🇪🇸
pipeline.es
2026-09-16 11:27:48
(1 day ago)
Web scanning / probing for vulnerable paths | URL: /.env.prod | Evidence: volandoviajes.com.co 35.19 ...
show more
Web scanning / probing for vulnerable paths | URL: /.env.prod | Evidence: volandoviajes.com.co 35.198.42.75 - - [16/Sep/2026:13:27:08 +0200] \"GET /.env.prod HTTP/1.1\" 404 33510 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=BR | ASN: GOOGLE-CLOUD-PLATFORM | Country: BR
show less
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 09:40:05
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.198.42.75 (75.42.198.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.42.75 (75.42.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 05:39:56.245083 2026] [security2:error] [pid 3228:tid 3228] [client 35.198.42.75:45940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voiceprojoe.hatfulofrain.com"] [uri "/.git/config"] [unique_id "aqpj7IrCg9tAN8FlpxJMWgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-16 07:46:21
(2 days ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
maxxsense
2026-09-16 07:36:52
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.198.42.75 (BR/Brazil/75.42.198.35.bc ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.198.42.75 (BR/Brazil/75.42.198.35.bc.googleusercontent.com)
show less
SQL Injection
2026-09-16 06:09:34
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-16 04:24:14
(2 days ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
homeshowdomain.nl
2026-09-15 22:00:43
(2 days ago)
Auto-ban: >3000 req/min op 2026-09-15
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-15 21:19:23
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.198.42.75 (75.42.198.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.42.75 (75.42.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:19:14.986438 2026] [security2:error] [pid 25932:tid 25932] [client 35.198.42.75:53336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amdavies15.com"] [uri "/.git/config"] [unique_id "aqm2UpKg9aUqvP41cpyE8wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-15 09:29:49
(3 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 07:24:28
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.198.42.75 (75.42.198.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.42.75 (75.42.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 03:24:20.763008 2026] [security2:error] [pid 13746:tid 13809] [client 35.198.42.75:37206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.maroontribe.philacentric.com"] [uri "/.git/config"] [unique_id "aqjypCY6xJ6FGWiUAaj7nwAAAZU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 06:59:29
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.198.42.75 (75.42.198.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.42.75 (75.42.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 02:59:22.634233 2026] [security2:error] [pid 30809:tid 30828] [client 35.198.42.75:43716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toughcatcompany.com"] [uri "/.git/config"] [unique_id "aqjsyjqC9hkKY86uKyTR3AAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 06:34:15
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.198.42.75 (75.42.198.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.42.75 (75.42.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 02:34:10.111979 2026] [security2:error] [pid 26195:tid 26360] [client 35.198.42.75:48044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "touficcorban.com"] [uri "/.git/config"] [unique_id "aqjm4njouLncKILZX3pmhAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-15 05:53:56
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-09-15 05:35:03
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-15 02:53:08
(3 days ago)
Excessive 404/403 errors
Brute-Force