Anonymous
2026-06-21 13:05:20
(13 hours ago)
"GET /api/.env HTTP/1.1"
Hacking
Web App Attack
Anonymous
2026-06-21 02:23:56
(1 day ago)
Too many successive quick attempts with error status 301, 404, 405, 444, 403 or 400
Bad Web Bot
๐ฉ๐ช
big-cloud.nl
2026-06-21 02:07:03
(1 day ago)
Try to access /api/.env
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-06-21 01:12:34
(1 day ago)
2a0b:8bc0:2:8c50::1 - - [21/Jun/2026:04:12:31 +0300] "GET /.env HTTP/1.1" 404 628 "-" "Mozilla/5.0 ( ...
show more
2a0b:8bc0:2:8c50::1 - - [21/Jun/2026:04:12:31 +0300] "GET /.env HTTP/1.1" 404 628 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
2a0b:8bc0:2:8c50::1 - - [21/Jun/2026:04:12:33 +0300] "GET /api/.env HTTP/1.1" 404 689 "-" "anthropic-ai"
...
show less
Web App Attack
๐บ๐ธ
oralunal
2026-06-20 23:54:42
(1 day ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-06-20 20:59:27
(1 day ago)
Bad bot ignoring robot.txt
Bad Web Bot
๐ซ๐ท
Baking333
2026-06-20 15:04:03
(1 day ago)
[redacted] 2a0b:8bc0:2:8c50::1 - - [20/Jun/2026:16:04:01 +0100] "GET /.aws/credentials HTTP/1.1" 302 ...
show more
[redacted] 2a0b:8bc0:2:8c50::1 - - [20/Jun/2026:16:04:01 +0100] "GET /.aws/credentials HTTP/1.1" 302 5303 0/65066 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:support@[redacted]" [redacted] 2a0b:8bc0:2:8c50::1 - - [20/Jun/2026:16:04:01 +0100] "GET /.env HTTP/1.1" 302 5303 0/62607 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://[redacted]/support/amazonbot)"
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-20 11:52:34
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:8c50::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:8c50::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 07:52:27.672550 2026] [security2:error] [pid 14566:tid 14566] [client 2a0b:8bc0:2:8c50::1:36282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.athletefirst.org"] [uri "/.env"] [unique_id "ajZ---kZXq4CWDvze9wfvAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-20 10:20:29
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:8c50::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:8c50::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 06:20:22.027025 2026] [security2:error] [pid 13530:tid 13530] [client 2a0b:8bc0:2:8c50::1:39542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rodandreelpiercam.com"] [uri "/.env.example"] [unique_id "ajZpZgX9_TUyzH8dQjROZQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob.fr
2026-06-20 10:15:05
(1 day ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-20 09:28:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:8c50::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:8c50::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 05:27:54.618454 2026] [security2:error] [pid 7897:tid 7897] [client 2a0b:8bc0:2:8c50::1:46396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wildlifetaxidermy.com"] [uri "/.env.production"] [unique_id "ajZdGrLRMFVawcennpCkxwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-06-20 04:30:56
(1 day ago)
[redacted] 2a0b:8bc0:2:8c50::1 - - [20/Jun/2026:05:30:54 +0100] "GET /api/.env HTTP/1.1" 302 1591 0/ ...
show more
[redacted] 2a0b:8bc0:2:8c50::1 - - [20/Jun/2026:05:30:54 +0100] "GET /api/.env HTTP/1.1" 302 1591 0/197709 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://[redacted]/searchbot" [redacted] 2a0b:8bc0:2:8c50::1 - - [20/Jun/2026:05:30:54 +0100] "GET /.aws/credentials HTTP/1.1" 302 1559 0/44885 "-" "Mozilla/5.0 (compatible; Claude-Web/1.0; +https://[redacted])"
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-06-20 04:18:14
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-20 03:21:29
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:8c50::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:8c50::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 23:21:20.517333 2026] [security2:error] [pid 2771:tid 2771] [client 2a0b:8bc0:2:8c50::1:52106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gubbio.name"] [uri "/api/.env"] [unique_id "ajYHMKkQlsUloSKFr1ki7wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
sefinek.net
2026-06-20 03:17:59
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from NL.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /stats.json | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected] โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot