🇫🇷
SpaceHost-Server
2025-10-07 22:30:15
(9 months ago)
Brute-Force
Web App Attack
🇹🇷
rtbh.com.tr
2025-10-07 20:09:13
(9 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-10-07 00:09:12
(9 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪
SpaceHost-Server
2025-10-06 22:28:38
(9 months ago)
Brute-Force
Web App Attack
🇹🇷
rtbh.com.tr
2025-10-06 20:09:12
(9 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇯🇵
ki3
2025-10-06 14:44:55
(9 months ago)
Fail2Ban: Web App Attacks and Forum Spam 51.195.19.37 1759761894.0(JST)
Web Spam
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2025-10-06 13:36:41
(9 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.env
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
rdpguard.com
2025-10-06 12:18:21
(9 months ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
TPI-Abuse
2025-10-06 11:42:01
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 51.195.19.37 (ip37.ip-51-195-19.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.195.19.37 (ip37.ip-51-195-19.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 06 07:41:56.541230 2025] [security2:error] [pid 25190:tid 25190] [client 51.195.19.37:54750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "learningbyshipping.com"] [uri "/.env"] [unique_id "aOOrBIKvT6QaZulJMI3xDQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇻🇳
Xuan Can
2025-10-06 11:31:41
(9 months ago)
(mod_security) mod_security (id:77316757) triggered by 51.195.19.37 (FR/France/ip37.ip-51-195-19.eu) ...
show more
(mod_security) mod_security (id:77316757) triggered by 51.195.19.37 (FR/France/ip37.ip-51-195-19.eu): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 06 18:31:34.714028 2025] [security2:error] [pid 27064:tid 27113] [client 51.195.19.37:0] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/007_i360_custom.conf"] [line "343"] [id "77316757"] [msg "IM360 WAF: Laravel .env file access||RSV:6.33||T:APACHE||QS:||"] [severity "CRITICAL"] [tag "service_custom"] [hostname "sieuthimaychu.vn"] [uri "/.env"] [unique_id "aOOolq_p7svgNi7pdWOurAAAAFY"]
show less
Brute-Force
SSH
2025-10-06 10:50:04
(9 months ago)
Automatic report - Vulnerability scan
/.env
Web App Attack
🇺🇸
TPI-Abuse
2025-10-06 10:35:10
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 51.195.19.37 (ip37.ip-51-195-19.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.195.19.37 (ip37.ip-51-195-19.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 06 06:35:03.437850 2025] [security2:error] [pid 11224:tid 11224] [client 51.195.19.37:58110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "n3fjp.com"] [uri "/.env"] [unique_id "aOObV9TEVdpizTcjrNL1bAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-06 10:15:14
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 51.195.19.37 (ip37.ip-51-195-19.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.195.19.37 (ip37.ip-51-195-19.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 06 06:15:06.513740 2025] [security2:error] [pid 17177:tid 17177] [client 51.195.19.37:50792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cruisingforsex.com"] [uri "/.env"] [unique_id "aOOWqo_JyEzKFlNP6ilEWgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-06 09:30:17
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 51.195.19.37 (ip37.ip-51-195-19.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.195.19.37 (ip37.ip-51-195-19.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 06 05:30:11.491230 2025] [security2:error] [pid 14787:tid 14799] [client 51.195.19.37:57027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cmykdesign.com"] [uri "/.env"] [unique_id "aOOMI-vftosW5ZM_TuFYIgAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2025-10-06 09:16:35
(9 months ago)
URL Probing: /.env
Web App Attack