🇳🇱
Site.eu
2026-08-09 10:14:02
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
🇭🇺
DumaNet
2026-08-08 21:17:00
(2 weeks ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 08. 00:38:08
Source IP: 35.224 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 08. 00:38:08
Source IP: 35.224.106.236
Portion of the log(s):
35.224.106.236 - [08/Aug/2026:00:38:08 +0200] "GET /settings.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.224.106.236 - [08/Aug/2026:00:38:08 +0200] "GET /z9x8c7v6b5-debug-trigger-titusweb.eu HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.224.106.236 - [08/Aug/2026:00:38:08 +0200] "GET /webpack-stats.json HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
35.224.106.236 - [08/Aug/2026:00:38:08 +0200] "GET /dist/manifest.json HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
35.224.106.236 - [08/Aug/2026:00:38:08 +0200] "GET /__/firebase/init.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Googlebot
show less
Web App Attack
🇭🇺
DumaNet
2026-08-08 20:54:00
(2 weeks ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 07. 21:54:37
Source IP: 35.224 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 07. 21:54:37
Source IP: 35.224.106.236
Portion of the log(s):
35.224.106.236 - [07/Aug/2026:21:54:37 +0200] "GET /.well-known/jwks.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:[email protected] "
35.224.106.236 - [07/Aug/2026:21:54:37 +0200] "GET /.aws/credentials HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:[email protected] "
35.224.106.236 - [07/Aug/2026:21:54:37 +0200] "GET /z9x8c7v6b5-debug-trigger-www.werger.eu HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:[email protected] "
35.224.106.236 - [07/Aug/2026:21:54:37 +0200] "GET /webpack-stats.json HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
show less
Web App Attack
🇩🇪
klaus_ph
2026-08-08 11:40:52
(2 weeks ago)
...
Bad Web Bot
🇩🇪
Lino Project
2026-08-08 07:10:04
(2 weeks ago)
CrowdSec abuse IP report (host SRV-2) Scenario: crowdsecurity/http-bad-user-agent
Hacking
🇮🇹
mgarofano80
2026-08-08 06:48:26
(2 weeks ago)
Brute-Force
Web App Attack
🇩🇪
Holger
2026-08-08 06:04:16
(2 weeks ago)
URL probing: GET /config.json
Web App Attack
🇮🇳
evicky2002
2026-08-08 06:00:00
(2 weeks ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇩🇪
patrisei
2026-08-08 05:22:35
(2 weeks ago)
You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-probing
Port Scan
Web App Attack
🇮🇹
paoloartone
2026-08-08 05:00:26
(2 weeks ago)
Reverse proxy TCO: 226 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 07/08/202 ...
show more
Reverse proxy TCO: 226 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 07/08/2026.
show less
Web App Attack
Hacking
Port Scan
🇩🇪
sdos.es
2026-08-08 01:55:52
(2 weeks ago)
"Restricted File Access Attempt - Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aw ...
show more
"Restricted File Access Attempt - Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials"
show less
Web App Attack
🇩🇪
Roper123
2026-08-08 00:48:26
(2 weeks ago)
Web exploits - access forbidden
Web App Attack
🇮🇹
CoreTech srl
2026-08-08 00:39:29
(2 weeks ago)
cloudlinux2 fail2ban: 2026-08-08 02:34:06,274 fail2ban.filter [1467]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-08-08 02:34:06,274 fail2ban.filter [1467]: INFO [plesk-modsecurity] Found 152.89.64.156 - 2026-08-08 02:34:06cloudlinux2 fail2ban: 2026-08-08 02:34:10,593 fail2ban.filter [1467]: INFO [plesk-modsecurity] Found 35.224.106.236 - 2026-08-08 02:34:10cloudlinux2 fail2ban: 2026-08-08 02:34:10,574 fail2ban.actions [1467]: NOTICE [plesk-modsecurity] Ban 35.224.106.236cloudlinux2 fail2ban: 2026-08-08 02:34:12,227 fail2ban.filter [1467]: INFO [plesk-modsecurity] Found 129.213.185.111 - 2026-08-08 02:34:12cloudlinux2 fail2ban: 2026-08-08 02:34:09,840 fail2ban.filter [1467]: INFO [plesk-modsecurity] Found 35.224.106.236 - 2026-08-08 02:34:09cloudlinux2 fail2ban: 2026-08-08 02:34:10,314 fail2ban.filter [1467]: INFO [plesk-modsecurity] Found 35.224.106.236 - 2026-08-08 02:34:10cloudlinux2 fail2ban: 2026-08-08 02:34:10,584 fail2ban.filter [1467]: INFO [plesk-modsecurity] Found 35.224.106.236 - 2026-08-08 02:34:10cloudlinux2
show less
Brute-Force
🇩🇪
maxpower
2026-08-08 00:26:58
(2 weeks ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 35.224.106.236 (US/United States/236.106 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 35.224.106.236 (US/United States/236.106.224.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.224.106.236 - - [08/Aug/2026:02:26:57 +0200] "GET /.aws/credentials HTTP/2.0" 429 41 "-" "Mozilla/5.0 (compatible; Diffbot/1.0; +https://diffbot.com)" "-" host=www.worldchristmas.eu
show less
Port Scan
🇩🇪
ger-stg-sifi1
2026-08-07 23:50:31
(2 weeks ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack