[ThuJun1123:35:05.2632072026][security2:error][pid2647254:tid2647334][client34.174.30.78:0]ModSecuri ...
show more[ThuJun1123:35:05.2632072026][security2:error][pid2647254:tid2647334][client34.174.30.78:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"scrspace.com.136-243-54-122.cpanel.site\"][uri\"/.env.prod.bak\"][unique_id\"aisqCYAdwjG5nbuZyFx-BwAAAMI\"]
show less
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/1.1 (GET method ...
show moreTriggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/1.1 (GET method)
Endpoint: /dashboard/.env
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Whale/1.5.75.9 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(๐พ - ๐ Many TCP/SYN ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(๐พ - ๐ Many TCP/SYN - Possible Masscan Network Service Discovery ๐ฅท - T1046). Ip 34.174.30.78 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-10 23:25:01.260010812 +0000 UTC
show less
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less