|
🇪🇸
pipeline.es
|
|
Web scanning / probing for vulnerable paths | URL: /.env.sample | Evidence: altovolta.es 35.201.134.249 - - [04/Nov/2026:00:27:53 +0100] \"GET /.env.sample HTTP/1.1\" 403 213 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML ...
show more
Web scanning / probing for vulnerable paths | URL: /.env.sample | Evidence: altovolta.es 35.201.134.249 - - [04/Nov/2026:00:27:53 +0100] \"GET /.env.sample HTTP/1.1\" 403 213 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=TW | ASN: GOOGLE-CLOUD-PLATFORM | Country: TW
show less
|
Port Scan
Web App Attack
|
|
🇸🇪
vaia.cloud
|
|
crowdsecurity/http-sensitive-files
|
Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.201.134.249 (249.134.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:46:50.575618 2026] [security2:error] [pid 20230:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.134.249 (249.134.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:46:50.575618 2026] [security2:error] [pid 20230:tid 20230] [client 35.201.134.249:55078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "angove.biz"] [uri "/.git/config"] [unique_id "auoB6vA3RzIR-8KrBqTlJAAAABc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇷
Pays d'Angoulême
|
|
[Drupal AbuseIPDB module] Request path is blacklisted. /phpinfo.php
|
Web App Attack
|
|
🇩🇪
EGP Abuse Dept
|
|
Scanning for web/db/file exploits on www.bbriq.nl
|
SQL Injection
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.201.134.249 (249.134.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 14:39:59.005798 2026] [security2:error] [pid 7969:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.134.249 (249.134.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 14:39:59.005798 2026] [security2:error] [pid 7969:tid 7969] [client 35.201.134.249:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bbproductionsonline.com"] [uri "/.git/config"] [unique_id "aujnD08RjDktUlvtqAw0RQAAACI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
| [Dangerous/Taiwan] Aggressive IP 35.201.134.249 (~30 hits). Type: DoS Defender- Web server 400 error code
|
Web App Attack
Hacking
SQL Injection
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.201.134.249 (249.134.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 07:14:16.890760 2026] [security2:error] [pid 3634:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.134.249 (249.134.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 07:14:16.890760 2026] [security2:error] [pid 3634:tid 3634] [client 35.201.134.249:38310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bearchristmascards.com"] [uri "/.git/config"] [unique_id "auh-mHE28B7kw9Ql95D8vAAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
Ben Schoolland
|
|
Requested known WordPress backdoor/scanner-only paths. No legitimate use.
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
Callum
|
|
probing for exposed files and admin pages and login brute force: 100 attempts within 1 minutes, seen by web server log
|
Web App Attack
Brute-Force
|
|
🇳🇱
Cloud86 B.V.
|
|
categories: Email Spam
|
Email Spam
|
