π©πͺ
klaus_ph
2026-09-27 14:28:48
(2 weeks ago)
2026-09-26 07:18:10,421 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 35.236.135.50
.. ...
show more
2026-09-26 07:18:10,421 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 35.236.135.50
...
show less
Bad Web Bot
πΏπ¦
conure.sh
2026-09-23 12:13:08
(2 weeks ago)
csagent: score 23.0: 404 noise floor x12, secrets grab x2; 1 domain(s) in 2s
Web App Attack
π©πͺ
Bedios GmbH
2026-09-23 03:18:48
(3 weeks ago)
Keyfile theft attempt
Hacking
πΊπΈ
robotstxt
2026-09-23 03:08:30
(3 weeks ago)
35.236.135.50 - - [23/Sep/2026:03:08:05 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 2 "-" "Mozill ...
show more
35.236.135.50 - - [23/Sep/2026:03:08:05 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 2 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "-" edge="35.236.135.50"
35.236.135.50 - - [23/Sep/2026:03:08:10 +0000] "GET /.env?raw HTTP/2.0" 403 20 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "-" edge="35.236.135.50"
35.236.135.50 - - [23/Sep/2026:03:08:10 +0000] "GET /.dockerenv HTTP/2.0" 403 20 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "-" edge="35.236.135.50"
35.236.135.50 - - [23/Sep/2026:03:08:10 +0000] "GET /.env?import&raw HTTP/2.0" 403 20 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" "-" edge="35.236.135.50"
35.236.135.50 - - [23/Sep/2026:03:08:11 +0000] "GET /.env?import&url&inline HTTP/2.0" 403 20 "-" "Mozilla/5.0 (compatible;
...
show less
Web App Attack
πΊπΈ
Blue Pumpkin
2026-09-23 01:44:40
(3 weeks ago)
35.236.135.50 - - [23/Sep/2026:01:44:40 +0000] "GET /docker-compose.yml HTTP/1.1" 404 4881 "-" "Mozi ...
show more
35.236.135.50 - - [23/Sep/2026:01:44:40 +0000] "GET /docker-compose.yml HTTP/1.1" 404 4881 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Brute-Force
πͺπΈ
masterguru
2026-09-23 01:35:04
(3 weeks ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
π«π·
SpaceHost-Server
2026-09-22 22:25:25
(3 weeks ago)
Brute-Force
Web App Attack
π¬π§
Apache
2026-09-22 21:46:12
(3 weeks ago)
(mod_security) mod_security (id:930130) triggered by 35.236.135.50 (TW/Taiwan/50.135.236.35.bc.googl ...
show more
(mod_security) mod_security (id:930130) triggered by 35.236.135.50 (TW/Taiwan/50.135.236.35.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
πΊπΈ
robotstxt
2026-09-22 21:42:17
(3 weeks ago)
35.236.135.50 - - [22/Sep/2026:21:41:53 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 36242 "- ...
show more
35.236.135.50 - - [22/Sep/2026:21:41:53 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 36242 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "35.236.135.50" edge="162.159.106.123"
35.236.135.50 - - [22/Sep/2026:21:41:54 +0000] "GET /.env.prod HTTP/2.0" 403 2 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" "35.236.135.50" edge="162.158.193.16"
35.236.135.50 - - [22/Sep/2026:21:41:54 +0000] "GET /.env.save HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" "35.236.135.50" edge="162.158.193.16"
35.236.135.50 - - [22/Sep/2026:21:41:55 +0000] "GET /.aws/credentials HTTP/2.0" 403 36244 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" "35.236.135.50" edge="162.158.193.16"
35.236.135.50 - - [22/Sep/2026:21:41:55 +0000] "GET /.aws/config HTTP/2.0" 403 36244 "-" "Mozilla/5.0
...
show less
Web App Attack
πΊπΈ
oralunal
2026-09-22 21:11:20
(3 weeks ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-22 20:52:56
(3 weeks ago)
(mod_security) mod_security (id:949110) triggered by 35.236.135.50 (50.135.236.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 35.236.135.50 (50.135.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:52:51.019865 2026] [security2:error] [pid 27354:tid 27354] [client 35.236.135.50:54306] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hamiltonbookings.com"] [uri "/z9x8c7v6b5-debug-trigger-hamiltonbookings.com"] [unique_id "arLqo56JwdkMBfx0PMCTnwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π·π΄
clauss
2026-09-22 19:06:42
(3 weeks ago)
35.236.135.50 - - [22/Sep/2026:22:06:41 +0300] "GET /firebase-adminsdk.json HTTP/2.0" 404 22056 "-" ...
show more
35.236.135.50 - - [22/Sep/2026:22:06:41 +0300] "GET /firebase-adminsdk.json HTTP/2.0" 404 22056 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.236.135.50 - - [22/Sep/2026:22:06:41 +0300] "GET /storage/logs/laravel.log HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
...
show less
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-22 18:55:26
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 35.236.135.50 (50.135.236.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.236.135.50 (50.135.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 14:55:18.933125 2026] [security2:error] [pid 24678:tid 24678] [client 35.236.135.50:38284] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||heytechiesshow.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "heytechiesshow.com"] [uri "/z9x8c7v6b5-debug-trigger-heytechiesshow.com"] [unique_id "arLPFpVNG23Zqf-REfgP4AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
Alt255
2026-09-22 18:02:28
(3 weeks ago)
[cb-04al] Excessive 404 errors (web scanning): 26 suspicious requests detected by fail2ban jail ngin ...
show more
[cb-04al] Excessive 404 errors (web scanning): 26 suspicious requests detected by fail2ban jail nginx-404. Example: 35.236.135.50 - - [22/Sep/2026:20:02:27 +0200] "GET /users/login HTTP/1.0" 404 3595 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
35.236.135.50 - - [22/Sep/2026:20:02:27 +0200] "GET /login HTTP/1.0" 404 3595 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
35.236.135.50 - - [22/Sep/2026:20:02:27 +0200] "GET /signin HTTP/1.0" 404 8563 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
35.236.135.50 - - [22/Sep/2026:20:02:27 +0200] "GET /z9x8c7v6b5-debug-trigger-hifi-tea.com HTTP/1.0" 404 8563 "-" "Mozilla/5.0 (compatible; xAI-G
...
show less
Bad Web Bot
Web App Attack
πΊπΈ
robotstxt
2026-09-22 17:56:33
(3 weeks ago)
35.236.135.50 - - [22/Sep/2026:17:56:17 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 2 "https://hi ...
show more
35.236.135.50 - - [22/Sep/2026:17:56:17 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 2 "https://highcbdfarms.com/.vite/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "-" edge="35.236.135.50"
35.236.135.50 - - [22/Sep/2026:17:56:20 +0000] "GET /.dockerenv HTTP/2.0" 403 20 "https://highcbdfarms.com/.dockerenv" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" "-" edge="35.236.135.50"
35.236.135.50 - - [22/Sep/2026:17:56:21 +0000] "GET /.env?import&raw HTTP/2.0" 403 20 "https://highcbdfarms.com/.env?import&raw" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" "-" edge="35.236.135.50"
35.236.135.50 - - [22/Sep/2026:17:56:21 +0000] "GET /.env?raw HTTP/2.0" 403 20 "https://highcbdfarms.com/.env?raw" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "-" edge="35.236
...
show less
Web App Attack