๐บ๐ธ
WellSpring
2026-10-23 23:23:41
(1 day ago)
env leak on wellspr.ing/smtp/.env โ WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-10-23 23:03:48
(1 day ago)
Scanning for exposed credentials and private keys
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-23 22:21:04
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.130.245.219 (219.245.130.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.245.219 (219.245.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 18:20:55.053249 2026] [security2:error] [pid 22654:tid 22654] [client 34.130.245.219:56538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "300blockofwarwick.com"] [uri "/.git/config"] [unique_id "atvdx7a8wrc0cz7EVNH6cgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
leo1305
2026-10-23 21:54:45
(1 day ago)
CrowdSec detection | scenario: http-probing
Port Scan
Web App Attack
๐ง๐ช
Saec
2026-10-23 21:15:51
(1 day ago)
Jarvis auto-ban: Honeypot /administrator/.env via 3.saec.me [CA] ASN:Google LLC
Port Scan
Web App Attack
๐ฉ๐ช
v1nc
2026-10-23 19:48:18
(1 day ago)
34.130.245.219 - - [23/Oct/2026:19:48:18 +0000] "GET /cakephp/.env HTTP/1.1" 404 181 "-" "Mozilla/5. ...
show more
34.130.245.219 - - [23/Oct/2026:19:48:18 +0000] "GET /cakephp/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-23 19:13:17
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.130.245.219 (219.245.130.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.245.219 (219.245.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 15:13:11.522401 2026] [security2:error] [pid 25826:tid 25826] [client 34.130.245.219:45966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3-6trucking.com"] [uri "/.git/config"] [unique_id "atuxxy7avT1TiO_SSmcXOAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-23 18:30:02
(1 day ago)
suspicious request in access.log
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-23 17:22:34
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-23 12:41:44
(1 day ago)
Excessive 404/403 errors
Brute-Force
๐ฉ๐ช
altenglaner
2026-10-23 12:15:28
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-22 09:59:25
(2 days ago)
Excessive multi-domain requests
Brute-Force
๐ณ๐ฑ
Alt255
2026-10-22 09:26:35
(3 days ago)
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.130.245.219 - - [22/Oct/2026:11:26:27 +0200] "GET /.git/config HTTP/1.1" 301 588 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-10-21 21:59:11
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-20.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-21 01:46:56
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.130.245.219 (219.245.130.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.245.219 (219.245.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:46:48.956466 2026] [security2:error] [pid 19734:tid 19734] [client 34.130.245.219:36316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1writeforthegrant.com"] [uri "/.git/config"] [unique_id "atgZiBT3s63Zr8SIdT2stgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack