๐ฆ๐บ
A.i.D.A.N.N
2026-09-30 05:50:33
(43 minutes ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web application attack detected
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-09-30 05:14:01
(1 hour ago)
3 attacks on PHP URLs, Alfa URLs:
POST /wp-plain.php HTTP/1.1
POST /alfacgiapi/perl.alfa HTTP/1.1
Web App Attack
Hacking
๐ช๐ธ
robotstxt
2026-09-30 04:31:03
(2 hours ago)
23.132.164.91 - - [30/Sep/2026:04:30:04 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/2.0" 403 4 ...
show more
23.132.164.91 - - [30/Sep/2026:04:30:04 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/2.0" 403 47659 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "23.132.164.91" edge="172.68.111.60"
23.132.164.91 - - [30/Sep/2026:04:30:04 +0000] "POST /wp-plain.php HTTP/2.0" 403 47677 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "23.132.164.91" edge="172.68.111.60"
23.132.164.91 - - [30/Sep/2026:04:30:04 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/2.0" 403 47659 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "23.132.164.91" edge="104.23.219.98"
23.132.164.91 - - [30/Sep/2026:04:30:04 +0000] "GET /wp-content/themes/se
...
show less
Web App Attack
Anonymous
2026-09-30 03:17:59
(3 hours ago)
Attempted search for exploits and vulnerabilities detected by fail2ban
...
Port Scan
Brute-Force
๐ช๐ธ
robotstxt
2026-09-30 02:56:52
(3 hours ago)
23.132.164.91 - - [30/Sep/2026:02:55:47 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 403 7 ...
show more
23.132.164.91 - - [30/Sep/2026:02:55:47 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 403 72996 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" edge="23.132.164.91"
23.132.164.91 - - [30/Sep/2026:02:55:47 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 403 72996 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" edge="23.132.164.91"
23.132.164.91 - - [30/Sep/2026:02:55:48 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 403 72996 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" edge="23.132.164.91"
23.132.164.91 - - [30/Sep/2026:02:55:49 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 4
...
show less
Web App Attack
๐ฌ๐ท
setupgr
2026-09-30 02:47:15
(3 hours ago)
(mod_security) mod_security (id:1000001) triggered by 23.132.164.91 (US/United States/-/-/-/[AS40162 ...
show more
(mod_security) mod_security (id:1000001) triggered by 23.132.164.91 (US/United States/-/-/-/[AS401626 Netiface America, Inc.]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Sep 30 05:47:12.185537 2026] [security2:error] [pid 1754900:tid 1755067] [client 23.132.164.91:61051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/db.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /wp-content/themes/seotheme/db.php"] [severity "CRITICAL"] [tag "security"] [hostname "asteriassantorini.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "arx4MJWrjIrq3S6VYsa3oAAAAw8"], referer: www.google.com
show less
Port Scan
๐ช๐ธ
robotstxt
2026-09-30 02:00:28
(4 hours ago)
23.132.164.91 - - [30/Sep/2026:01:59:26 +0000] "POST /wp-plain.php HTTP/1.1" 403 84038 "www.google.c ...
show more
23.132.164.91 - - [30/Sep/2026:01:59:26 +0000] "POST /wp-plain.php HTTP/1.1" 403 84038 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" edge="23.132.164.91"
23.132.164.91 - - [30/Sep/2026:01:59:27 +0000] "GET / HTTP/1.1" 403 134150 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" edge="23.132.164.91"
23.132.164.91 - - [30/Sep/2026:01:59:27 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 403 84132 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" edge="23.132.164.91"
23.132.164.91 - - [30/Sep/2026:01:59:28 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 403 84132 "-" "Mozlila/5.0 (Linux; Andro
...
show less
Web App Attack
๐บ๐ธ
mnsf
2026-09-30 01:05:56
(5 hours ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
๐ฉ๐ช
maxpower
2026-09-30 00:54:30
(5 hours ago)
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 23.132.164.91 (US/United States/-): 1 in the last 3 ...
show more
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 23.132.164.91 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 23.132.164.91 - - [30/Sep/2026:02:54:29 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 200 12097 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "23.132.164.91" host=yogiraji.it
show less
Port Scan
๐ช๐ธ
robotstxt
2026-09-30 00:25:36
(6 hours ago)
23.132.164.91 - - [30/Sep/2026:00:25:28 +0000] "POST /wp-plain.php HTTP/2.0" 403 21340 "www.google.c ...
show more
23.132.164.91 - - [30/Sep/2026:00:25:28 +0000] "POST /wp-plain.php HTTP/2.0" 403 21340 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "23.132.164.91" edge="104.23.219.50"
23.132.164.91 - - [30/Sep/2026:00:25:28 +0000] "GET / HTTP/2.0" 403 27633 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "23.132.164.91" edge="104.23.219.50"
23.132.164.91 - - [30/Sep/2026:00:25:29 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 403 21341 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "23.132.164.91" edge="172.68.110.85"
23.132.164.91 - - [30/Sep/2026:00:25:29 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/2.0" 403 2
...
show less
Web App Attack
๐ฉ๐ช
paissangroup
2026-09-30 00:11:25
(6 hours ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-30 00:09:56
(6 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 247
Exploited Host
Web App Attack
๐ฌ๐ง
gigatech
2026-09-30 00:00:16
(6 hours ago)
Webserver Probing
Web App Attack
๐ช๐ธ
robotstxt
2026-09-29 23:44:13
(6 hours ago)
23.132.164.91 - - [29/Sep/2026:23:43:20 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello ...
show more
23.132.164.91 - - [29/Sep/2026:23:43:20 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 403 5 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" edge="23.132.164.91"
23.132.164.91 - - [29/Sep/2026:23:43:17 +0000] "GET / HTTP/1.1" 403 164255 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" edge="23.132.164.91"
23.132.164.91 - - [29/Sep/2026:23:43:17 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 403 5 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" edge="23.132.164.91"
23.132.164.91 - - [29/Sep/2026:23:43:17 +0000] "POST /wp-plain.php HTTP/1.1" 403 5 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A
...
show less
Web App Attack
๐บ๐ธ
agenciahypelab.com.br
2026-09-29 22:44:54
(7 hours ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH