943 fail2ban.filter [1888]: INFO [plesk-modsecurity] Found 212.32.69.244 - 2026-07-26 14:05:04cloudlinux2 fail2ban: 2026-07-26 14:05:11,487 fail2ban.filter [1888]: INFO [plesk-modsecurity] Found 212.32.69.244 - 2026-07-26 14:05:11cloudlinux2 fail2ban: 2026-07-26 14:05:11,556 fail2ban.actions [1888]: NOTICE [plesk-modsecurity] Ban 212.32.69.244cloudlinux2 fail2ban: 2026-07-26 14:05:08,296 fail2ban.filter [1888]: INFO [plesk-modsecurity] Found 212.32.69.244 - 2026-07-26 14:05:08cloudlinux2 fail2ban: 2026-07-26 14:05:47,018 fail2ban.filter [1888]: INFO [plesk-modsecurity] Found 182.8.182.52 - 2026-07-26 14:05:47cloudlinux2 fail2ban: 2026-07-26 14:07:22,646 fail2ban.filter [1888]: INFO [plesk-modsecurity] Found 182.8.182.52 - 2026-07-26 14:07:22cloudlinux2 fail2ban: 2026-07-
show less
Brute-Force
Anonymous
2026-07-26 11:38:56
(1 day ago)
212.32.69.244 - - [26/Jul/2026:19:38:55 +0800] "GET /.env HTTP/1.1" 301 233 "-" "Mozilla/5.0 (Macint ...
show more
212.32.69.244 - - [26/Jul/2026:19:38:55 +0800] "GET /.env HTTP/1.1" 301 233 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-07-26 11:32:02
(1 day ago)
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1
Hacking
Web App Attack
๐ฉ๐ช
Roper123
2026-07-26 11:14:46
(1 day ago)
Web exploits
Web App Attack
Anonymous
2026-07-26 11:06:04
(1 day ago)
Trying to access config files
Web App Attack
๐ฉ๐ฐ
HostingGroup
2026-07-26 11:01:53
(1 day ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 4. First blocked: 2026-07-26.
show less
Bad Web Bot
Web App Attack
๐ง๐พ
lns.bz
2026-07-26 10:45:41
(1 day ago)
.env scanning [BY]
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-26 10:37:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 212.32.69.244 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.32.69.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 06:37:20.733731 2026] [security2:error] [pid 4049148:tid 4049148] [client 212.32.69.244:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aslanhan.com"] [uri "/.env"] [unique_id "amXjYCNdiS-s-11NQZ7ANgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
polycoda
2026-07-26 10:19:31
(1 day ago)
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based)
Hacking
Web App Attack
๐ญ๐บ
DumaNet
2026-07-26 10:14:00
(1 day ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 26. 10:33:02
Source IP: 212.32 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 26. 10:33:02
Source IP: 212.32.69.244
Portion of the log(s):
212.32.69.244 - [26/Jul/2026:10:33:02 +0200] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
212.32.69.244 - [26/Jul/2026:10:33:01 +0200] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
212.32.69.244 - [26/Jul/2026:10:33:00 +0200] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
212.32.69.244 - [26/Jul/2026:10:32:59 +0200] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
212.32.69.244 - [26/Jul/2026:10:32:57 +0200] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
212.32.69.244 - [26/Jul/2026:10:32:54 +0200] "GET /.env HTTP
show less
Web App Attack
๐ซ๐ฎ
as211431.net
2026-07-26 10:08:29
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot