Anonymous
2026-10-13 10:31:12
(2 hours ago)
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web s ...
show more
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
show less
Web App Attack
Bad Web Bot
๐ฌ๐ง
AvonleaConsulting
2026-10-12 22:59:20
(13 hours ago)
Attempts to probe web pages for vulnerable PHP or other applications
Web App Attack
๐ฉ๐ช
maxpower
2026-10-12 11:52:36
(1 day ago)
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Port ...
show more
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 134.199.166.29 - - [12/Oct/2026:13:15:02 +0200] "POST /wp-login.php HTTP/2.0" 200 4798 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:13:24:23 +0200] "POST /wp-login.php HTTP/2.0" 200 4800 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:13:33:45 +0200] "POST /wp-login.php HTTP/2.0" 200 4798 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:13:43:11 +0200] "POST /wp-login.php HTTP/2.0" 200 4800 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:13:52:34 +0200] "POST /wp-login.php HTTP/2.0" 200 4805 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
show less
Port Scan
๐ฉ๐ช
maxpower
2026-10-12 11:05:59
(1 day ago)
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Port ...
show more
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 134.199.166.29 - - [12/Oct/2026:12:29:31 +0200] "POST /wp-login.php HTTP/2.0" 200 4800 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:12:38:33 +0200] "POST /wp-login.php HTTP/2.0" 200 4793 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:12:47:45 +0200] "POST /wp-login.php HTTP/2.0" 200 4803 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:12:56:46 +0200] "POST /wp-login.php HTTP/2.0" 200 4803 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:13:05:53 +0200] "POST /wp-login.php HTTP/2.0" 200 4800 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
show less
Port Scan
Anonymous
2026-10-12 10:28:36
(1 day ago)
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web s ...
show more
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
show less
Web App Attack
Bad Web Bot
๐ฉ๐ช
maxpower
2026-10-12 09:36:05
(1 day ago)
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Port ...
show more
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 134.199.166.29 - - [12/Oct/2026:11:02:34 +0200] "POST /wp-login.php HTTP/2.0" 200 4804 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:11:10:41 +0200] "POST /wp-login.php HTTP/2.0" 200 4803 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:11:18:56 +0200] "POST /wp-login.php HTTP/2.0" 200 4799 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:11:27:16 +0200] "POST /wp-login.php HTTP/2.0" 200 4804 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:11:36:03 +0200] "POST /wp-login.php HTTP/2.0" 200 4809 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
show less
Port Scan
๐ฉ๐ช
ghostwarriors
2026-10-12 09:20:07
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-10-12 09:00:34
(1 day ago)
134.199.166.29 - - [12/Oct/2026:05:49:06 +0200] "GET /wp-login.php HTTP/1.1" 301 593 "-" "Mozilla/5. ...
show more
134.199.166.29 - - [12/Oct/2026:05:49:06 +0200] "GET /wp-login.php HTTP/1.1" 301 593 "-" "Mozilla/5.0"
134.199.166.29 - - [12/Oct/2026:05:49:08 +0200] "GET /wp-login.php HTTP/1.1" 404 4406 "-" "Mozilla/5.0"
134.199.166.29 - - [12/Oct/2026:11:00:28 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 301 563 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
134.199.166.29 - - [12/Oct/2026:11:00:29 +0200] "GET /wp-json/batch/v1 HTTP/1.1" 403 4459 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
134.199.166.29 - - [12/Oct/2026:11:00:30 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 573 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
134.199.166.29 - - [12/Oct/2026:11:00:31 +0200] "GET /?rest_route=/batch/v1 HTTP/1.1" 403 4459 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari
show less
Web App Attack
Hacking
๐ฉ๐ช
maxpower
2026-10-12 08:54:32
(1 day ago)
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Port ...
show more
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 134.199.166.29 - - [12/Oct/2026:10:22:44 +0200] "POST /wp-login.php HTTP/2.0" 200 4804 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:10:30:35 +0200] "POST /wp-login.php HTTP/2.0" 200 4799 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:10:38:29 +0200] "POST /wp-login.php HTTP/2.0" 200 4808 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:10:46:26 +0200] "POST /wp-login.php HTTP/2.0" 200 4798 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:10:54:31 +0200] "POST /wp-login.php HTTP/2.0" 200 4798 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
show less
Port Scan
๐ฉ๐ช
maxpower
2026-10-12 08:14:59
(1 day ago)
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Port ...
show more
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 134.199.166.29 - - [12/Oct/2026:09:43:51 +0200] "POST /wp-login.php HTTP/2.0" 200 4802 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:09:51:37 +0200] "POST /wp-login.php HTTP/2.0" 200 4802 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:09:59:22 +0200] "POST /wp-login.php HTTP/2.0" 200 4803 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:10:07:06 +0200] "POST /wp-login.php HTTP/2.0" 200 4799 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:10:14:57 +0200] "POST /wp-login.php HTTP/2.0" 200 4804 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
show less
Port Scan
๐ฉ๐ช
maxpower
2026-10-12 07:35:43
(1 day ago)
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Port ...
show more
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 134.199.166.29 - - [12/Oct/2026:09:04:21 +0200] "POST /wp-login.php HTTP/2.0" 200 4800 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:09:11:51 +0200] "POST /wp-login.php HTTP/2.0" 200 4804 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:09:19:28 +0200] "POST /wp-login.php HTTP/2.0" 200 4796 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:09:27:31 +0200] "POST /wp-login.php HTTP/2.0" 200 4801 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:09:35:40 +0200] "POST /wp-login.php HTTP/2.0" 200 4798 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
show less
Port Scan
๐ฉ๐ช
maxpower
2026-10-12 06:56:55
(1 day ago)
(PERMBLOCK) 134.199.166.29 (AU/Australia/-) has had more than 4 temp blocks in the last 86400 secs; ...
show more
(PERMBLOCK) 134.199.166.29 (AU/Australia/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
๐ฉ๐ช
maxpower
2026-10-12 06:20:44
(1 day ago)
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Port ...
show more
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 134.199.166.29 - - [12/Oct/2026:07:52:17 +0200] "POST /wp-login.php HTTP/2.0" 200 4801 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:07:59:13 +0200] "POST /wp-login.php HTTP/2.0" 200 4803 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:08:06:16 +0200] "POST /wp-login.php HTTP/2.0" 200 4795 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:08:13:31 +0200] "POST /wp-login.php HTTP/2.0" 200 4795 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:08:20:41 +0200] "POST /wp-login.php HTTP/2.0" 200 4804 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
show less
Port Scan
๐ฉ๐ช
maxpower
2026-10-12 05:45:26
(1 day ago)
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Port ...
show more
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 134.199.166.29 - - [12/Oct/2026:07:17:35 +0200] "POST /wp-login.php HTTP/2.0" 200 4809 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:07:24:29 +0200] "POST /wp-login.php HTTP/2.0" 200 4796 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:07:31:21 +0200] "POST /wp-login.php HTTP/2.0" 200 4797 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:07:38:13 +0200] "POST /wp-login.php HTTP/2.0" 200 4799 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:07:45:21 +0200] "POST /wp-login.php HTTP/2.0" 200 4807 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
show less
Port Scan
๐ฉ๐ช
maxpower
2026-10-12 05:10:46
(1 day ago)
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Port ...
show more
(wp_login) REGOLA 1 - WP Login Attack 134.199.166.29 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 134.199.166.29 - - [12/Oct/2026:06:45:32 +0200] "POST /wp-login.php HTTP/2.0" 200 4802 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:06:51:30 +0200] "POST /wp-login.php HTTP/2.0" 200 4793 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:06:57:17 +0200] "POST /wp-login.php HTTP/2.0" 200 4804 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:07:03:58 +0200] "POST /wp-login.php HTTP/2.0" 200 4803 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
134.199.166.29 - - [12/Oct/2026:07:10:43 +0200] "POST /wp-login.php HTTP/2.0" 200 4801 "-" "Mozilla/5.0" "134.199.166.29" host=digiampaolo.it
show less
Port Scan