🇩🇪
4server
2026-09-01 10:55:33
(2 hours ago)
[TueSep0112:55:29.0697002026][security2:error][pid4075415:tid4075545][client34.17.159.15:0]ModSecuri ...
show more
[TueSep0112:55:29.0697002026][security2:error][pid4075415:tid4075545][client34.17.159.15:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpanel.serban.ch\"][uri\"/.env.bak\"][unique_id\"apavIWxGbIY3c6aYudXBbQAAARM\"]
show less
Port Scan
Brute-Force
Web App Attack
🇦🇺
screwlooseit.com.au
2026-09-01 09:16:18
(4 hours ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/15.159.17.34.bc.googleusercontent ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/15.159.17.34.bc.googleusercontent.com
show less
Web App Attack
🇮🇹
VHosting
2026-09-01 07:10:08
(6 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇦🇺
rubixstudios
2026-09-01 04:23:02
(9 hours ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-08-31 15:02:39
(22 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 15:01:41
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.159.15 (15.159.17.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.159.15 (15.159.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 11:01:34.827100 2026] [security2:error] [pid 19324:tid 19324] [client 34.17.159.15:37514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.montymilburn.com"] [uri "/.git/config"] [unique_id "apWXTuiyDY2X5t1FOWXeVAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 14:12:21
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.159.15 (15.159.17.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.159.15 (15.159.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 10:12:18.300412 2026] [security2:error] [pid 4189135:tid 4189160] [client 34.17.159.15:56430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.mjkotob.com"] [uri "/.git/config"] [unique_id "apWLwoqG1gcln32l1KoUUAAAARc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 13:26:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.159.15 (15.159.17.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.159.15 (15.159.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 09:26:11.798746 2026] [security2:error] [pid 16013:tid 16013] [client 34.17.159.15:48016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.microscopicpablo.com"] [uri "/.git/config"] [unique_id "apWA87XoybuIr7qsN-F2eQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 06:43:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.159.15 (15.159.17.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.159.15 (15.159.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 02:43:33.183561 2026] [security2:error] [pid 27434:tid 27434] [client 34.17.159.15:45516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.lexie.org"] [uri "/.git/config"] [unique_id "apUilf2ey-U_X-Z3Jqz6jgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-08-31 06:05:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 05:22:55
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.159.15 (15.159.17.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.159.15 (15.159.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 01:22:50.595795 2026] [security2:error] [pid 9784:tid 9784] [client 34.17.159.15:58254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.landscapedesignworkshop.com"] [uri "/.git/config"] [unique_id "apUPqkkoeUegc1y915xexgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 03:49:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.17.159.15 (15.159.17.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.159.15 (15.159.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 23:49:25.440444 2026] [security2:error] [pid 5025:tid 5025] [client 34.17.159.15:34008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kooroshvaziri.com"] [uri "/.git/config"] [unique_id "apT5xZ_2Ch82oiFJJB6R0wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-08-30 12:40:02
(2 days ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇩🇪
ghostwarriors
2026-08-30 10:50:13
(2 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-08-30 10:42:53
(2 days ago)
Web attack/malicious scanning detected
Web App Attack