๐ซ๐ท
SpaceHost-Server
2026-10-12 22:19:14
(1 day ago)
Brute-Force
Web App Attack
๐บ๐ธ
jmr777
2026-10-12 18:03:00
(1 day ago)
IM360 WAF: Direct access to sensitive file or dotfile||MV:/api/system/fileView?file=/app/.env||RSV:8 ...
show more
IM360 WAF: Direct access to sensitive file or dotfile||MV:/api/system/fileView?file=/app/.env||RSV:8.75||T:APACHE||
Sensor:
modsec
Rule:
77045402
Abuser:
35.195.45.113
show less
Web App Attack
๐บ๐ธ
mw
2026-10-12 00:03:36
(2 days ago)
GET /.env HTTP/1.1
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-11 22:18:26
(2 days ago)
Brute-Force
Web App Attack
๐บ๐ธ
SLSLLC
2026-10-11 11:37:27
(3 days ago)
35.195.45.113 - - [11/Oct/2026:11:37:26 +0000] "GET /@fs/.env?url&raw?? HTTP/2.0" 403 1858 "-" "Mozi ...
show more
35.195.45.113 - - [11/Oct/2026:11:37:26 +0000] "GET /@fs/.env?url&raw?? HTTP/2.0" 403 1858 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
...
show less
Brute-Force
Web App Attack
Anonymous
2026-10-11 09:35:20
(3 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐จ๐ฆ
Vianpyro
2026-10-11 09:21:28
(3 days ago)
Honeypot: 284 request(s) in 0 min. Paths: /, /%2Fadmin, /%2Fapi/config, /%2Fdashboard, /%2Fsettings. ...
show more
Honeypot: 284 request(s) in 0 min. Paths: /, /%2Fadmin, /%2Fapi/config, /%2Fdashboard, /%2Fsettings. Method(s): GET, POST. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +htt. ASN: 396982 (Google LLC). URL-encoding WAF evasion detected.
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 09:16:57
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.195.45.113 (113.45.195.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.45.113 (113.45.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 05:16:49.117719 2026] [security2:error] [pid 26421:tid 26421] [client 35.195.45.113:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cdn.socialstudiesforkids.com"] [uri "/.env"] [unique_id "astUASuAFjPLfWxO9ujKGAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
thesimonmanuel
2026-10-11 09:15:57
(3 days ago)
35.195.45.113 - - [11/Oct/2026:14:45:56 +0530] "GET /.git/HEAD HTTP/2.0" 404 87 "-" "Mozilla/5.0 App ...
show more
35.195.45.113 - - [11/Oct/2026:14:45:56 +0530] "GET /.git/HEAD HTTP/2.0" 404 87 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" "35.195.45.113"
show less
Web App Attack
๐ฉ๐ช
macrob
2026-10-11 08:27:06
(3 days ago)
2026/10/11 08:27:04 [error] 2401924#2401924: *39594699 access forbidden by rule, client: 35.195.45.1 ...
show more
2026/10/11 08:27:04 [error] 2401924#2401924: *39594699 access forbidden by rule, client: 35.195.45.113, server: cdn.binixocrm.com, request: "GET /firebase-admin.json HTTP/2.0", host: "cdn.binixocrm.com"
2026/10/11 08:27:04 [error] 2401924#2401924: *39594699 access forbidden by rule, client: 35.195.45.113, server: cdn.binixocrm.com, request: "GET /public/admin.json HTTP/2.0", host: "cdn.binixocrm.com"
2026/10/11 08:27:04 [error] 2401924#2401924: *39594699 access forbidden by rule, client: 35.195.45.113, server: cdn.binixocrm.com, request: "GET /.env.example HTTP/2.0", host: "cdn.binixocrm.com"
...
show less
Web App Attack
๐ฉ๐ช
SCHAPPY
2026-10-11 08:22:41
(3 days ago)
Malicious activity from IP detected: crowdsecurity/http-sensitive-files.
Web App Attack
Hacking
๐ซ๐ท
security.rdmc.fr
2026-10-11 08:17:00
(3 days ago)
Web App Attack
Web App Attack
Anonymous
2026-10-11 07:10:37
(3 days ago)
35.195.45.113 - - [11/Oct/2026:02:10:36 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (co ...
show more
35.195.45.113 - - [11/Oct/2026:02:10:36 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 172.71.127.141
35.195.45.113 - - [11/Oct/2026:02:10:36 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 172.71.127.141
35.195.45.113 - - [11/Oct/2026:02:10:36 -0500] "GET /.env?import&url&inline HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 172.71.127.142
35.195.45.113 - - [11/Oct/2026:02:10:36 -0500] "GET /.env.local?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" 172.71.127.141
35.195.45.113 - - [11/Oct/2026:02:10:36 -0500] "GET /.env.local?import&raw HTTP/1.1" 403 199 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 172.71.127.142
35.195.45.113 - - [11/Oct/2026:02:10
...
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-11 04:30:06
(3 days ago)
CrowdSec decision: crowdsecurity/http-bad-user-agent (origin: crowdsec)
Port Scan
๐บ๐ธ
1gz
2026-10-11 02:28:14
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET met ...
show more
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /agent/.env
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot