🇳🇱
Roderic
2026-06-15 16:12:22
(2 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
2026-06-15 11:12:15
(7 hours ago)
Honeypot trap fired (Cloudflare Worker). IP requested non-existent credential/admin/scanner-bait pat ...
show more
Honeypot trap fired (Cloudflare Worker). IP requested non-existent credential/admin/scanner-bait paths: /.git/config, /admin/.git/config, /api/.git/config, /app/.git/config, /assets/.git/config. None of these endpoints exist on our service - matched bait pattern. First seen UTC: 2026-06-15 09:20:25.
show less
Web App Attack
🇫🇷
masterguru
2026-06-15 07:41:13
(11 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 07:09:25
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.131.148.188 (188.148.131.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.131.148.188 (188.148.131.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:09:22.462490 2026] [security2:error] [pid 28895:tid 28895] [client 34.131.148.188:42864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rdj.us"] [uri "/web/.git/config"] [unique_id "ai-lIoOSsDacmmme2e-4NgAAADs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-06-15 06:17:27
(12 hours ago)
[redacted] 34.131.148.188 - - [15/Jun/2026:07:17:26 +0100] "GET /frontend/.git/config HTTP/1.1" 302 ...
show more
[redacted] 34.131.148.188 - - [15/Jun/2026:07:17:26 +0100] "GET /frontend/.git/config HTTP/1.1" 302 5268 0/48981 "-" "Mozilla/5.0 (Linux; Android 9; Redmi Note 7 Build/PKQ1.180904.001) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537.36" [redacted] 34.131.148.188 - - [15/Jun/2026:07:17:26 +0100] "GET /backend/.git/config HTTP/1.1" 302 5268 0/70450 "-" "Mozilla/5.0 (X11; U; Linux x86_64; us; rv:1.9.1.19) Gecko/20110430 shadowfox/7.0 (like Firefox/7.0"
show less
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-06-15 05:53:43
(12 hours ago)
Web vulnerability probing: /dashboard/.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 05:27:25
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.131.148.188 (188.148.131.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.131.148.188 (188.148.131.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:27:17.988275 2026] [security2:error] [pid 4688:tid 4688] [client 34.131.148.188:57310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "opmasterpainter.com"] [uri "/code/.git/config"] [unique_id "ai-NNSzbMZqSXc5no2hhqAAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 04:51:14
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.131.148.188 (188.148.131.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.131.148.188 (188.148.131.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:51:07.725956 2026] [security2:error] [pid 9242:tid 9242] [client 34.131.148.188:44494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nautanet.info"] [uri "/backend/.git/config"] [unique_id "ai-Eu5xdDZ-XdcVLU9NM0gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-06-15 04:23:57
(14 hours ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.131.148.188 (IN/I ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.131.148.188 (IN/India/188.148.131.34.bc.googleusercontent.com)
show less
Bad Web Bot
🇩🇪
Starburst SysOp Team
2026-06-15 04:19:21
(14 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-nue6-2)
Hacking
Web App Attack
🇩🇪
Teufel100
2026-06-15 04:03:15
(14 hours ago)
Bruteforce gegen Einstellungsdateien wie .env oder .git
Brute-Force
Hacking
Web App Attack
🇳🇿
Antinson
2026-06-15 03:35:31
(15 hours ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇮🇹
clamehost.it
2026-06-15 03:33:34
(15 hours ago)
Automatic report - Brute Force attack using this IP address
Brute-Force
🇸🇪
maxxsense
2026-06-15 02:32:52
(16 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.131.148.188 (IN/India/188.148.131.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.131.148.188 (IN/India/188.148.131.34.bc.googleusercontent.com)
show less
SQL Injection
🇬🇧
consul.to
2026-06-15 01:18:55
(17 hours ago)
Web attack/malicious scanning detected
Web App Attack