🇮🇹
paoloartone
2026-10-10 05:00:24
UTC ·
(1 month ago)
Reverse proxy TCO: 469 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 09/10/2026.
Web App Attack
Hacking
Port Scan
Anonymous
2026-10-09 04:06:54
UTC ·
(1 month ago)
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, BadPath=25, Rate=20, Diversity=10, CanaryOverride=90.
Web App Attack
DDoS Attack
Bad Web Bot
🇬🇧
andypiper
2026-10-09 01:01:48
UTC ·
(1 month ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-10-09 00:39:35
UTC ·
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
McClay
2026-10-09 00:36:42
UTC ·
(1 month ago)
HTTP-404 spam:34.95.128.164 - - [09/Oct/2026:02:36:40 +0200] "GET /mxniujj8cg6j1t1fwd2n HTTP/1.1" 404 1017 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.95.128.164 - - [09/Oct/2026:02:36:40 +0200] "GET /m0no6lanf9u ...
show more
HTTP-404 spam:34.95.128.164 - - [09/Oct/2026:02:36:40 +0200] "GET /mxniujj8cg6j1t1fwd2n HTTP/1.1" 404 1017 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.95.128.164 - - [09/Oct/2026:02:36:40 +0200] "GET /m0no6lanf9ukcoxpyjru HTTP/1.1" 404 1017 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
34.95.128.164 - - [09/Oct/2026:02:36:41 +0200] "GET /z9x8c7v6b5-debug-trigger-xn--kster-jua.it HTTP/1.1" 404 1017 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.95.128.164 - - [09/Oct/2026:02:36:41 +0200] "GET /wp-json HTTP/1.1" 404 5172 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.95.128.164 - - [09/Oct/2026:02:36:41 +0200] "GET /.npmrc HTTP/1.1" 404 1017 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.95.128.164 - - [09/Oct/2026:02:36:41 +0200] "POST /graphql HTTP/1.1" 404 1017 "https://xn--kster-jua.it" "Mozilla/5.0 (Windows NT 10.0; Win64; x
...
show less
Web App Attack
🇫🇷
dwmp
2026-10-09 00:35:43
UTC ·
(1 month ago)
[09/Oct/2026:02:35:41.825442 +0200] asg23fdR1JviDRE8dy7JAQAAARE 34.95.128.164 49714 38.242.227.117 7081
[09/Oct/2026:02:35:42.055013 +0200] asg23l1sEOs-bbZSK2tX3QAAABg 34.95.128.164 49718 38.242.227.117 7081
[09/Oct/2026:02:35:42.675978 +0200] asg23l ...
show more
[09/Oct/2026:02:35:41.825442 +0200] asg23fdR1JviDRE8dy7JAQAAARE 34.95.128.164 49714 38.242.227.117 7081
[09/Oct/2026:02:35:42.055013 +0200] asg23l1sEOs-bbZSK2tX3QAAABg 34.95.128.164 49718 38.242.227.117 7081
[09/Oct/2026:02:35:42.675978 +0200] asg23l1sEOs-bbZSK2tX4QAAABA 34.95.128.164 49798 38.242.227.117 7081
...
show less
Brute-Force
SSH
Anonymous
2026-10-09 00:20:06
UTC ·
(1 month ago)
| [Dangerous/Brazil] Aggressive IP 34.95.128.164 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
🇫🇷
solution.it
2026-10-09 00:13:47
UTC ·
(1 month ago)
[Fri Oct 09 02:13:46.707075 2026] [authz_core:error] [pid 2975484:tid 2975484] [client 34.95.128.164:58426] AH01630: client denied by server configuration: /var/www/html/blog.solution.it/.htpasswd
Brute-Force
Anonymous
2026-10-08 23:56:03
UTC ·
(1 month ago)
Bot / scanning and/or hacking attempts: POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_, POST /cgi-bin/php?-d+allow_url_include%3don+-d+auto_prepend_fil, POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%, POST /api/v1/bu ...
show more
Bot / scanning and/or hacking attempts: POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_, POST /cgi-bin/php?-d+allow_url_include%3don+-d+auto_prepend_fil, POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%, POST /api/v1/build_public_tmp/00000000-0000-0000-0000-000000000, POST /exec-py HTTP/2.0, DELETE /api/events HTTP/2.0, POST /api/designer/v1/file-content HTTP/2.0, POST /api/templates/preview HTTP/2.0
show less
Hacking
Web App Attack
Anonymous
2026-10-08 23:35:20
UTC ·
(1 month ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇩🇪
palzer.IT
2026-10-08 23:29:27
UTC ·
(1 month ago)
Fail2ban automatic report for plesk-apache-badbot: 34.95.128.164 - - [09/Oct/2026:01:28:54 +0200] GET /lib/terminal-xhr.php [DOMAIN_REMOVED] 404 56670 [DOMAIN_REMOVED] Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1. ...
show more
Fail2ban automatic report for plesk-apache-badbot: 34.95.128.164 - - [09/Oct/2026:01:28:54 +0200] GET /lib/terminal-xhr.php [DOMAIN_REMOVED] 404 56670 [DOMAIN_REMOVED] Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@[DOMAIN_REMOVED])
show less
Bad Web Bot
🇧🇪
voormedia
2026-10-08 23:21:30
UTC ·
(1 month ago)
Accessed trap at '/.npmrc'
Web App Attack
🇳🇱
Alt255
2026-10-08 23:10:46
UTC ·
(1 month ago)
[cb-16al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.95.128.164 - - [09/Oct/2026:01:10:42 +0200] "GET /.ssh/id_ed25519 HTTP/2.0" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; co ...
show more
[cb-16al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.95.128.164 - - [09/Oct/2026:01:10:42 +0200] "GET /.ssh/id_ed25519 HTTP/2.0" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
MyGlobalFlowers
2026-10-08 23:06:53
UTC ·
(1 month ago)
Multiple WAF Violations
Web App Attack
🇩🇪
Viveronese
2026-10-08 22:59:56
UTC ·
(1 month ago)
HTTP vulnerability scanning
Web App Attack