π§π·
Peregrine
2026-07-09 03:15:26
(2 weeks ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 64.89.162.167 172.71.95.45 - - [22/Jun/2026:17:32:2 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 64.89.162.167 172.71.95.45 - - [22/Jun/2026:17:32:22 -0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 18193
show less
Bad Web Bot
π³π±
CryptoYakari
2026-07-09 02:53:38
(2 weeks ago)
64.89.162.167 - - [09/Jul/2026:05:53:34 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.0" 404 698 ...
show more
64.89.162.167 - - [09/Jul/2026:05:53:34 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.0" 404 6989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
64.89.162.167 - - [09/Jul/2026:05:53:34 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.0" 404 6989 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
64.89.162.167 - - [09/Jul/2026:05:53:34 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.0" 404 6989 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
64.89.162.167 - - [09/Jul/2026:05:53:34 +0300] "POST /wp-plain.php HTTP/1.0" 404 4005 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrom
...
show less
Web Spam
Blog Spam
Web App Attack
Bad Web Bot
π©πͺ
maxpower
2026-07-09 02:11:57
(2 weeks ago)
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 64.89.162.167 (US/United States/-): 2 in the last 3 ...
show more
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 64.89.162.167 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 64.89.162.167 - - [09/Jul/2026:04:11:53 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 404 5378 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.162.167" host=www.marialauracaselli.com
64.89.162.167 - - [09/Jul/2026:04:11:54 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 404 5379 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.162.167" host=www.marialauracaselli.com
show less
Port Scan
πΊπΈ
antlac1
2026-07-09 01:09:32
(2 weeks ago)
crowdsecurity/http-bad-user-agent
Brute-Force
Web App Attack
π«π·
dynamix
2026-07-09 00:39:47
(2 weeks ago)
Multiple WAF Violations
Web App Attack
π©πͺ
maxpower
2026-07-08 22:17:23
(2 weeks ago)
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 64.89.162.167 (US/United States/-): 2 in the last 3 ...
show more
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 64.89.162.167 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 64.89.162.167 - - [09/Jul/2026:00:17:16 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 404 10796 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.162.167" host=www.canarybusinesshhs.com
64.89.162.167 - - [09/Jul/2026:00:17:19 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 404 10796 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.162.167" host=www.canarybusinesshhs.com
show less
Port Scan
π©πͺ
maxpower
2026-07-08 21:22:42
(2 weeks ago)
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 64.89.162.167 (US/United States/-): 2 in the last 3 ...
show more
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 64.89.162.167 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 64.89.162.167 - - [08/Jul/2026:23:22:33 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 30282 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.162.167" host=abruzzotour.it
64.89.162.167 - - [08/Jul/2026:23:22:35 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 404 7589 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.162.167" host=abruzzotour.it
show less
Port Scan
πΊπΈ
nationaleventpros.com
2026-07-08 20:47:40
(2 weeks ago)
vulnerability scan
Web App Attack
π©πͺ
raph
2026-07-08 16:42:15
(3 weeks ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
π§πͺ
cmbplf
2026-07-08 16:36:29
(3 weeks ago)
233 requests with url.path *.alfa
141 requests with url.path */wp-plain.php
Brute-Force
Bad Web Bot
π¦πΊ
clapper
2026-07-08 14:52:57
(3 weeks ago)
(mod_security) mod_security (id:980001) triggered by 64.89.162.167 (US/United States/-): 5 in the la ...
show more
(mod_security) mod_security (id:980001) triggered by 64.89.162.167 (US/United States/-): 5 in the last 3600 secs; ID: Clar
show less
Brute-Force
Bad Web Bot
ππ³
unph
2026-07-08 14:24:56
(3 weeks ago)
Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin
Brute-Force
π«π·
Tilellit.PRO
2026-07-08 11:20:08
(3 weeks ago)
Malicious web traffic detected by CrowdSec
Hacking
π©πͺ
maxpower
2026-07-08 10:09:19
(3 weeks ago)
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 64.89.162.167 (US/United States/-): 2 in the last 3 ...
show more
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 64.89.162.167 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 64.89.162.167 - - [08/Jul/2026:11:24:44 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 404 15956 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.162.167" host=fisacabruzzomolise.com
64.89.162.167 - - [08/Jul/2026:12:09:12 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 55215 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.162.167" host=www.cgilchieti.it
show less
Port Scan
π²πΎ
Rizzy
2026-07-08 09:42:52
(3 weeks ago)
Multiple WAF Violations
Brute-Force
Web App Attack