πΊπΈ
Major Hostility
2026-10-20 09:18:19
(19 minutes ago)
"GET /.git/config HTTP/1.1" 404
"GET /.env HTTP/1.1" 404
"GET /.git/config HTTP/1.1" 404
"GET /.env. ...
show more
"GET /.git/config HTTP/1.1" 404
"GET /.env HTTP/1.1" 404
"GET /.git/config HTTP/1.1" 404
"GET /.env.local HTTP/1.1" 404
"GET /.env.production HTTP/1.1" 404
"GET /.env HTTP/1.1" 404
"GET /.env.staging HTTP/1.1" 404
"GET /.env.local HTTP/1.1" 404
"GET /.env.development HTTP/1.1" 404
"GET /.env.production HTTP/1.1" 404
"GET /.env.test HTTP/1.1" 404
"GET /.env.staging HTTP/1.1" 404
"GET /.env.development HTTP/1.1" 404
"GET /.env.test HTTP/1.1" 404
"GET /.env.remote HTTP/1.1" 404
"GET /.env.remote HTTP/1.1" 404
"GET /.env.bak HTTP/1.1" 404
"GET /.env.bak HTTP/1.1" 404
"GET /.env.backup HTTP/1.1" 404
"GET /.env.backup HTTP/1.1" 404
"GET /.env.save HTTP/1.1" 40
show less
Web App Attack
π¬π§
consul.to
2026-10-20 08:03:33
(1 hour ago)
Web attack/malicious scanning detected
Web App Attack
π¦πΊ
Block Rockin' Beats
2026-10-20 07:52:03
(1 hour ago)
Scanning for exploitable scripts
Hacking
Web App Attack
π³π±
debestelapp
2026-10-19 13:55:11
(19 hours ago)
Web App Attack
π³π±
Alt255
2026-10-19 13:52:59
(19 hours ago)
[cb-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.21.199.14 - - [19/Oct/2026:15:52:49 +0200] "GET /.git/config HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
π³π±
e.fierstra
2026-10-19 11:12:11
(22 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
π©πͺ
konseptit
2026-10-19 10:55:51
(22 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.21.199.14 (SG/Singapore/14.199.21.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.21.199.14 (SG/Singapore/14.199.21.34.bc.googleusercontent.com)
show less
SQL Injection
π©πͺ
ghostwarriors
2026-10-19 10:20:07
(23 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
π©πͺ
yitzhaq
2026-10-19 10:09:23
(23 hours ago)
34.21.199.14 - - [19/Oct/2026:12:09:18 +0200] "POST / HTTP/1.1" 200 2019 "-" "Mozilla/5.0 (X11; Linu ...
show more
34.21.199.14 - - [19/Oct/2026:12:09:18 +0200] "POST / HTTP/1.1" 200 2019 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.21.199.14 - - [19/Oct/2026:12:09:18 +0200] "GET /.git/config HTTP/1.1" 403 515 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.21.199.14 - - [19/Oct/2026:12:09:19 +0200] "GET /.env HTTP/1.1" 404 512 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.21.199.14 - - [19/Oct/2026:12:09:19 +0200] "GET /.env.local HTTP/1.1" 404 512 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.21.199.14 - - [19/Oct/2026:12:09:19 +0200] "GET /.env.production HTTP/1.1" 404 512 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.21.199.14 - - [19/Oct/2026:12:09:19 +0200] "GET /.env.stagin
show less
Web App Attack
Hacking
Anonymous
2026-10-19 09:09:37
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
πΊπΈ
dot.mg
2026-10-19 08:02:04
(1 day ago)
Bad behaviour
Web Spam
π³π΄
jad-abuse
2026-10-19 06:41:55
(1 day ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, source_backup. Observed by 1 sensor(s); 125 hits.
show less
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-19 05:54:13
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.21.199.14 (14.199.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.199.14 (14.199.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 01:54:07.322179 2026] [security2:error] [pid 9869:tid 9869] [client 34.21.199.14:51460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "larrybridwell.com"] [uri "/.git/config"] [unique_id "atWwf10P7BMfZL_uwa1EWgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
masterguru
2026-10-19 05:42:27
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
πΈπͺ
vaia.cloud
2026-10-19 02:50:02
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack