🇸🇪
vaia.cloud
2026-09-15 23:45:02
(3 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇪🇸
pipeline.es
2026-09-15 23:07:39
(3 days ago)
Web scanning / probing for vulnerable paths | URL: /current/.env | Evidence: dbtviagens.com.br 34.10 ...
show more
Web scanning / probing for vulnerable paths | URL: /current/.env | Evidence: dbtviagens.com.br 34.101.191.7 - - [16/Sep/2026:01:07:23 +0200] \"GET /current/.env HTTP/1.1\" 404 18933 \"-\" \"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=ID | ASN: GOOGLE-CLOUD-PLATFORM | Country: ID
show less
Port Scan
Web App Attack
🇵🇱
Budyn
2026-09-15 22:43:00
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: db.teddypot.online | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-09-15 17:59:35
(3 days ago)
Try to access /.git/config
Web App Attack
2026-09-15 15:47:02
(3 days ago)
Bot / scanning and/or hacking attempts: GET /.env.test HTTP/1.1, GET /.env.example HTTP/1.1, GET /.e ...
show more
Bot / scanning and/or hacking attempts: GET /.env.test HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.env.dev HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
WellSpring
2026-09-15 13:06:18
(4 days ago)
env leak on 801.today/site/.env — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 12:05:07
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.101.191.7 (7.191.101.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.191.7 (7.191.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 08:05:03.459165 2026] [security2:error] [pid 11494:tid 11494] [client 34.101.191.7:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globetechsecurities.com"] [uri "/.git/config"] [unique_id "aqk0b2NyC_sPTIGAJDbVMgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
Saec
2026-09-15 11:40:56
(4 days ago)
Honeypot caught: /.git/config via 8.saec.me. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) App ...
show more
Honeypot caught: /.git/config via 8.saec.me. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36.
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
IoT Targeted
🇳🇱
Savvii
2026-09-15 11:40:07
(4 days ago)
20 attempts against mh-misbehave-ban on orcus
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-15 07:47:59
(4 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 05:29:36
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.101.191.7 (7.191.101.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.191.7 (7.191.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 01:29:29.595495 2026] [security2:error] [pid 15895:tid 15895] [client 34.101.191.7:48730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globalweb123.com"] [uri "/.git/config"] [unique_id "aqjXuaY0vDSia9XvNtdm1QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack