🇩🇪
MusicLibrary
2026-10-24 08:49:27
(3 days ago)
Attempted access to sensitive configuration files (.env, .git, etc.)
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-10-23 16:16:33
(4 days ago)
Web attack/Malicious activity detected
Web App Attack
2026-10-22 05:27:52
(5 days ago)
Automatically blocked after 1 security event. Observed repeated web application attack probes. Sourc ...
show more
Automatically blocked after 1 security event. Observed repeated web application attack probes. Source: Cloudflare security controls.
show less
Hacking
Web App Attack
2026-10-22 02:36:07
(5 days ago)
apache vulnerability scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 01:57:41
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 9.142.19.30 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 9.142.19.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:57:37.231662 2026] [security2:error] [pid 19044:tid 19044] [client 9.142.19.30:41639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cruisingforsex.com"] [uri "/.env"] [unique_id "atgcEUSpUvoYXUqvyC1o5wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 01:20:17
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 9.142.19.30 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 9.142.19.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:20:10.034112 2026] [security2:error] [pid 10182:tid 10182] [client 9.142.19.30:33553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "businessvaluationapp.com"] [uri "/.env"] [unique_id "atgTSqoU1SI4jl-6zylNIwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 16:45:11
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 9.142.19.30 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 9.142.19.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 12:45:02.383898 2026] [security2:error] [pid 17700:tid 17700] [client 9.142.19.30:47229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "glamorgirl.net"] [uri "/.env"] [unique_id "ateajkAnIQQL39cX2nBwzAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
lns.bz
2026-10-20 01:47:08
(1 week ago)
Web app attack [PL.Lu]
Exploited Host
Web App Attack
🇩🇪
Vegascosmetics
2026-10-18 09:27:36
(1 week ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.env (Match: /.env)
show less
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 08:24:02
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 9.142.19.30 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 9.142.19.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 04:23:57.400242 2026] [security2:error] [pid 355:tid 355] [client 9.142.19.30:35181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "learningbyshipping.com"] [uri "/.env"] [unique_id "atSCHW28QGazFYgnNKiSBQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-14 14:45:57
(1 week ago)
Automatically blocked after 2 security events. Observed sensitive configuration-file probes. Source: ...
show more
Automatically blocked after 2 security events. Observed sensitive configuration-file probes. Source: Cloudflare security controls.
show less
Hacking
Web App Attack