๐บ๐ธ
WellSpring
2026-11-09 21:37:04
UTC ยท
(6 hours ago)
env leak on wellspr.ing/graphql/.env โ WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
๐ง๐ช
Saec
2026-11-09 19:01:28
UTC ยท
(9 hours ago)
Jarvis auto-ban: Honeypot /administrator/.env via 8.saec.me [IN] ASN:Google LLC
Port Scan
Web App Attack
Anonymous
2026-11-09 12:06:26
UTC ยท
(15 hours ago)
[ns27.kdns.gr] httpd-config-scan: sites=copynet.gr; logs=/var/log/httpd/domains/copynet.gr.log; samples=/.git/config | fast_lane=true kernel_at=2026-11-09T12:06:02+00:00 | requests=1
Hacking
Web App Attack
๐ฎ๐น
CoreTech srl
2026-11-09 11:25:53
UTC ยท
(16 hours ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
๐ง๐ท
Halux
2026-11-09 06:02:11
UTC ยท
(22 hours ago)
34.14.184.154 Probing protected path or service
Web App Attack
Anonymous
2026-11-09 05:57:17
UTC ยท
(22 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฑ๐ป
radix
2026-11-09 00:20:54
UTC ยท
(1 day ago)
Automated probing for sensitive configuration files and environment leaks.
Hacking
Brute-Force
๐ธ๐ช
vaia.cloud
2026-11-08 23:10:01
UTC ยท
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-11-08 04:37:54
UTC ยท
(1 day ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.14.184.154 - - [08/Nov/2026:05:37:40 +0100] "GET /.git/config HTTP/1.1" 404 418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.14.184.154 - - [08/Nov/2026:05:37:40 +0100] "GET /.git/config HTTP/1.1" 404 418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐จ๐ฑ
Fernando Soto
2026-11-08 03:05:16
UTC ยท
(2 days ago)
WAF propio vps1 (CL): sensMASx212 score 28 en 1h. sondeo rutas sensibles.
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-11-07 23:17:58
UTC ยท
(2 days ago)
Brute-Force
Web App Attack
๐ต๐ฑ
Budyn
2026-11-07 09:03:55
UTC ยท
(2 days ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: cdn.budyn.wtf | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: cdn.budyn.wtf | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
๐ฉ๐ช
macrob
2026-11-07 08:03:07
UTC ยท
(2 days ago)
2026/11/07 08:03:05 [error] 264516#264516: *11687543 access forbidden by rule, client: 34.14.184.154, server: cdn.binixocrm.com, request: "GET /.env HTTP/1.1", host: "cdn.binixocrm.com"
2026/11/07 08:03:06 [error] 264516#264516: *11687543 access forb ...
show more
2026/11/07 08:03:05 [error] 264516#264516: *11687543 access forbidden by rule, client: 34.14.184.154, server: cdn.binixocrm.com, request: "GET /.env HTTP/1.1", host: "cdn.binixocrm.com"
2026/11/07 08:03:06 [error] 264516#264516: *11687543 access forbidden by rule, client: 34.14.184.154, server: cdn.binixocrm.com, request: "GET /.env.local HTTP/1.1", host: "cdn.binixocrm.com"
2026/11/07 08:03:06 [error] 264516#264516: *11687543 access forbidden by rule, client: 34.14.184.154, server: cdn.binixocrm.com, request: "GET /.env.production HTTP/1.1", host: "cdn.binixocrm.com"
...
show less
Web App Attack
๐ซ๐ฎ
albionfreemarket.com
2026-11-07 04:02:45
UTC ยท
(3 days ago)
34.14.184.154 - - [07/Nov/2026:04:02:06 +0000] "GET /graphql/.env HTTP/2.0" 403 171 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.000 "-" "IN"
34.14.184.154 - - [07/Nov/2026:04:02:44 +00 ...
show more
34.14.184.154 - - [07/Nov/2026:04:02:06 +0000] "GET /graphql/.env HTTP/2.0" 403 171 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.000 "-" "IN"
34.14.184.154 - - [07/Nov/2026:04:02:44 +0000] "GET /phpinfo.php HTTP/2.0" 403 171 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.000 "-" "IN"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
arteagasoft
2026-11-07 03:00:26
UTC ยท
(3 days ago)
[07/Nov/2026:03:00:21 +0000] - 404 404 - GET https contenedores.arteagasoft.com "/.git/config" [Client 34.14.184.154] [Length 19] [Gzip -] [Sent-to 192.168.31.250] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0 ...
show more
[07/Nov/2026:03:00:21 +0000] - 404 404 - GET https contenedores.arteagasoft.com "/.git/config" [Client 34.14.184.154] [Length 19] [Gzip -] [Sent-to 192.168.31.250] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[07/Nov/2026:03:00:22 +0000] - 404 404 - GET https contenedores.arteagasoft.com "/.env" [Client 34.14.184.154] [Length 19] [Gzip -] [Sent-to 192.168.31.250] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[07/Nov/2026:03:00:22 +0000] - 404 404 - GET https contenedores.arteagasoft.com "/.env.local" [Client 34.14.184.154] [Length 19] [Gzip -] [Sent-to 192.168.31.250] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[07/Nov/2026:03:00:22 +0000] - 404 404 - GET https contenedores.arteagasoft.com "/.env.production" [Client 34.14.184.154] [Length 19] [Gzip -] [Sent-to 192.168.31.250] "Mozilla/5.0 (X11; Linux
...
show less
Brute-Force