🇳🇱
homeshowdomain.nl
2026-11-14 23:00:32
UTC ·
(20 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-13.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-14 21:53:03
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:52:54.126136 2026] [security2:error] [pid 12758:tid 12 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:52:54.126136 2026] [security2:error] [pid 12758:tid 12758] [client 34.17.125.30:56948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.therealseska.com"] [uri "/.git/config"] [unique_id "avjYNtfCcPZsOJ21LVnb3gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 19:27:03
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 14:26:56.739201 2026] [security2:error] [pid 27558:tid 27 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 14:26:56.739201 2026] [security2:error] [pid 27558:tid 27558] [client 34.17.125.30:37632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thedavidbowers.com"] [uri "/.git/config"] [unique_id "avi2AG2uAI06HtrQfpgTPwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 18:44:11
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 13:44:05.791683 2026] [security2:error] [pid 7805:tid 780 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 13:44:05.791683 2026] [security2:error] [pid 7805:tid 7805] [client 34.17.125.30:43572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thebestac.com"] [uri "/.git/config"] [unique_id "avir9TCd0dm7Plm9hN1sWwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 18:24:07
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 13:24:02.213549 2026] [security2:error] [pid 19945:tid 19 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 13:24:02.213549 2026] [security2:error] [pid 19945:tid 19945] [client 34.17.125.30:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.theabstractpress.com"] [uri "/.git/config"] [unique_id "avinQjnB0iW6jtL2XdL2ewAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 15:49:35
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 10:49:28.132812 2026] [security2:error] [pid 16184:tid 16 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 10:49:28.132812 2026] [security2:error] [pid 16184:tid 16184] [client 34.17.125.30:48172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.technologymoods.com"] [uri "/.git/config"] [unique_id "aviDCFJnpEWc4qsL0S1YcwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 11:09:00
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:08:55.120093 2026] [security2:error] [pid 21932:tid 21 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:08:55.120093 2026] [security2:error] [pid 21932:tid 21932] [client 34.17.125.30:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.swarnar.com"] [uri "/.git/config"] [unique_id "avhBR06hAe6NmhNJCOCcAQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 09:28:42
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:28:35.933236 2026] [security2:error] [pid 6925:tid 692 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:28:35.933236 2026] [security2:error] [pid 6925:tid 6925] [client 34.17.125.30:32922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.sunsettrailsardmore.com"] [uri "/.git/config"] [unique_id "avgpw4XGU1oB0KbyizCEzAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 08:42:25
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:42:17.700854 2026] [security2:error] [pid 12373:tid 12 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:42:17.700854 2026] [security2:error] [pid 12373:tid 12373] [client 34.17.125.30:40862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.suemead.com"] [uri "/.git/config"] [unique_id "avge6WzEaTV1xXBsG5RxkQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 07:04:37
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 02:04:32.646988 2026] [security2:error] [pid 18028:tid 18 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 02:04:32.646988 2026] [security2:error] [pid 18028:tid 18092] [client 34.17.125.30:60942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.stonyp.com"] [uri "/.git/config"] [unique_id "avgIALydSW2oN4zzWItEagAAAdM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 00:43:03
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:42:57.931583 2026] [security2:error] [pid 31902:tid 31 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:42:57.931583 2026] [security2:error] [pid 31902:tid 31902] [client 34.17.125.30:43592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.soleillavie.com"] [uri "/.git/config"] [unique_id "aveukY7Kg0v4vQbmVR6qGwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-13 16:24:28
UTC ·
(2 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 12:29:11
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:29:08.442596 2026] [security2:error] [pid 9311:tid 931 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:29:08.442596 2026] [security2:error] [pid 9311:tid 9311] [client 34.17.125.30:39730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.scc1.us"] [uri "/.git/config"] [unique_id "avcClILPAmnbd1vgyZEpOgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 07:03:20
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:03:13.611574 2026] [security2:error] [pid 490313:tid 4 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.125.30 (30.125.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:03:13.611574 2026] [security2:error] [pid 490313:tid 490313] [client 34.17.125.30:54304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.russiacoin.info"] [uri "/.git/config"] [unique_id "ava2MafBErb2OPx6Oe3DZQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
rubixstudios
2026-11-13 06:32:03
UTC ·
(2 days ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack