๐บ๐ธ
mnsf
2026-10-21 12:05:06
(3 hours ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
๐ณ๐ฑ
ItsJustStan
2026-10-21 05:15:08
(10 hours ago)
Web app attack - scanning for vulnerabilities
Web App Attack
๐บ๐ธ
rsa
2026-10-20 23:07:00
(16 hours ago)
GET /firebase-adminsdk.json HTTP/2.0
DDoS Attack
Exploited Host
Web App Attack
๐ฉ๐ช
macrob
2026-10-20 22:35:56
(17 hours ago)
2026/10/20 22:35:54 [error] 2817545#2817545: *20089989 access forbidden by rule, client: 34.158.58.8 ...
show more
2026/10/20 22:35:54 [error] 2817545#2817545: *20089989 access forbidden by rule, client: 34.158.58.81, server: cityslo.org, request: "GET /.git/config HTTP/2.0", host: "cityslo.org"
2026/10/20 22:35:55 [error] 2817545#2817545: *20090012 access forbidden by rule, client: 34.158.58.81, server: cityslo.org, request: "GET /.env HTTP/2.0", host: "cityslo.org"
2026/10/20 22:35:55 [error] 2817545#2817545: *20090012 access forbidden by rule, client: 34.158.58.81, server: cityslo.org, request: "GET /.env.local HTTP/2.0", host: "cityslo.org"
...
show less
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-20 22:19:42
(17 hours ago)
Brute-Force
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-20 22:07:55
(17 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐ธ๐ฌ
anotherwatcher
2026-10-20 21:47:31
(17 hours ago)
bad bot
Bad Web Bot
Anonymous
2026-10-20 21:26:25
(18 hours ago)
Apache vulnerability scan
Brute-Force
Web App Attack
Anonymous
2026-10-20 21:11:23
(18 hours ago)
Vulnerability scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 20:31:49
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.158.58.81 (81.58.158.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.158.58.81 (81.58.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 16:31:44.139485 2026] [security2:error] [pid 19270:tid 19270] [client 34.158.58.81:35082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "civilwarzone.andrewrmarshall.com"] [uri "/.git/config"] [unique_id "atfPsJbpxO-p2ikTZaAq4gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
IndigoRidge
2026-10-20 19:57:07
(19 hours ago)
34.158.58.81 - - [20/Oct/2026:15:56:28 -0400] "GET /.git/config HTTP/1.1" 404 90314 "-" "Mozilla/5.0 ...
show more
34.158.58.81 - - [20/Oct/2026:15:56:28 -0400] "GET /.git/config HTTP/1.1" 404 90314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.158.58.81 - - [20/Oct/2026:15:56:30 -0400] "GET /.env HTTP/1.1" 404 90298 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.158.58.81 - - [20/Oct/2026:15:57:06 -0400] "GET /app/.env HTTP/1.1" 404 90286 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฉ๐ช
LRob
2026-10-20 16:54:26
(22 hours ago)
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local | ua: Mozilla/5.0 (X11; Lin ...
show more
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐ง๐ท
ICS Labs
2026-10-20 16:51:00
(22 hours ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-20 UTC.
Brute-Force
๐ณ๐ฑ
Site.eu
2026-10-20 16:07:05
(23 hours ago)
Excessive multi-domain requests
Brute-Force
๐ช๐ธ
pipeline.es
2026-10-20 16:06:42
(23 hours ago)
Web scanning / probing for vulnerable paths | URL: /notifications/.env | Evidence: citytravel.pt 34. ...
show more
Web scanning / probing for vulnerable paths | URL: /notifications/.env | Evidence: citytravel.pt 34.158.58.81 - - [20/Oct/2026:18:05:12 +0200] \"GET /notifications/.env HTTP/1.1\" 404 22588 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=SG 18923 | ASN: GOOGLE-CLOUD-PLATFORM | Country: SG
show less
Port Scan
Web App Attack