64.236.140.217

Fetched browser challenge page 8 times in <2h without solving. Likely bad bot.

Novel zero-day payload (fingerprint=e3da97682737) | HTTP GET ssh:// | at Edge layer | Attack type: reconnaissance scanning — target profiling | Raw payload: Empty connection

Banned by Multi Agent · node …vhry · attempts=5 · SSH brute-force / scan

Aug 27 18:53:42 mail sshd[1385439]: Failed password for root from 64.236.140.217 port 62514 ssh2 Aug 27 19:00:35 mail sshd[1385828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.236.140.217 user=root Aug ... show more Aug 27 18:53:42 mail sshd[1385439]: Failed password for root from 64.236.140.217 port 62514 ssh2 Aug 27 19:00:35 mail sshd[1385828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.236.140.217 user=root Aug 27 19:00:37 mail sshd[1385828]: Failed password for root from 64.236.140.217 port 62513 ssh2 ... show less

Fail2Ban sshd jail triggered for 64.236.140.217

Blocked by UFW [22/tcp] Source port: 62512 TTL: 41 Packet length: 60

Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.

Auto-blocked by Seczar SecureOps — Port Scan Detection (12 events in 10min) at 2026-08-08 06:59

Unauthorized attempt on debian [2083/tcp] Source port: 11992 TTL: 109 Packet length: 40 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter

WordPress Sensitive System Files Information Disclosure.

Imunify360 WAF block (graylisted)

(mod_security) mod_security triggered on hostname [redacted] 64.236.140.217 (US/United States/-)

2026-08-08 03:11:10 UTC Unauthorized activity to TCP port 8088. Web App

FW-PortScan: Traffic Blocked srcport=11589 dstport=2078

denied traffic to a honeypot network. destination port 2078.