๐ซ๐ท
dynamix
2026-06-19 19:14:15
(3 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐ฉ๐ช
LRob.fr
2026-06-16 16:00:07
(6 days ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-12 20:41:24
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 37.228.129.63 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 37.228.129.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 16:41:17.466900 2026] [security2:error] [pid 22049:tid 22049] [client 37.228.129.63:55242] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bluemarineboats.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bluemarineboats.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aixu7Uc52yCyQohI5OgoWgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 05:39:02
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 37.228.129.63 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 37.228.129.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 01:38:57.515576 2026] [security2:error] [pid 12360:tid 12360] [client 37.228.129.63:50904] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||misogynyis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "misogynyis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiZVcZHPT97aF0ZrXXiCMwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
ICS Labs
2026-05-14 12:39:03
(1 month ago)
ICS Labs identified 37.228.129.63 as a malicious indicator from threat intelligence.
Hacking
Anonymous
2026-05-06 04:04:26
(1 month ago)
2026-05-05 19:00:41,277 fail2ban.actions [3625835]: NOTICE [tor] Ban 37.228.129.63
2026-05-0 ...
show more
2026-05-05 19:00:41,277 fail2ban.actions [3625835]: NOTICE [tor] Ban 37.228.129.63
2026-05-05 22:00:38,636 fail2ban.actions [3625835]: NOTICE [tor] Ban 37.228.129.63
2026-05-06 01:00:38,289 fail2ban.actions [3625835]: NOTICE [tor] Ban 37.228.129.63
2026-05-06 04:00:46,681 fail2ban.actions [3625835]: NOTICE [tor] Ban 37.228.129.63
2026-05-06 07:04:24,398 fail2ban.actions [3625835]: NOTICE [tor] Ban 37.228.129.63
show less
Brute-Force
Anonymous
2026-04-24 21:04:40
(1 month ago)
2026-04-24 12:00:42,172 fail2ban.actions [7718]: NOTICE [tor] Ban 37.228.129.63
2026-04-24 1 ...
show more
2026-04-24 12:00:42,172 fail2ban.actions [7718]: NOTICE [tor] Ban 37.228.129.63
2026-04-24 15:00:39,761 fail2ban.actions [7718]: NOTICE [tor] Ban 37.228.129.63
2026-04-24 18:00:41,566 fail2ban.actions [7718]: NOTICE [tor] Ban 37.228.129.63
2026-04-24 21:00:50,644 fail2ban.actions [7718]: NOTICE [tor] Ban 37.228.129.63
2026-04-25 00:04:39,155 fail2ban.actions [7718]: NOTICE [tor] Ban 37.228.129.63
show less
Brute-Force
๐ซ๐ฎ
nNordic
2026-04-24 07:10:50
(1 month ago)
Connection attempt blocked by IDS/IPS from 37.228.129.63/32
Hacking
๐บ๐ธ
nyt
2026-04-01 12:34:06
(2 months ago)
SQLi, SQLi (encoding)
SQL Injection
Web App Attack
๐ฎ๐ณ
liveaspankaj
2026-03-29 21:20:37
(2 months ago)
DDoS attack: 102 requests in 5m (GET / or repair.php).
DDoS Attack
Anonymous
2026-03-17 20:02:20
(3 months ago)
2026-03-17 11:00:18,151 fail2ban.actions [3511917]: NOTICE [tor] Ban 37.228.129.63
2026-03-1 ...
show more
2026-03-17 11:00:18,151 fail2ban.actions [3511917]: NOTICE [tor] Ban 37.228.129.63
2026-03-17 13:01:26,078 fail2ban.actions [3511917]: NOTICE [tor] Ban 37.228.129.63
2026-03-17 16:00:38,688 fail2ban.actions [3511917]: NOTICE [tor] Ban 37.228.129.63
2026-03-17 19:01:07,604 fail2ban.actions [3511917]: NOTICE [tor] Ban 37.228.129.63
2026-03-17 22:02:10,108 fail2ban.actions [3511917]: NOTICE [tor] Ban 37.228.129.63
show less
Brute-Force
๐ฉ๐ช
LRob.fr
2026-03-11 02:15:08
(3 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
๐ช๐ธ
gnom4ik
2026-02-21 13:12:21
(4 months ago)
ban-reviewer auto report; ip=37.228.129.63; scenario=http:scan; verdict=valid_ban; confidence=0.85; ...
show more
ban-reviewer auto report; ip=37.228.129.63; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'http:scan' scenario; AbuseIPDB category 14 (Port Scan) assigned; IP has 2 active decisions in lookback window; Decision duration of 7980 minutes (5 days) indicates sustained threat
show less
Port Scan
Hacking
SSH
๐ธ๐ช
peterh
2025-12-02 22:53:43
(6 months ago)
Coordinated attack
VPN IP
Hacking
Anonymous
2025-11-29 16:36:51
(6 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH