AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User saloniamatteo , the webmaster of salonia.it, joined AbuseIPDB in July 2024 and has reported 720 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇷🇺 91.215.85.31	03 Mar 2025	91.215.85.31 - - [03/Mar/2025:05:57:39 +0100] "GET /alpha/.git/config HTTP/1.1" 401 HOST "d.salonia. ... show more 91.215.85.31 - - [03/Mar/2025:05:57:39 +0100] "GET /alpha/.git/config HTTP/1.1" 401 HOST "d.salonia.it" REF "-" UA "Mozilla/5.0 (compatible; bingbot/2.0 http://www.bing.com/bingbot.htm)" gz% "-" 91.215.85.31 - - [03/Mar/2025:05:57:40 +0100] "GET /alt/.git/config HTTP/1.1" 401 HOST "d.salonia.it" REF "-" UA "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" gz% "-" 91.215.85.31 - - [03/Mar/2025:05:57:40 +0100] "GET / HTTP/1.1" 401 HOST "d.salonia.it" REF "-" UA "Mozilla/3.01Gold (Win95; I)" gz% "-" ... show less	Brute-Force Exploited Host Web App Attack
🇨🇳 43.248.133.48	02 Mar 2025	Mar 2 19:26:20 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ... show more Mar 2 19:26:20 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=43.248.133.48 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=26303 DF PROTO=TCP SPT=59455 DPT=52763 WINDOW=0 RES=0x00 ACK RST URGP=0 Mar 2 19:45:48 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=43.248.133.48 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=6623 DF PROTO=TCP SPT=59455 DPT=33537 WINDOW=0 RES=0x00 ACK RST URGP=0 Mar 2 19:45:48 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=43.248.133.48 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=11147 DF PROTO=TCP SPT=59455 DPT=33537 WINDOW=0 RES=0x00 ACK RST URGP=0 ... show less	Brute-Force Exploited Host Web App Attack
🇧🇬 101.99.94.237	02 Mar 2025	Mar 2 19:31:21 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ... show more Mar 2 19:31:21 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=101.99.94.237 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=6881 DPT=49701 WINDOW=0 RES=0x00 ACK RST URGP=0 Mar 2 19:31:22 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=101.99.94.237 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=6881 DPT=49701 WINDOW=0 RES=0x00 ACK RST URGP=0 Mar 2 19:42:03 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=101.99.94.237 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=6881 DPT=60405 WINDOW=0 RES=0x00 ACK RST URGP=0 ... show less	Brute-Force Exploited Host Web App Attack
🇱🇻 212.93.112.53	02 Mar 2025	Mar 2 19:39:57 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ... show more Mar 2 19:39:57 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=212.93.112.53 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=28270 PROTO=TCP SPT=6881 DPT=43531 WINDOW=0 RES=0x00 ACK RST URGP=0 Mar 2 19:39:58 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=212.93.112.53 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=28322 PROTO=TCP SPT=6881 DPT=43531 WINDOW=0 RES=0x00 ACK RST URGP=0 Mar 2 19:40:01 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=212.93.112.53 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=28456 PROTO=TCP SPT=6881 DPT=43531 WINDOW=0 RES=0x00 ACK RST URGP=0 ... show less	Brute-Force Exploited Host Web App Attack
🇱🇻 212.3.208.28	02 Mar 2025	Mar 2 19:31:23 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ... show more Mar 2 19:31:23 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=212.3.208.28 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=53455 DF PROTO=TCP SPT=22922 DPT=56627 WINDOW=0 RES=0x00 ACK RST URGP=0 Mar 2 19:31:24 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=212.3.208.28 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=53516 DF PROTO=TCP SPT=22922 DPT=56627 WINDOW=0 RES=0x00 ACK RST URGP=0 ... show less	Brute-Force Exploited Host Web App Attack
🇱🇻 212.3.209.143	02 Mar 2025	Mar 2 19:31:22 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ... show more Mar 2 19:31:22 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=212.3.209.143 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=43 ID=6582 DF PROTO=TCP SPT=1028 DPT=43937 WINDOW=0 RES=0x00 ACK RST URGP=0 Mar 2 19:31:23 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=212.3.209.143 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=43 ID=6606 DF PROTO=TCP SPT=1028 DPT=43937 WINDOW=0 RES=0x00 ACK RST URGP=0 Mar 2 19:31:24 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=212.3.209.143 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=43 ID=6685 DF PROTO=TCP SPT=1028 DPT=43937 WINDOW=0 RES=0x00 ACK RST URGP=0 ... show less	Brute-Force Exploited Host Web App Attack
🇨🇳 43.248.133.105	02 Mar 2025	Mar 2 19:28:35 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ... show more Mar 2 19:28:35 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=43.248.133.105 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=27281 DF PROTO=TCP SPT=51636 DPT=49123 WINDOW=0 RES=0x00 ACK RST URGP=0 Mar 2 19:29:59 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=43.248.133.105 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=43300 DF PROTO=TCP SPT=51636 DPT=52093 WINDOW=0 RES=0x00 ACK RST URGP=0 ... show less	Brute-Force Exploited Host Web App Attack
🇺🇸 3.135.184.36	28 Feb 2025	Feb 28 08:52:49 localhost postfix/smtps/smtpd[10113]: improper command pipelining after CONNECT from ... show more Feb 28 08:52:49 localhost postfix/smtps/smtpd[10113]: improper command pipelining after CONNECT from ec2-3-135-184-36.us-east-2.compute.amazonaws.com[3.135.184.36]: GET / HTTP/1.1\r\nHost: 109.116.208.226:587\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_ Feb 28 08:52:49 localhost postfix/smtps/smtpd[10111]: improper command pipelining after CONNECT from ec2-3-135-184-36.us-east-2.compute.amazonaws.com[3.135.184.36]: GET / HTTP/1.1\r\nHost: 109.116.208.226:587\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_ Feb 28 08:52:50 localhost postfix/smtps/smtpd[10111]: improper command pipelining after CONNECT from ec2-3-135-184-36.us-east-2.compute.amazonaws.com[3.135.184.36]: \n ... show less	Brute-Force Exploited Host Web App Attack
🇺🇸 170.39.218.109	26 Feb 2025	170.39.218.109 - - [26/Feb/2025:23:58:13 +0100] "GET /phpinfo HTTP/1.1" 403 HOST "aws.salonia.it" RE ... show more 170.39.218.109 - - [26/Feb/2025:23:58:13 +0100] "GET /phpinfo HTTP/1.1" 403 HOST "aws.salonia.it" REF "-" UA "-" gz% "-" 170.39.218.109 - - [26/Feb/2025:23:58:13 +0100] "GET /info.php HTTP/1.1" 403 HOST "aws.salonia.it" REF "-" UA "-" gz% "-" 170.39.218.109 - - [26/Feb/2025:23:58:14 +0100] "GET /php-info.php HTTP/1.1" 403 HOST "aws.salonia.it" REF "-" UA "-" gz% "-" ... show less	Brute-Force Exploited Host Web App Attack
🇧🇩 59.153.103.53	26 Feb 2025	Feb 26 19:28:57 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ... show more Feb 26 19:28:57 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=59.153.103.53 DST=192.168.1.88 LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=11586 DF PROTO=TCP SPT=50165 DPT=14880 WINDOW=128 RES=0x00 ACK FIN URGP=0 Feb 26 19:28:59 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=59.153.103.53 DST=192.168.1.88 LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=11587 DF PROTO=TCP SPT=50165 DPT=14880 WINDOW=128 RES=0x00 ACK FIN URGP=0 Feb 26 19:29:03 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=59.153.103.53 DST=192.168.1.88 LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=11588 DF PROTO=TCP SPT=50165 DPT=14880 WINDOW=128 RES=0x00 ACK FIN URGP=0 ... show less	Brute-Force Exploited Host Web App Attack
🇧🇩 103.129.238.107	26 Feb 2025	Feb 26 14:30:41 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ... show more Feb 26 14:30:41 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=103.129.238.107 DST=192.168.1.88 LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=1721 DF PROTO=TCP SPT=44849 DPT=14880 WINDOW=172 RES=0x00 ACK FIN URGP=0 Feb 26 14:30:43 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=103.129.238.107 DST=192.168.1.88 LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=1722 DF PROTO=TCP SPT=44849 DPT=14880 WINDOW=172 RES=0x00 ACK FIN URGP=0 Feb 26 14:32:42 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=103.129.238.107 DST=192.168.1.88 LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=18397 DF PROTO=TCP SPT=40531 DPT=14880 WINDOW=172 RES=0x00 ACK FIN URGP=0 ... show less	Brute-Force Exploited Host Web App Attack
🇺🇸 18.218.197.166	23 Feb 2025	Feb 23 09:56:45 localhost postfix/smtps/smtpd[28283]: improper command pipelining after CONNECT from ... show more Feb 23 09:56:45 localhost postfix/smtps/smtpd[28283]: improper command pipelining after CONNECT from ec2-18-218-197-166.us-east-2.compute.amazonaws.com[18.218.197.166]: \026\003\001\000{\001\000\000w\003\003\375\251wdT\204\2470Aw\000^\223y\031U\204++q\374\226\325\004\214\224_\375\347\217\022\304\000\000\032\300/\300+\300\021\300\a\300\023\300\t\300\024\300\n\000\005\000/\0005\300\022\000\n\001\000\0004\000\005\000\005\001\000\000\000\000\000\n\000\b\000\006\000\027\000\030\000\031\000\v\000 Feb 23 09:56:45 localhost postfix/smtps/smtpd[28284]: improper command pipelining after CONNECT from ec2-18-218-197-166.us-east-2.compute.amazonaws.com[18.218.197.166]: GET / HTTP/1.1\r\nHost: 109.116.208.226:587\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_ Feb 23 09:56:45 localhost postfix/smtps/smtpd[28281]: improper command pipelining after CONNECT from ec2-18-218-197-166.us-east-2.compute.amazonaws.com[18.218.197.166]: GET / HTTP/1.1\r\nHost: 109.116.208.226:587\r\nUser-Agent: Mo ... show less	Brute-Force Exploited Host Web App Attack
🇺🇸 68.69.184.202	23 Feb 2025	68.69.184.202 - - [23/Feb/2025:07:00:37 +0100] "HEAD /contact HTTP/1.1" 405 HOST "salonia.it" REF "h ... show more 68.69.184.202 - - [23/Feb/2025:07:00:37 +0100] "HEAD /contact HTTP/1.1" 405 HOST "salonia.it" REF "https://sinestic.it" UA "Mozilla/5.0 (compatible; Trance/1.0)" gz% "-" 68.69.184.202 - - [23/Feb/2025:07:00:42 +0100] "HEAD /contact HTTP/1.1" 405 HOST "salonia.it" REF "https://sinestic.it/it/contact" UA "Mozilla/5.0 (compatible; Trance/1.0)" gz% "-" 68.69.184.202 - - [23/Feb/2025:07:00:46 +0100] "HEAD /contact HTTP/1.1" 405 HOST "salonia.it" REF "https://sinestic.it/en/contact" UA "Mozilla/5.0 (compatible; Trance/1.0)" gz% "-" ... show less	Brute-Force Exploited Host Web App Attack
🇺🇸 3.141.167.124	23 Feb 2025	Feb 23 03:09:21 localhost sshd-session[23961]: banner exchange: Connection from 3.141.167.124 port 5 ... show more Feb 23 03:09:21 localhost sshd-session[23961]: banner exchange: Connection from 3.141.167.124 port 57164: invalid format Feb 23 03:09:21 localhost sshd-session[23962]: banner exchange: Connection from 3.141.167.124 port 57184: invalid format Feb 23 03:09:38 localhost sshd-session[24122]: banner exchange: Connection from 3.141.167.124 port 35170: invalid format ... show less	Brute-Force SSH
🇳🇱 213.152.176.252	22 Feb 2025	213.152.176.252 - - [22/Feb/2025:18:05:44 +0100] "GET /.env.production HTTP/1.1" 401 HOST "d.salonia ... show more 213.152.176.252 - - [22/Feb/2025:18:05:44 +0100] "GET /.env.production HTTP/1.1" 401 HOST "d.salonia.it" REF "-" UA "Go-http-client/1.1" gz% "-" 213.152.176.252 - - [22/Feb/2025:18:05:44 +0100] "GET /.ssh/id_ecdsa HTTP/1.1" 401 HOST "d.salonia.it" REF "-" UA "Go-http-client/1.1" gz% "-" 213.152.176.252 - - [22/Feb/2025:18:05:44 +0100] "GET /secrets.json HTTP/1.1" 401 HOST "d.salonia.it" REF "-" UA "Go-http-client/1.1" gz% "-" ... show less	Brute-Force Exploited Host Web App Attack
🇮🇪 52.138.172.183	22 Feb 2025	52.138.172.183 - - [22/Feb/2025:16:39:21 +0100] "GET /wp-includes/Text/network.php HTTP/1.1" 403 HOS ... show more 52.138.172.183 - - [22/Feb/2025:16:39:21 +0100] "GET /wp-includes/Text/network.php HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "-" gz% "-" 52.138.172.183 - - [22/Feb/2025:16:39:21 +0100] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "-" gz% "-" 52.138.172.183 - - [22/Feb/2025:16:39:21 +0100] "GET /js/fm.php HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "-" gz% "-" ... show less	Brute-Force Exploited Host Web App Attack
🇮🇳 65.20.74.104	22 Feb 2025	65.20.74.104 - - [22/Feb/2025:13:48:13 +0100] "GET / HTTP/1.1" 401 HOST "d.salonia.it" REF "-" UA "M ... show more 65.20.74.104 - - [22/Feb/2025:13:48:13 +0100] "GET / HTTP/1.1" 401 HOST "d.salonia.it" REF "-" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" gz% "-" 65.20.74.104 - - [22/Feb/2025:13:48:13 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 401 HOST "d.salonia.it" REF "-" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" gz% "-" 65.20.74.104 - - [22/Feb/2025:13:48:13 +0100] "GET //xmlrpc.php?rsd HTTP/1.1" 401 HOST "d.salonia.it" REF "-" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" gz% "-" ... show less	Brute-Force Exploited Host Web App Attack
🇺🇸 52.88.25.190	21 Feb 2025	52.88.25.190 - - [21/Feb/2025:19:56:26 +0100] "HEAD /wordpress HTTP/1.1" 405 HOST "salonia.it" REF " ... show more 52.88.25.190 - - [21/Feb/2025:19:56:26 +0100] "HEAD /wordpress HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/wordpress" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-" 52.88.25.190 - - [21/Feb/2025:19:56:26 +0100] "HEAD / HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-" 52.88.25.190 - - [21/Feb/2025:19:56:27 +0100] "HEAD /wp HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/wp" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-" ... show less	Brute-Force Exploited Host Web App Attack
🇵🇱 151.115.89.145	21 Feb 2025	151.115.89.145 - - [21/Feb/2025:07:58:19 +0100] "GET / HTTP/2.0" 401 HOST "d.salonia.it" REF "-" UA ... show more 151.115.89.145 - - [21/Feb/2025:07:58:19 +0100] "GET / HTTP/2.0" 401 HOST "d.salonia.it" REF "-" UA "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3" gz% "-" 151.115.89.145 - - [21/Feb/2025:07:58:21 +0100] "GET /favicon.ico HTTP/1.1" 403 HOST "d.salonia.it" REF "-" UA "python-requests/2.25.1" gz% "-" 151.115.89.145 - - [21/Feb/2025:08:18:18 +0100] "GET /login/favicon.ico HTTP/1.1" 403 HOST "f.salonia.it" REF "-" UA "python-requests/2.25.1" gz% "-" ... show less	Brute-Force Exploited Host Web App Attack
🇺🇸 107.191.42.66	19 Feb 2025	107.191.42.66 - - [19/Feb/2025:21:39:43 +0100] "HEAD /wordpress HTTP/1.1" 405 HOST "salonia.it" REF ... show more 107.191.42.66 - - [19/Feb/2025:21:39:43 +0100] "HEAD /wordpress HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/wordpress" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-" 107.191.42.66 - - [19/Feb/2025:21:39:43 +0100] "HEAD / HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-" 107.191.42.66 - - [19/Feb/2025:21:39:43 +0100] "HEAD /wp HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/wp" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-" ... show less	Brute-Force Exploited Host Web App Attack
🇺🇸 129.213.94.27	17 Feb 2025	129.213.94.27 - - [17/Feb/2025:14:22:08 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 129.213.94.27 - - [17/Feb/2025:14:22:08 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 HOST "sinestic.it" REF "-" UA "-" gz% "-" 129.213.94.27 - - [17/Feb/2025:14:22:09 +0100] "GET /403.php HTTP/1.1" 403 HOST "sinestic.it" REF "-" UA "-" gz% "-" 129.213.94.27 - - [17/Feb/2025:14:22:09 +0100] "GET /content.php HTTP/1.1" 403 HOST "sinestic.it" REF "-" UA "-" gz% "-" ... show less	Brute-Force Exploited Host Web App Attack
🇸🇪 79.142.76.244	14 Feb 2025	Feb 14 22:29:19 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ... show more Feb 14 22:29:19 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=79.142.76.244 DST=192.168.1.88 LEN=572 TOS=0x00 PREC=0x00 TTL=47 ID=45467 DF PROTO=TCP SPT=53214 DPT=42449 WINDOW=257 RES=0x00 ACK PSH URGP=0 Feb 14 22:29:34 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=79.142.76.244 DST=192.168.1.88 LEN=572 TOS=0x00 PREC=0x00 TTL=47 ID=45474 DF PROTO=TCP SPT=53214 DPT=42449 WINDOW=257 RES=0x00 ACK PSH FIN URGP=0 Feb 14 22:47:53 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=79.142.76.244 DST=192.168.1.88 LEN=337 TOS=0x00 PREC=0x00 TTL=49 ID=5302 DF PROTO=TCP SPT=53214 DPT=57569 WINDOW=257 RES=0x00 ACK PSH URGP=0 ... show less	Brute-Force Exploited Host Web App Attack
🇳🇱 37.48.95.45	14 Feb 2025	Feb 14 22:40:31 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ... show more Feb 14 22:40:31 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=37.48.95.45 DST=192.168.1.88 LEN=441 TOS=0x00 PREC=0x00 TTL=51 ID=51243 DF PROTO=TCP SPT=48752 DPT=45923 WINDOW=133 RES=0x00 ACK PSH URGP=0 Feb 14 22:40:31 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=37.48.95.45 DST=192.168.1.88 LEN=52 TOS=0x00 PREC=0x00 TTL=51 ID=51245 DF PROTO=TCP SPT=48752 DPT=45923 WINDOW=133 RES=0x00 ACK FIN URGP=0 Feb 14 22:40:32 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=37.48.95.45 DST=192.168.1.88 LEN=441 TOS=0x00 PREC=0x00 TTL=51 ID=51246 DF PROTO=TCP SPT=48752 DPT=45923 WINDOW=133 RES=0x00 ACK PSH FIN URGP=0 ... show less	Brute-Force Exploited Host Web App Attack
🇱🇻 185.65.163.216	14 Feb 2025	Feb 14 22:32:21 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ... show more Feb 14 22:32:21 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=185.65.163.216 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=1024 DPT=35975 WINDOW=0 RES=0x00 ACK RST URGP=0 Feb 14 22:32:30 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=185.65.163.216 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=1024 DPT=35975 WINDOW=0 RES=0x00 ACK RST URGP=0 Feb 14 22:36:45 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=185.65.163.216 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=0 DF PROTO=TCP SPT=1024 DPT=48019 WINDOW=0 RES=0x00 ACK RST URGP=0 ... show less	Brute-Force Exploited Host Web App Attack
🇱🇻 212.3.208.28	14 Feb 2025	Feb 14 22:32:30 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ... show more Feb 14 22:32:30 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=212.3.208.28 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=42179 DF PROTO=TCP SPT=33420 DPT=52801 WINDOW=0 RES=0x00 ACK RST URGP=0 Feb 14 22:32:31 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=212.3.208.28 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=42255 DF PROTO=TCP SPT=33420 DPT=52801 WINDOW=0 RES=0x00 ACK RST URGP=0 Feb 14 22:33:55 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=212.3.208.28 DST=192.168.1.88 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=46471 DF PROTO=TCP SPT=33420 DPT=41887 WINDOW=0 RES=0x00 ACK RST URGP=0 ... show less	Brute-Force Exploited Host Web App Attack