๐ณ๐ฑ
Savvii
2026-10-05 00:52:56
(2 days ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
pipeline.es
2026-10-05 00:29:33
(2 days ago)
Web scanning / probing for vulnerable paths | URL: /.env.old | Evidence: pisgate.pt 35.235.106.66 - ...
show more
Web scanning / probing for vulnerable paths | URL: /.env.old | Evidence: pisgate.pt 35.235.106.66 - - [05/Oct/2026:02:29:11 +0200] \"GET /.env.old HTTP/1.1\" 404 22656 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=US 29783 | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
Port Scan
Web App Attack
๐ฉ๐ช
zumbo.net
2026-10-04 23:31:47
(3 days ago)
[Mon Oct 05 02:31:45.963084 2026] [proxy_fcgi:error] [pid 322935:tid 322946] [client 35.235.106.66:0 ...
show more
[Mon Oct 05 02:31:45.963084 2026] [proxy_fcgi:error] [pid 322935:tid 322946] [client 35.235.106.66:0] AH01071: Got error 'Primary script unknown'
[Mon Oct 05 02:31:46.120772 2026] [proxy_fcgi:error] [pid 322935:tid 322986] [client 35.235.106.66:0] AH01071: Got error 'Primary script unknown'
[Mon Oct 05 02:31:46.278449 2026] [proxy_fcgi:error] [pid 322935:tid 322942] [client 35.235.106.66:0] AH01071: Got error 'Primary script unknown'
[Mon Oct 05 02:31:46.436001 2026] [proxy_fcgi:error] [pid 322936:tid 322973] [client 35.235.106.66:0] AH01071: Got error 'Primary script unknown'
[Mon Oct 05 02:31:46.594684 2026] [proxy_fcgi:error] [pid 322935:tid 322952] [client 35.235.106.66:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-04 23:16:35
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.235.106.66 (66.106.235.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.235.106.66 (66.106.235.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 19:16:32.166445 2026] [security2:error] [pid 3122204:tid 3122231] [client 35.235.106.66:43536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.piroskazalkadi.richardleeweatherman.com"] [uri "/.git/config"] [unique_id "asLeUNa6ceahnbVJkBt20QAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-04 23:13:03
(3 days ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.235.106.66 - - [05/Oct/2026:01:12:48 +0200] "GET /.git/config HTTP/1.1" 404 418 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-04 23:00:12
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ณ๐ฑ
Site.eu
2026-10-04 22:56:09
(3 days ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
zumbo.net
2026-10-04 22:54:00
(3 days ago)
[Mon Oct 05 01:53:59.519038 2026] [proxy_fcgi:error] [pid 488239:tid 488242] [client 35.235.106.66:0 ...
show more
[Mon Oct 05 01:53:59.519038 2026] [proxy_fcgi:error] [pid 488239:tid 488242] [client 35.235.106.66:0] AH01071: Got error 'Primary script unknown'
[Mon Oct 05 01:53:59.677715 2026] [proxy_fcgi:error] [pid 460400:tid 460439] [client 35.235.106.66:0] AH01071: Got error 'Primary script unknown'
[Mon Oct 05 01:53:59.835393 2026] [proxy_fcgi:error] [pid 460401:tid 460447] [client 35.235.106.66:0] AH01071: Got error 'Primary script unknown'
[Mon Oct 05 01:53:59.992751 2026] [proxy_fcgi:error] [pid 460400:tid 460411] [client 35.235.106.66:0] AH01071: Got error 'Primary script unknown'
[Mon Oct 05 01:54:00.151295 2026] [proxy_fcgi:error] [pid 460401:tid 460454] [client 35.235.106.66:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
konseptit
2026-10-04 22:42:29
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.235.106.66 (US/United States/66.106. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.235.106.66 (US/United States/66.106.235.35.bc.googleusercontent.com)
show less
SQL Injection
๐ณ๐ฑ
Site.eu
2026-10-04 22:18:39
(3 days ago)
Excessive 404/403 errors
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-04 22:12:30
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.235.106.66 (66.106.235.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.235.106.66 (66.106.235.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 18:12:22.532676 2026] [security2:error] [pid 18586:tid 18586] [client 35.235.106.66:43290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.piratecostumesonline.com"] [uri "/.git/config"] [unique_id "asLPRjiqv_8qYUTzjX7SHQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-04 22:00:34
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
Anonymous
2026-10-04 21:45:01
(3 days ago)
suspicious request in access.log
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-04 21:15:13
(3 days ago)
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35 ...
show more
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35.235.106.66 - - \[04/Oct/2026:23:15:01 +0200\] "GET /.git/config HTTP/1.1" 301 633 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-04 21:08:58
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.235.106.66 (66.106.235.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.235.106.66 (66.106.235.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 17:08:53.692457 2026] [security2:error] [pid 8095:tid 8095] [client 35.235.106.66:44754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pipperonline.gulftelecom.com"] [uri "/.git/config"] [unique_id "asLAZWw_Hc6Jfra2DDQ7cAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack