2026-09-07 23:40:02
(1 week ago)
suspicious request in access.log
Web App Attack
🇬🇧
rakkor
2026-09-07 17:36:24
(1 week ago)
2026-09-07T18:36:24+01:00 NAS [Mon Sep 07 18:36:24.257873 2026] [proxy_fcgi:error] [pid 22310:tid 22 ...
show more
2026-09-07T18:36:24+01:00 NAS [Mon Sep 07 18:36:24.257873 2026] [proxy_fcgi:error] [pid 22310:tid 22334] [client 34.74.198.14:56336] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Hacking
🇩🇪
BlueWire Hosting
2026-09-07 16:08:38
(1 week ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 13:27:31
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.74.198.14 (14.198.74.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.198.14 (14.198.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 09:27:26.306607 2026] [security2:error] [pid 21444:tid 21444] [client 34.74.198.14:40374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.groovedoctors.com"] [uri "/.git/config"] [unique_id "ap67vksuoE0ujQdlFB_aVwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 12:45:46
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.74.198.14 (14.198.74.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.198.14 (14.198.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 08:45:41.612698 2026] [security2:error] [pid 5005:tid 5005] [client 34.74.198.14:41000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.gracebaptisthartsville.com"] [uri "/.git/config"] [unique_id "ap6x9ZHEya9iBjfSRzWC2gAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-09-07 12:01:23
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: staging.goblinpot.online | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 11:53:45
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.74.198.14 (14.198.74.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.198.14 (14.198.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 07:53:41.562092 2026] [security2:error] [pid 15755:tid 15755] [client 34.74.198.14:39566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.gmp-ts.com"] [uri "/.git/config"] [unique_id "ap6lxbRyaoN2Nia5M8PSDAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-07 08:46:29
(1 week ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-07 08:39:42
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 34.74.198.14 (US/United States/14.198.74.34.bc. ...
show more
(mod_security) mod_security (id:949110) triggered by 34.74.198.14 (US/United States/14.198.74.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇩🇪
LRob
2026-09-07 08:32:16
(1 week ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config | 2026-09-07 08:32 UTC
show less
Hacking
Web App Attack
🇩🇪
ger-stg-sifi1
2026-09-07 07:14:13
(1 week ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇳🇿
Antinson
2026-09-07 06:08:43
(1 week ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇳🇱
GabrielJST
2026-09-07 04:48:16
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.74.198.14 (US/United States/14.198.7 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.74.198.14 (US/United States/14.198.74.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-09-07 03:39:53
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.74.198.14 (14.198.74.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.198.14 (14.198.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 23:39:45.581338 2026] [security2:error] [pid 15526:tid 15526] [client 34.74.198.14:42042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.eta-mct.com"] [uri "/.git/config"] [unique_id "ap4yAc8S1VF7dwtZTO4o0gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-07 03:38:23
(1 week ago)
Excessive multi-domain requests
Brute-Force