2026-10-27 17:27:18
(44 minutes ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇫🇮
paissangroup
2026-10-27 16:49:22
(1 hour ago)
Multiple WAF Violations
Web App Attack
🇩🇪
FD-IX
2026-10-27 15:15:33
(2 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 14:57:03
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.95.218.34 (34.218.95.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.218.34 (34.218.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 10:56:59.162991 2026] [security2:error] [pid 1286:tid 1286] [client 34.95.218.34:38374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vexxarr.com"] [uri "/.git/config"] [unique_id "auC7u2MnNl_4zhKrLB1yYAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
dominioz
2026-10-27 12:47:45
(5 hours ago)
2026-10-27 12:46:50 GET /.git/config - - 34.95.218.34 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+Apple ...
show more
2026-10-27 12:46:50 GET /.git/config - - 34.95.218.34 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245
2026-10-27 12:46:50 GET /.env - - 34.95.218.34 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245
2026-10-27 12:46:51 GET /.env.local - - 34.95.218.34 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 226
2026-10-27 12:46:51 GET /.env.production - - 34.95.218.34 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 226
2026-10-27 12:46:51 GET /.env.staging - - 34.95.218.34 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 226
...
show less
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-10-27 09:13:15
(8 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
2026-10-27 08:37:01
(9 hours ago)
Web probing (332 hits in 24h) on vestingstadvalkenburg.nl: sensitive-path scans and/or 404 bursts. R ...
show more
Web probing (332 hits in 24h) on vestingstadvalkenburg.nl: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
Web App Attack
2026-10-27 07:13:08
(10 hours ago)
Observed sensitive configuration-file probing against a web application under my control. Representa ...
show more
Observed sensitive configuration-file probing against a web application under my control. Representative paths: /.env.staging, /.env.test, /.env.production, /.env, /.env.sample, /.env.uat, /.env.ci, /.env.swp. 108 blocked requests in a short window. Observed directly in Cloudflare Security Events on infrastructure under my control.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 07:05:19
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.95.218.34 (34.218.95.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.218.34 (34.218.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 03:05:14.994564 2026] [security2:error] [pid 4328:tid 4328] [client 34.95.218.34:35060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vespaitaliancafe.matteozacchino.dev"] [uri "/.git/config"] [unique_id "auBNKlsnypnI7NdLDtUSNgAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-27 05:29:00
(12 hours ago)
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local | ua: Mozilla/5.0 (X11; Lin ...
show more
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
🇩🇪
wpadm4
2026-10-27 04:29:16
(13 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
Mr-Money
2026-10-26 23:38:15
(18 hours ago)
scenario: crowdsecurity/http-sensitive-files - events: 5
Web App Attack
Hacking
2026-10-26 23:33:46
(18 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇬🇧
consul.to
2026-10-26 22:22:39
(19 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Savvii
2026-10-26 21:59:14
(20 hours ago)
20 attempts against mh-misbehave-ban on tilia
Brute-Force
Bad Web Bot
Web App Attack