🇬🇧
openstrike.co.uk
2026-11-07 06:16:35
UTC ·
(1 day ago)
210 attacks on VC URLs, PHP URLs, env grabbing URLs (type 2), config grabbing URLs (type 2), directory traversals, password/key grabbing URLs, env grabbing URLs:
GET /.git/HEAD HTTP/1.1
GET /laravel../config/database.php HTTP/1.1
GET /proc/self/cmdli ...
show more
210 attacks on VC URLs, PHP URLs, env grabbing URLs (type 2), config grabbing URLs (type 2), directory traversals, password/key grabbing URLs, env grabbing URLs:
GET /.git/HEAD HTTP/1.1
GET /laravel../config/database.php HTTP/1.1
GET /proc/self/cmdline HTTP/1.1
GET /config/custom-environment-variables.json HTTP/1.1
GET /..%2f.env HTTP/1.1
GET /.git-credentials HTTP/1.1
GET /apps/api/.env HTTP/1.1
show less
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-06 23:02:00
UTC ·
(2 days ago)
Auto-ban: >3000 req/min op 2026-11-06
Web App Attack
SSH
Hacking
🇨🇦
Mediashaker
2026-11-06 19:35:23
UTC ·
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.79.2.99 (BE/Belgium/99.2.79.34.bc.googleusercontent.com)
SQL Injection
🇫🇮
as211431.net
2026-11-06 18:56:45
UTC ·
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.env.supabase
UA: Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
Th ...
show more
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.env.supabase
UA: Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇲🇾
Rizzy
2026-11-06 18:02:29
UTC ·
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
2026-11-06 18:01:48
UTC ·
(2 days ago)
Pay by Jag firewall blocked probes for sensitive files from this address against protected websites.
Hacking
Web App Attack
🇩🇪
sternwart
2026-11-06 17:49:42
UTC ·
(2 days ago)
Automatisch erkannt: Zugriff auf /static../.env (3d.alpasana.ch)
Web App Attack
Bad Web Bot
🇳🇱
e.fierstra
2026-11-06 17:30:31
UTC ·
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇧🇷
radardatelecom
2026-11-06 16:54:03
UTC ·
(2 days ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 16:23:50
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.79.2.99 (99.2.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:23:46.898555 2026] [security2:error] [pid 32174:tid 32174] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.79.2.99 (99.2.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:23:46.898555 2026] [security2:error] [pid 32174:tid 32174] [client 34.79.2.99:45828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.keeftone.com"] [uri "/apps/web/.env"] [unique_id "au3_EiIbz5rdVmRUhJHlxwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-06 16:22:00
UTC ·
(2 days ago)
34.79.2.99 - - [07/Nov/2026:00:21:58 +0800] "GET /v2/.env HTTP/2.0" 404 19 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.79.2.99 - - [07/Nov/2026:00:21:59 +0800] " ...
show more
34.79.2.99 - - [07/Nov/2026:00:21:58 +0800] "GET /v2/.env HTTP/2.0" 404 19 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.79.2.99 - - [07/Nov/2026:00:21:59 +0800] "GET /apps/web/.env HTTP/2.0" 404 11 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
...
show less
Bad Web Bot
Web App Attack
🇵🇱
itsvic.dev
2026-11-06 15:58:45
UTC ·
(2 days ago)
34.79.2.99 - - [06/Nov/2026:15:58:44 +0000] "uptime.itsvic.dev" "GET /sendgrid.env HTTP/2.0" 404 98 357 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.79.2.99 - - [06/Nov/2026:15:58:44 +0000] "uptime.itsvic.dev" "GET /config.env HTTP/2.0" 404 96 2 ...
show more
34.79.2.99 - - [06/Nov/2026:15:58:44 +0000] "uptime.itsvic.dev" "GET /sendgrid.env HTTP/2.0" 404 98 357 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.79.2.99 - - [06/Nov/2026:15:58:44 +0000] "uptime.itsvic.dev" "GET /config.env HTTP/2.0" 404 96 235 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.79.2.99 - - [06/Nov/2026:15:58:44 +0000] "uptime.itsvic.dev" "GET /dev/.env HTTP/2.0" 404 94 201 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
...
show less
Brute-Force
Web App Attack
🇳🇱
Roderic
2026-11-06 15:55:03
UTC ·
(2 days ago)
Insights: web vulnerability probing, 82 requests on 1 site, e.g. /web/.env, /css../.env, /....//....//....//..../.env (rotating 29 fake bot names, e.g. Googlebot (fake), Bingbot (fake), Brow
Web App Attack
🇩🇪
FeG Deutschland
2026-11-06 14:32:26
UTC ·
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
2026-11-06 14:31:02
UTC ·
(2 days ago)
Blocked by fail2ban on a public web server.
Web App Attack
