🇩🇪
4server
2026-09-01 12:55:14
(1 day ago)
[TueSep0114:55:10.9284492026][security2:error][pid21165:tid21276][client34.17.52.35:0]ModSecurity:Ac ...
show more
[TueSep0114:55:10.9284492026][security2:error][pid21165:tid21276][client34.17.52.35:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcalendars.gmint.ch\"][uri\"/.env.bak\"][unique_id\"apbLLiaK4YSa7vglh0f4fgAAANM\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 06:35:20
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.17.52.35 (35.52.17.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.52.35 (35.52.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:35:13.994737 2026] [security2:error] [pid 13674:tid 13674] [client 34.17.52.35:50726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.frenosilent.ar"] [uri "/.git/config"] [unique_id "apZyIfqMhgG7vSFRE7itFgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 05:23:30
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.17.52.35 (35.52.17.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.52.35 (35.52.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:23:24.258175 2026] [security2:error] [pid 26365:tid 26365] [client 34.17.52.35:45558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.formationone.com"] [uri "/.git/config"] [unique_id "apZhTIMKWTLcuzssp68jKgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-01 04:30:04
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 00:28:12
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.17.52.35 (35.52.17.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.52.35 (35.52.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:28:08.457983 2026] [security2:error] [pid 3601442:tid 3601536] [client 34.17.52.35:39492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.fandgins.com"] [uri "/.git/config"] [unique_id "apYcGM66o2Lo9jM_TTLLWAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 00:06:22
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.17.52.35 (35.52.17.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.52.35 (35.52.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:06:15.354812 2026] [security2:error] [pid 19004:tid 19004] [client 34.17.52.35:48362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.fairfieldfarms.net"] [uri "/.git/config"] [unique_id "apYW98K3aPEXk-8FcFElcwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 15:10:52
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.17.52.35 (35.52.17.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.52.35 (35.52.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 11:10:48.175748 2026] [security2:error] [pid 13155:tid 13178] [client 34.17.52.35:44486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.colinkyffinmusic.com"] [uri "/.git/config"] [unique_id "apWZeLkla295uIexWjqx1gAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
rubixstudios
2026-08-31 12:28:02
(2 days ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 10:43:34
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.17.52.35 (35.52.17.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.52.35 (35.52.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:43:28.468926 2026] [security2:error] [pid 24827:tid 24827] [client 34.17.52.35:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.c2cservices.com"] [uri "/.git/config"] [unique_id "apVa0F_iHBv7Rt1uXfwqYgAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 04:01:53
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.17.52.35 (35.52.17.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.52.35 (35.52.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 00:01:43.529541 2026] [security2:error] [pid 4052:tid 4052] [client 34.17.52.35:39386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.avaliantlife.com"] [uri "/.git/config"] [unique_id "apT8p5AzxaInfkiAVPAkLgAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-08-31 03:55:03
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack