Anonymous
2026-11-03 12:31:39
UTC ·
(1 week ago)
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
🇮🇹
Giando
2026-11-03 02:02:00
UTC ·
(1 week ago)
Web attack/malicious scanning detected
Brute-Force
Bad Web Bot
Web App Attack
Hacking
🇮🇹
mgarofano80
2026-10-30 20:33:15
UTC ·
(2 weeks ago)
Brute-Force
Web App Attack
Anonymous
2026-10-30 16:40:04
UTC ·
(2 weeks ago)
35.194.164.52 - - [30/Oct/2026:17:40:00 +0100] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.194.164.52 - - [30/Oct/2026:17:40:04 +0100] "GE ...
show more
35.194.164.52 - - [30/Oct/2026:17:40:00 +0100] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.194.164.52 - - [30/Oct/2026:17:40:04 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.194.164.52 - - [30/Oct/2026:17:40:04 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.194.164.52 - - [30/Oct/2026:17:40:04 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
35.194.164.52 - - [30/Oct/2026:17:40:04 +0100] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
...
show less
Brute-Force
SSH
Anonymous
2026-10-30 15:45:15
UTC ·
(2 weeks ago)
35.194.164.52 - - [30/Oct/2026:16:45:10 +0100] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/appleb ...
show more
35.194.164.52 - - [30/Oct/2026:16:45:10 +0100] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
35.194.164.52 - - [30/Oct/2026:16:45:14 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.194.164.52 - - [30/Oct/2026:16:45:14 +0100] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.194.164.52 - - [30/Oct/2026:16:45:14 +0100] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.194.164.52 - - [30/Oct/2026:16:45:14 +0100] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https:/
...
show less
Brute-Force
SSH
Anonymous
2026-10-30 14:45:33
UTC ·
(2 weeks ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
Anonymous
2026-10-30 14:32:48
UTC ·
(2 weeks ago)
35.194.164.52 - - [30/Oct/2026:15:32:48 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.194.164.52 - - [30/Oct/2026:15:32:48 +0100] "GET /icons/.%2e/.%2e/.%2e/ ...
show more
35.194.164.52 - - [30/Oct/2026:15:32:48 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.194.164.52 - - [30/Oct/2026:15:32:48 +0100] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.194.164.52 - - [30/Oct/2026:15:32:48 +0100] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.194.164.52 - - [30/Oct/2026:15:32:48 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.194.164.52 - - [30/Oct/2026:15:32:48 +0100] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
...
show less
Brute-Force
SSH
🇩🇪
maxpower
2026-10-30 14:04:07
UTC ·
(2 weeks ago)
(PERMBLOCK) 35.194.164.52 (TW/Taiwan/52.164.194.35.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
Port Scan
Anonymous
2026-10-30 13:56:56
UTC ·
(2 weeks ago)
35.194.164.52 - - [30/Oct/2026:14:56:55 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.194.164.52 - - [30/Oct/2026:14:56:55 +0100] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Moz ...
show more
35.194.164.52 - - [30/Oct/2026:14:56:55 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.194.164.52 - - [30/Oct/2026:14:56:55 +0100] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.194.164.52 - - [30/Oct/2026:14:56:55 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.194.164.52 - - [30/Oct/2026:14:56:55 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.194.164.52 - - [30/Oct/2026:14:56:55 +0100] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
...
show less
Brute-Force
SSH
🇩🇪
maxpower
2026-10-30 13:08:17
UTC ·
(2 weeks ago)
(junkbot) REGOLA 8 - Junk Bot Blocked 35.194.164.52 (TW/Taiwan/52.164.194.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.194.164.52 - - [30/Oct/2026:14:08:16 +0100] "GET /wp-site ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 35.194.164.52 (TW/Taiwan/52.164.194.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.194.164.52 - - [30/Oct/2026:14:08:16 +0100] "GET /wp-sitemap-taxonomies-post_tag-1.xml HTTP/2.0" 200 239 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "35.194.164.52" host=www.coiet.it
show less
Port Scan
Anonymous
2026-10-30 12:58:37
UTC ·
(2 weeks ago)
35.194.164.52 - - [30/Oct/2026:13:58:36 +0100] "GET /appearance/../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
35.194.164.52 - - [30/Oct/2026:13: ...
show more
35.194.164.52 - - [30/Oct/2026:13:58:36 +0100] "GET /appearance/../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
35.194.164.52 - - [30/Oct/2026:13:58:36 +0100] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
35.194.164.52 - - [30/Oct/2026:13:58:37 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 288 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
35.194.164.52 - - [30/Oct/2026:13:58:37 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.194.164.52 - - [30/Oct/2026:13:58:37 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.
...
show less
Brute-Force
SSH
🇮🇹
CoreTech srl
2026-10-30 12:53:58
UTC ·
(2 weeks ago)
cloudlinux2 fail2ban: 2026-10-30 13:48:51,270 fail2ban.actions [1802]: NOTICE [plesk-modsecurity] Unban 8.228.79.149cloudlinux2 fail2ban: 2026-10-30 13:49:56,182 fail2ban.filter [1802]: INFO [plesk-modsecurity] Found 35.194.164.52 ...
show more
cloudlinux2 fail2ban: 2026-10-30 13:48:51,270 fail2ban.actions [1802]: NOTICE [plesk-modsecurity] Unban 8.228.79.149cloudlinux2 fail2ban: 2026-10-30 13:49:56,182 fail2ban.filter [1802]: INFO [plesk-modsecurity] Found 35.194.164.52 - 2026-10-30 13:49:55cloudlinux2 fail2ban: 2026-10-30 13:49:56,219 fail2ban.filter [1802]: INFO [plesk-modsecurity] Found 35.194.164.52 - 2026-10-30 13:49:55cloudlinux2 fail2ban: 2026-10-30 13:49:56,160 fail2ban.filter [1802]: INFO [plesk-modsecurity] Found 35.194.164.52 - 2026-10-30 13:49:55cloudlinux2 fail2ban: 2026-10-30 13:49:56,264 fail2ban.filter [1802]: INFO [plesk-modsecurity] Found 35.194.164.52 - 2026-10-30 13:49:56cloudlinux2 fail2ban: 2026-10-30 13:49:56,140 fail2ban.filter [1802]: INFO [plesk-modsecurity] Found 35.194.164.52 - 2026-10-30 13:49:55cloudlinux2 fail2ban: 2026-10-30 13:49:56,337 fail2ban.filter [1802]: INFO [plesk-modsecurity] Found 35.194.164.52 - 2026-10-30 13:49:56cloudlinux2 fail2b
show less
Brute-Force
Anonymous
2026-10-30 12:14:02
UTC ·
(2 weeks ago)
35.194.164.52 - - [30/Oct/2026:13:14:01 +0100] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.194.164.52 - - [30/Oct/2026:13:14:01 +0100] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 ( ...
show more
35.194.164.52 - - [30/Oct/2026:13:14:01 +0100] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.194.164.52 - - [30/Oct/2026:13:14:01 +0100] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
35.194.164.52 - - [30/Oct/2026:13:14:01 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
35.194.164.52 - - [30/Oct/2026:13:14:01 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
35.194.164.52 - - [30/Oct/2026:13:14:01 +0100] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
...
show less
Brute-Force
SSH
🇳🇱
Savvii
2026-10-30 11:43:36
UTC ·
(2 weeks ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-30 11:40:11
UTC ·
(2 weeks ago)
35.194.164.52 - - [30/Oct/2026:12:40:09 +0100] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
35.194.164.52 - - [30/Oct/2026:12:40:10 +0100] "GET /..%2 ...
show more
35.194.164.52 - - [30/Oct/2026:12:40:09 +0100] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
35.194.164.52 - - [30/Oct/2026:12:40:10 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.194.164.52 - - [30/Oct/2026:12:40:10 +0100] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.194.164.52 - - [30/Oct/2026:12:40:10 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.194.164.52 - - [30/Oct/2026:12:40:10 +0100] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
Brute-Force
SSH