๐น๐ท
neron
2026-07-28 02:19:38
(10 hours ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-27 21:33:57
(15 hours ago)
cloudlinux2 fail2ban: 2026-07-27 23:29:31,483 fail2ban.filter [1917]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-07-27 23:29:31,483 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 37.140.223.149 - 2026-07-27 23:29:30cloudlinux2 fail2ban: 2026-07-27 23:29:31,649 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 37.140.223.136 - 2026-07-27 23:29:30cloudlinux2 fail2ban: 2026-07-27 23:29:35,096 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 37.140.223.136 - 2026-07-27 23:29:34cloudlinux2 fail2ban: 2026-07-27 23:29:49,542 fail2ban.actions [1917]: NOTICE [plesk-modsecurity] Unban 35.165.175.72cloudlinux2 fail2ban: 2026-07-27 23:31:54,951 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 35.202.238.173 - 2026-07-27 23:31:54cloudlinux2 fail2ban: 2026-07-27 23:32:09,502 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 104.28.156.99 - 2026-07-27 23:32:08cloudlinux2 fail2ban: 2026-07-27 23:32:05,571 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 185.88.154.76 - 2026-07-27 23:32:05cloudlinux2 fail2ban:
show less
Web App Attack
๐ฆ๐บ
AWW-Admin
2026-07-27 12:42:57
(1 day ago)
(wordpress) Failed wordpress login from 37.140.223.149 (US/United States/-)
Brute-Force
๐บ๐ธ
SketchyDude
2026-07-27 07:41:35
(1 day ago)
Banned by Fail2Ban jail: wordpress
Brute-Force
Web App Attack
๐น๐ท
neron
2026-07-26 19:50:51
(1 day ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
๐ซ๐ฎ
bittiguru.fi
2026-07-26 19:10:10
(1 day ago)
37.140.223.149 - [26/Jul/2026:22:09:43 +0300] "POST /wp-login.php HTTP/1.1" 404 23768 "https://www.h ...
show more
37.140.223.149 - [26/Jul/2026:22:09:43 +0300] "POST /wp-login.php HTTP/1.1" 404 23768 "https://www.heikkinen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36" "3.37"
37.140.223.149 - [26/Jul/2026:22:09:50 +0300] "POST /wp-login.php HTTP/1.1" 404 23768 "https://www.heikkinen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0" "3.37"
37.140.223.149 - [26/Jul/2026:22:09:57 +0300] "POST /wp-login.php HTTP/1.1" 404 23768 "https://www.heikkinen.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "3.37"
37.140.223.149 - [26/Jul/2026:22:10:03 +0300] "POST /wp-login.php HTTP/1.1" 404 23768 "https://www.heikkinen.fi/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36" "3.37"
37.140.223.149 - [26/Jul/2026:22:10:10 +0
...
show less
Hacking
Brute-Force
Web App Attack
๐ซ๐ฎ
bittiguru.fi
2026-07-26 18:39:15
(1 day ago)
37.140.223.149 - [26/Jul/2026:21:38:48 +0300] "POST /wp-login.php HTTP/1.1" 404 23768 "https://www.h ...
show more
37.140.223.149 - [26/Jul/2026:21:38:48 +0300] "POST /wp-login.php HTTP/1.1" 404 23768 "https://www.heikkinen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "3.37"
37.140.223.149 - [26/Jul/2026:21:38:55 +0300] "POST /wp-login.php HTTP/1.1" 404 23768 "https://www.heikkinen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "3.37"
37.140.223.149 - [26/Jul/2026:21:39:01 +0300] "POST /wp-login.php HTTP/1.1" 404 23768 "https://www.heikkinen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1" "3.37"
37.140.223.149 - [26/Jul/2026:21:39:08 +0300] "POST /wp-login.php HTTP/1.1" 404 23768 "https://www.heikkinen.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36" "3.37"
37.140.223.149 - [26/Jul/20
...
show less
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-07-26 10:26:30
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
๐บ๐ธ
Jason Howell
2026-07-25 17:44:22
(2 days ago)
37.140.223.149 - - [25/Jul/2026:12:44:15 -0500] "POST /wp-login.php HTTP/1.1" 200 5924 "https://www. ...
show more
37.140.223.149 - - [25/Jul/2026:12:44:15 -0500] "POST /wp-login.php HTTP/1.1" 200 5924 "https://www.devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0"
37.140.223.149 - - [25/Jul/2026:12:44:16 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 480 "https://www.devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36"
37.140.223.149 - - [25/Jul/2026:12:44:18 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.devilsglenstorage.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 3597 "https://www.devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36"
37.140.223.149 - - [25/Jul/2026:12:44:19 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 480 "https://www.devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3
...
show less
Web App Attack
๐ซ๐ฎ
bittiguru.fi
2026-07-25 02:43:01
(3 days ago)
37.140.223.149 - [25/Jul/2026:05:42:21 +0300] "POST /wp-login.php HTTP/1.1" 403 753 "https://www.var ...
show more
37.140.223.149 - [25/Jul/2026:05:42:21 +0300] "POST /wp-login.php HTTP/1.1" 403 753 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "2.37"
37.140.223.149 - [25/Jul/2026:05:42:31 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36" "2.37"
37.140.223.149 - [25/Jul/2026:05:42:40 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15" "2.37"
37.140.223.149 - [25/Jul/2026:05:42:51 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" "2.37"
37.140.223.149 - [2
...
show less
Hacking
Brute-Force
Web App Attack
๐ซ๐ฎ
bittiguru.fi
2026-07-25 02:25:07
(3 days ago)
37.140.223.149 - [25/Jul/2026:05:24:26 +0300] "POST /wp-login.php HTTP/1.1" 403 3799 "https://www.va ...
show more
37.140.223.149 - [25/Jul/2026:05:24:26 +0300] "POST /wp-login.php HTTP/1.1" 403 3799 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:90.0) Gecko/20100101 Firefox/90.0.1" "3.06"
37.140.223.149 - [25/Jul/2026:05:24:37 +0300] "POST /wp-login.php HTTP/1.1" 404 46023 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36" "3.31"
37.140.223.149 - [25/Jul/2026:05:24:47 +0300] "POST /wp-login.php HTTP/1.1" 404 46023 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" "3.31"
37.140.223.149 - [25/Jul/2026:05:24:56 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36" "2.37"
37.140.223.149 - [25/Jul/2026:05:25:06 +0300] "POST /wp-login
...
show less
Hacking
Brute-Force
Web App Attack
๐น๐ท
neron
2026-07-24 15:30:03
(3 days ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
๐บ๐ธ
Rip
2026-07-23 11:28:48
(5 days ago)
WordPress fingerprinting and attack surface probing
Port Scan
Web App Attack
๐ฉ๐ช
Carsten
2026-07-23 10:48:01
(5 days ago)
GET [wp1/wp-includes/wlwmanifest.xml]
Port Scan
๐จ๐ญ
YF
2026-07-22 17:00:21
(5 days ago)
Distributed subnet attack โ coordinated scanning from multiple IPs in the same /24
DDoS Attack
Web App Attack