🇳🇱
Alt255
2026-11-06 21:47:33
UTC ·
(5 days ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.196.105.98 - - [06/Nov/2026:22:47:26 +0100] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/2. ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.196.105.98 - - [06/Nov/2026:22:47:26 +0100] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/2.0" 403 58 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
...
show less
Bad Web Bot
Web App Attack
2026-11-06 21:18:04
UTC ·
(5 days ago)
35.196.105.98 - - [06/Nov/2026:21:18:02 +0000] "GET /userfiles/x?path=../../.env HTTP/2.0" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" "192.168.85.231,35.196.105.98" "-"
. ...
show more
35.196.105.98 - - [06/Nov/2026:21:18:02 +0000] "GET /userfiles/x?path=../../.env HTTP/2.0" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" "192.168.85.231,35.196.105.98" "-"
...
show less
Web App Attack
🇵🇱
Budyn
2026-11-06 19:35:57
UTC ·
(5 days ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: billing.budyn.ovh | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: billing.budyn.ovh | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-11-06 18:56:01
UTC ·
(5 days ago)
Too many 404 requests [BY]
Web App Attack
🇵🇫
www.gregorymariani.com
2026-11-06 18:51:57
UTC ·
(5 days ago)
Web App Attack
🇳🇱
Savvii
2026-11-06 17:34:48
UTC ·
(5 days ago)
20 attempts against mh-misbehave-ban on sonic
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-06 17:29:25
UTC ·
(5 days ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: staging.budyn.ovh | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: staging.budyn.ovh | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇰
HostingGroup
2026-11-06 15:46:53
UTC ·
(5 days ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 4. First blocked: 2026-11-06.
Bad Web Bot
Web App Attack
🇩🇪
bsoft.de
2026-11-06 15:20:55
UTC ·
(5 days ago)
35.196.105.98 - - [06/Nov/2026:16:20:54 +0100] "GET /de/wp-sitemap-posts-page-1.xml HTTP/1.1" 200 556 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compati ...
show more
35.196.105.98 - - [06/Nov/2026:16:20:54 +0100] "GET /de/wp-sitemap-posts-page-1.xml HTTP/1.1" 200 556 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-06 14:02:45
UTC ·
(5 days ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: api.budyn.ovh | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: api.budyn.ovh | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-06 13:20:04
UTC ·
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇦🇹
penguin-solutions.at
2026-11-06 13:07:30
UTC ·
(5 days ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
🇩🇪
raph
2026-11-06 12:57:15
UTC ·
(5 days ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-11-06 12:32:14
UTC ·
(5 days ago)
{"level":"info","ts":1793968333.4031806,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.196.105.98","remote_port":"60946","client_ip":"35.196.105.98","proto":"HTTP/2.0","method":"GET","host":"status.digitalwallet.ca ...
show more
{"level":"info","ts":1793968333.4031806,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.196.105.98","remote_port":"60946","client_ip":"35.196.105.98","proto":"HTTP/2.0","method":"GET","host":"status.digitalwallet.cards","uri":"/webpack-stats.json","headers":{"Sec-Fetch-Site":["none"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Google Chrome\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Sec-Fetch-Dest":["document"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Mode":["navigate"],"X-Nextjs-Data":["1"],"Sec-Ch-Ua-Mobile":["?1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Fetch-User":["?1"],"Accept":["text/htm
...
show less
DDoS Attack
Web App Attack
🇺🇸
maxasp.net
2026-11-06 11:15:51
UTC ·
(5 days ago)
F5 404 Abuse Limit for Subnet 35.196.105.0/24 has 3 unique block events within 24 hours of each other
Hacking
