This IP address has been reported a total of
238
times from
100 distinct
sources.
37.140.223.60 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(mod_security) mod_security (id:234930) triggered by 37.140.223.60 (-): 1 in the last 300 secs; Port ...
show more(mod_security) mod_security (id:234930) triggered by 37.140.223.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 00:44:44.134728 2026] [security2:error] [pid 24346:tid 24346] [client 37.140.223.60:34585] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||automatebi.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "automatebi.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aj4DvJnKqvzTV6NphojyDQAAAA0"]
show less
Aggressive web search of vulnerable pages: /wp-content/wp-conflg.php /wp-includes/rest-api/endpoints ...
show moreAggressive web search of vulnerable pages: /wp-content/wp-conflg.php /wp-includes/rest-api/endpoints/ /wp-admin/css/colors/coffee/ /wp-includes ...
show less
(mod_security) mod_security (id:234930) triggered by 37.140.223.60 (-): 1 in the last 300 secs; Port ...
show more(mod_security) mod_security (id:234930) triggered by 37.140.223.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 17:45:02.628881 2026] [security2:error] [pid 22973:tid 22973] [client 37.140.223.60:47233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aj2hXuS6Bcp4Gd2g856plgAAAA4"]
show less
{"time":"2026-06-22T13:15:03+00:00","ip":"37.140.223.60","method":"GET","uri":"/wp-login.php","ua":" ...
show more{"time":"2026-06-22T13:15:03+00:00","ip":"37.140.223.60","method":"GET","uri":"/wp-login.php","ua":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15","referer":""}
...
show less
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Webshell probing, Backup file probing
show less