🇺🇸
2602:fa59:10:c38::1
2 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 2602:fa59:10:c38::1 (US/United States/-) ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 2602:fa59:10:c38::1 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2602:fa59:10:c38::1 - - [21/Oct/2026:14:27:02 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" host=demomql.ovh
show less
Port Scan
🇺🇸
64.205.112.100
3 minutes ago
(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 64.205.112.100 (US/United States/-): 1 in the ...
show more
(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 64.205.112.100 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 64.205.112.100 - - [21/Oct/2026:14:26:25 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0" 200 4853 "-" "-" "64.205.112.100" host=ilfaro.focusabruzzo.eu
show less
Port Scan
🇦🇷
45.224.190.38
5 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 45.224.190.38 (AR/Argentina/host-38-190-224-45 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 45.224.190.38 (AR/Argentina/host-38-190-224-45-bmsolucionessrl.net.ar): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.224.190.38 - - [21/Oct/2026:14:24:16 +0200] "GET /wp-json/wp/v2/users?per_page=50&_embed&_fields=id,slug,name HTTP/2.0" 200 94 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" "-" host=ramsesconsulting.it
show less
Port Scan
🇦🇷
186.124.25.203
5 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 186.124.25.203 (AR/Argentina/host203.186-124-2 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 186.124.25.203 (AR/Argentina/host203.186-124-25.telecom.net.ar): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 186.124.25.203 - - [21/Oct/2026:14:24:10 +0200] "GET /wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug&page=1 HTTP/2.0" 200 78 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" "-" host=ramsesconsulting.it
show less
Port Scan
🇿🇦
169.0.85.142
5 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 169.0.85.142 (169-0-85-142.ip.ahisp.co.za): 1 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 169.0.85.142 (169-0-85-142.ip.ahisp.co.za): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 169.0.85.142 - - [21/Oct/2026:14:24:10 +0200] "GET /wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 HTTP/2.0" 200 57 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" "-" host=ramsesconsulting.it
show less
Port Scan
🇵🇭
2001:4451:4711:8c00:d5d6:36c5:8549:e3d1
7 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 2001:4451:4711:8c00:d5d6:36c5:8549:e3d1 (PH/Ph ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 2001:4451:4711:8c00:d5d6:36c5:8549:e3d1 (PH/Philippines/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2001:4451:4711:8c00:d5d6:36c5:8549:e3d1 - - [21/Oct/2026:14:22:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 12012 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/84.0.0.0 Safari/537.36" "-" host=dimensioneautosgt.it
show less
Port Scan
🇺🇸
136.108.83.217
12 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 136.108.83.217 (US/United States/217.83.108.13 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 136.108.83.217 (US/United States/217.83.108.136.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.108.83.217 - - [21/Oct/2026:14:17:51 +0200] "GET //wp-json/wp/v2/users/ HTTP/2.0" 200 293 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "136.108.83.217" host=www.coiet.it
show less
Port Scan
🇵🇱
195.3.220.7
16 minutes ago
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 195.3.220.7 (PL/Poland/-): 3 in the last 3600 ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 195.3.220.7 (PL/Poland/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 195.3.220.7 - - [21/Oct/2026:14:13:06 +0200] "GET /wp-content/uploads/elementor/222.php HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7" host=fisacabruzzomolise.com
195.3.220.7 - - [21/Oct/2026:14:13:06 +0200] "GET /wp-content/uploads/222.php HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7" host=fisacabruzzomolise.com
2026/10/21 14:13:06 [error] 3626675#3626675: *5650660 access forbidden by rule, client: 195.3.220.7, server: fisacabruzzo.com, request: "GET /wp-content/uploads/elementor/222.php HTTP/2.0", host: "fisacabruzzomolise.com"
show less
Port Scan
🇬🇧
131.117.188.110
23 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 131.117.188.110 (GB/United Kingdom/-): 1 in th ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 131.117.188.110 (GB/United Kingdom/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 131.117.188.110 - - [21/Oct/2026:14:06:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 12027 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36" "-" host=dvlimpianti.com
show less
Port Scan
🇩🇪
23.132.164.122
27 minutes ago
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 23.132.164.122 (US/United States/-): 1 in the last ...
show more
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 23.132.164.122 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 23.132.164.122 - - [21/Oct/2026:14:02:18 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 200 12043 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "23.132.164.122" host=vortici.it
show less
Port Scan
🇺🇸
216.244.66.234
34 minutes ago
(junkbot) REGOLA 8 - Junk Bot Blocked 216.244.66.234 (US/United States/-): 1 in the last 3600 secs; ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 216.244.66.234 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.244.66.234 - - [21/Oct/2026:13:55:37 +0200] "GET /?post_type=portfolio&p=6565 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; [email protected] )" "216.244.66.234" host=www.abruzzotour.it
show less
Port Scan
🇩🇴
148.101.3.178
35 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 148.101.3.178 (DO/Dominican Republic/178.3.101 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 148.101.3.178 (DO/Dominican Republic/178.3.101.148.d.dyn.claro.net.do): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 148.101.3.178 - - [21/Oct/2026:13:54:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 12040 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/60.0.0.0 Safari/537.36" "-" host=shoppingcenters.tv
show less
Port Scan
🇧🇯
137.255.81.52
35 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 137.255.81.52 (BJ/Benin/-): 1 in the last 3600 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 137.255.81.52 (BJ/Benin/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 137.255.81.52 - - [21/Oct/2026:13:54:21 +0200] "GET /wp-json/wp/v2/users?per_page=100&_fields=slug HTTP/2.0" 500 711 "https://digiampaolosrl.it/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" "137.255.81.52" host=digiampaolosrl.it
show less
Port Scan
🇧🇩
103.29.124.40
35 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 103.29.124.40 (BD/Bangladesh/host-103-29-124-4 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 103.29.124.40 (BD/Bangladesh/host-103-29-124-40.radiantbd.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 103.29.124.40 - - [21/Oct/2026:13:54:13 +0200] "GET /wp-json/wp/v2/users?per_page=100&_fields=id,slug&per_page=100&page=1 HTTP/2.0" 500 711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" "103.29.124.40" host=digiampaolosrl.it
show less
Port Scan
🇲🇽
177.232.85.53
35 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 177.232.85.53 (MX/Mexico/host-177-232-85-53.st ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 177.232.85.53 (MX/Mexico/host-177-232-85-53.static.metrored.net.mx): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 177.232.85.53 - - [21/Oct/2026:13:54:12 +0200] "GET /wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 HTTP/2.0" 500 711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" "177.232.85.53" host=digiampaolosrl.it
show less
Port Scan
🇹🇷
146.19.125.40
37 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 146.19.125.40 (-): 1 in the last 3600 se ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 146.19.125.40 (-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 146.19.125.40 - - [21/Oct/2026:13:52:30 +0200] "HEAD /secrets.json HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" "146.19.125.40" host=coiet.it
show less
Port Scan
🇭🇰
47.76.102.103
38 minutes ago
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 47.76.102.103 (HK/Hong Kong/-): 1 in the last 3600 ...
show more
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 47.76.102.103 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 47.76.102.103 - - [21/Oct/2026:13:51:25 +0200] "GET /wp-content/themes/legal-justice/template-parts/header/header-setup.php HTTP/1.1" 404 132788 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:155.0) Gecko/20100101 Firefox/155.0" "-" host=falone.com
show less
Port Scan
🇵🇰
153.117.75.164
40 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 153.117.75.164 (PK/Pakistan/-): 1 in the last ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 153.117.75.164 (PK/Pakistan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 153.117.75.164 - - [21/Oct/2026:13:49:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 12079 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/78.0.0.0 Safari/537.36" "-" host=costruirebene.it
show less
Port Scan
🇩🇪
34.141.73.213
44 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.141.73.213 (DE/Germany/213.73.141.34. ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.141.73.213 (DE/Germany/213.73.141.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.141.73.213 - - [21/Oct/2026:13:45:19 +0200] "GET /.ssh/id_ed25519 HTTP/2.0" 429 41 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot" "34.141.73.213" host=marialauracaselli.com
show less
Port Scan
🇷🇴
2a02:2f04:8210:eb00:18d7:944a:8a1e:a525
45 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 2a02:2f04:8210:eb00:18d7:944a:8a1e:a525 (RO/Ro ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 2a02:2f04:8210:eb00:18d7:944a:8a1e:a525 (RO/Romania/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2a02:2f04:8210:eb00:18d7:944a:8a1e:a525 - - [21/Oct/2026:13:44:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 12011 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/80.0.0.0 Safari/537.36" "-" host=coget.eu
show less
Port Scan
🇨🇦
159.203.57.195
47 minutes ago
(wp_login) REGOLA 1 - WP Login Attack 159.203.57.195 (CA/Canada/-): 5 in the last 3600 secs; Ports: ...
show more
(wp_login) REGOLA 1 - WP Login Attack 159.203.57.195 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 159.203.57.195 - - [21/Oct/2026:13:24:56 +0200] "POST /wp-login.php HTTP/1.1" 200 12086 "-" "Mozilla/5.0" "-" host=centromedicodiianni.it
159.203.57.195 - - [21/Oct/2026:13:29:15 +0200] "POST /wp-login.php HTTP/1.1" 200 12086 "-" "Mozilla/5.0" "-" host=centromedicodiianni.it
159.203.57.195 - - [21/Oct/2026:13:33:33 +0200] "POST /wp-login.php HTTP/1.1" 200 11925 "-" "Mozilla/5.0" "-" host=centromedicodiianni.it
159.203.57.195 - - [21/Oct/2026:13:37:53 +0200] "POST /wp-login.php HTTP/1.1" 200 11986 "-" "Mozilla/5.0" "-" host=centromedicodiianni.it
159.203.57.195 - - [21/Oct/2026:13:42:12 +0200] "POST /wp-login.php HTTP/1.1" 200 12016 "-" "Mozilla/5.0" "-" host=centromedicodiianni.it
show less
Port Scan
🇵🇰
39.34.148.72
48 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 39.34.148.72 (PK/Pakistan/-): 1 in the last 36 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 39.34.148.72 (PK/Pakistan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 39.34.148.72 - - [21/Oct/2026:13:41:34 +0200] "POST /xmlrpc.php HTTP/2.0" 200 4814 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36" "39.34.148.72" host=consorzioaet.it
show less
Port Scan
🇩🇪
165.22.81.195
49 minutes ago
(wp_login) REGOLA 1 - WP Login Attack 165.22.81.195 (DE/Germany/-): 5 in the last 3600 secs; Ports: ...
show more
(wp_login) REGOLA 1 - WP Login Attack 165.22.81.195 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.22.81.195 - - [21/Oct/2026:13:40:51 +0200] "POST /wp-login.php HTTP/2.0" 403 0 "-" "Mozilla/5.0" "165.22.81.195" host=olscitaly.com
165.22.81.195 - - [21/Oct/2026:13:40:51 +0200] "POST /wp-login.php HTTP/2.0" 403 0 "-" "Mozilla/5.0" "165.22.81.195" host=olscitaly.com
165.22.81.195 - - [21/Oct/2026:13:40:51 +0200] "POST /wp-login.php HTTP/2.0" 403 0 "-" "Mozilla/5.0" "165.22.81.195" host=olscitaly.com
165.22.81.195 - - [21/Oct/2026:13:40:51 +0200] "POST /wp-login.php HTTP/2.0" 403 0 "-" "Mozilla/5.0" "165.22.81.195" host=olscitaly.com
165.22.81.195 - - [21/Oct/2026:13:40:51 +0200] "POST /wp-login.php HTTP/2.0" 403 0 "-" "Mozilla/5.0" "165.22.81.195" host=olscitaly.com
show less
Port Scan
🇲🇽
201.130.172.82
49 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 201.130.172.82 (MX/Mexico/201.130.172.82.dsl.d ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 201.130.172.82 (MX/Mexico/201.130.172.82.dsl.dyn.telnor.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 201.130.172.82 - - [21/Oct/2026:13:40:18 +0200] "GET /wp-json/wp/v2/users?per_page=100&_fields=id,slug&per_page=100&page=1 HTTP/2.0" 200 42 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" "-" host=www.avconsulenze.eu
show less
Port Scan
🇧🇧
196.3.217.110
49 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 196.3.217.110 (BB/Barbados/-): 1 in the last 3 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 196.3.217.110 (BB/Barbados/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 196.3.217.110 - - [21/Oct/2026:13:40:17 +0200] "GET /wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 HTTP/2.0" 200 35 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" "-" host=www.avconsulenze.eu
show less
Port Scan