Anonymous
2026-06-15 11:09:20
(1 day ago)
Honeypot trap fired (Cloudflare Worker). IP requested non-existent credential/admin/scanner-bait pat ...
show more
Honeypot trap fired (Cloudflare Worker). IP requested non-existent credential/admin/scanner-bait paths: /.git/config. None of these endpoints exist on our service - matched bait pattern. First seen UTC: 2026-06-14 22:23:12.
show less
Web App Attack
๐ฉ๐ช
Dominik Lysiak
2026-06-15 09:50:59
(1 day ago)
34.126.219.124 - - [15/Jun/2026:11:50:57 +0200] "GET /symfony/.git/config HTTP/1.1" 404 271 "-" "SEC ...
show more
34.126.219.124 - - [15/Jun/2026:11:50:57 +0200] "GET /symfony/.git/config HTTP/1.1" 404 271 "-" "SEC-SGHX820/1.0 NetFront/3.2 Profile/MIDP-2.0 Configuration/CLDC-1.1"
34.126.219.124 - - [15/Jun/2026:11:50:57 +0200] "GET /laravel/.git/config HTTP/1.1" 404 271 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36"
34.126.219.124 - - [15/Jun/2026:11:50:57 +0200] "GET /.git/config HTTP/1.1" 404 271 "-" "SAMSUNG-SGH-A867/A867UCHJ3 SHP/VPP/R5 NetFront/35 SMM-MMS/1.2.0 profile/MIDP-2.0 configuration/CLDC-1.1 UP.Link/6.3.0.0.0"
...
show less
Web App Attack
๐ณ๐ฑ
debestelapp
2026-06-15 09:25:10
(1 day ago)
Web App Attack
๐ง๐ช
cmbplf
2026-06-15 07:29:08
(1 day ago)
5.144 requests with url.path *.git/*
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-15 07:22:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.219.124 (124.219.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.219.124 (124.219.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:22:40.827717 2026] [security2:error] [pid 20138:tid 20138] [client 34.126.219.124:35434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dc406.dc406.org"] [uri "/build/.git/config"] [unique_id "ai-oQPFM8_pOEVazj0jc4AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-06-15 07:13:53
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 06:17:45
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.219.124 (124.219.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.219.124 (124.219.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:17:38.741248 2026] [security2:error] [pid 9607:tid 9607] [client 34.126.219.124:58268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atheismz.com"] [uri "/api/.git/config"] [unique_id "ai-ZAvTT9bmK1xZWpkbLswAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 05:41:17
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.219.124 (124.219.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.219.124 (124.219.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:41:09.938648 2026] [security2:error] [pid 4440:tid 4440] [client 34.126.219.124:51288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shelyaneandmartin.com.naturopathicsource.com"] [uri "/api/.git/config"] [unique_id "ai-QdRDnxuEd90NBe1Q9zgAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 05:24:03
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.219.124 (124.219.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.219.124 (124.219.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:23:57.836841 2026] [security2:error] [pid 1286:tid 1286] [client 34.126.219.124:37736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cinziallc.com"] [uri "/web/.git/config"] [unique_id "ai-MbdanrLiGMKX9jOSqjwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-06-15 02:50:04
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-06-15 02:06:07
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-15 01:55:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.219.124 (124.219.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.219.124 (124.219.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:55:42.859363 2026] [security2:error] [pid 24981:tid 24981] [client 34.126.219.124:45716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jockoenterprises.com"] [uri "/symfony/.git/config"] [unique_id "ai9bnm6qFRAp-FErgK2U5QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-15 01:19:32
(1 day ago)
Malicious activity detected
Hacking
Web App Attack
Anonymous
2026-06-15 00:19:36
(1 day ago)
CrowdSec ban: crowdsecurity/http-sensitive-files
Port Scan
๐ฉ๐ช
FeG Deutschland
2026-06-14 23:11:23
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack