๐บ๐ธ
WellSpring
2026-10-22 10:25:21
(8 hours ago)
env leak on wellspr.ing/notify/.env โ WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
Anonymous
2026-10-22 01:39:06
(17 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-10-21 12:10:08
(1 day ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-10-21 08:31:27
(1 day ago)
34.141.14.203 - - [21/Oct/2026:08:30:23 +0000] "GET /.git/config HTTP/1.1" 403 45612 "-" "Mozilla/5. ...
show more
34.141.14.203 - - [21/Oct/2026:08:30:23 +0000] "GET /.git/config HTTP/1.1" 403 45612 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.141.14.203"
34.141.14.203 - - [21/Oct/2026:08:30:25 +0000] "GET /.env HTTP/1.1" 403 45575 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.141.14.203"
34.141.14.203 - - [21/Oct/2026:08:30:26 +0000] "GET /.env.local HTTP/1.1" 403 45553 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.141.14.203"
34.141.14.203 - - [21/Oct/2026:08:30:28 +0000] "GET /.env.production HTTP/1.1" 403 45579 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.141.14.203"
34.141.14.203 - - [21/Oct/2026:08:30:29 +0000] "GET /.env.staging HTTP/1.1" 403 45585 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebK
...
show less
Web App Attack
Anonymous
2026-10-21 03:47:02
(1 day ago)
Bot / scanning and/or hacking attempts: GET /.env.test HTTP/1.1, GET /.git/config HTTP/1.1, GET /.en ...
show more
Bot / scanning and/or hacking attempts: GET /.env.test HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env HTTP/1.1, POST / HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.development HTTP/1.1
show less
Hacking
Web App Attack
๐ฉ๐ช
EGP Abuse Dept
2026-10-21 03:17:39
(1 day ago)
Scanning for web/db/file exploits on acva.nl
SQL Injection
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-21 03:16:54
(1 day ago)
166 requests with url.path *credentials.json
Brute-Force
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-10-21 03:07:50
(1 day ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.141.14.203 - - [21/Oct/2026:05:07:46 +0200] "GET /.git/config HTTP/1.1" 200 1569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-10-21 02:09:22
(1 day ago)
34.141.14.203 - - [21/Oct/2026:02:08:26 +0000] "GET /.env HTTP/1.1" 403 45540 "-" "Mozilla/5.0 (Wind ...
show more
34.141.14.203 - - [21/Oct/2026:02:08:26 +0000] "GET /.env HTTP/1.1" 403 45540 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.141.14.203"
34.141.14.203 - - [21/Oct/2026:02:08:27 +0000] "GET /.env.local HTTP/1.1" 403 45553 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.141.14.203"
34.141.14.203 - - [21/Oct/2026:02:08:28 +0000] "GET /.env.production HTTP/1.1" 403 45540 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.141.14.203"
34.141.14.203 - - [21/Oct/2026:02:08:29 +0000] "GET /.env.staging HTTP/1.1" 403 45585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.141.14.203"
34.141.14.203 - - [21/Oct/2026:02:08:29 +0000] "GET /.env.development HTTP/1.1" 403 45577 "
...
show less
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-10-21 02:03:53
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ฉ๐ช
23p02732
2026-10-21 02:03:50
(1 day ago)
Automated web scanning and malicious probing
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-21 00:02:20
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐จ๐ญ
zynex
2026-10-20 22:57:51
(1 day ago)
URL Probing: /.env
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 17:43:59
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.141.14.203 (203.14.141.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.14.203 (203.14.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 13:43:55.882884 2026] [security2:error] [pid 8509:tid 8509] [client 34.141.14.203:38062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "activethinkers.net"] [uri "/.git/config"] [unique_id "ateoW0Ujm1PMLHqK4El77AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-20 16:30:03
(2 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack