🇧🇷
Peregrine
2026-10-16 03:12:34
(1 day ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 136.107.167.225 104.22.100.45 - - [14/Oct/2026:16:2 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 136.107.167.225 104.22.100.45 - - [14/Oct/2026:16:20:04 -0300] "GET /dist../.env HTTP/1.1" 404 18149
show less
Bad Web Bot
🇧🇷
Caue Henrique
2026-10-16 03:00:01
(1 day ago)
Multiple common web attacks, XSS, Web Server 500 Error
Web Spam
Hacking
Web App Attack
2026-10-15 04:34:20
(2 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇨🇦
polycoda
2026-10-14 22:58:24
(2 days ago)
🔥 VERY AGGRESSIVE SCANNER probed over 800 inexistent files and PHP scripts in less than an hour.
Hacking
Web App Attack
🇨🇦
polycoda
2026-10-14 20:43:15
(2 days ago)
AutoBlock: 📡 Port Scan (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
Port Scan
Bad Web Bot
🇧🇷
maviei
2026-10-14 19:35:16
(2 days ago)
radiojfsliberdade.com.br 136.107.167.225 - - [14/Oct/2026:16:35:14 -0300] "GET /admin HTTP/2.0" 403 ...
show more
radiojfsliberdade.com.br 136.107.167.225 - - [14/Oct/2026:16:35:14 -0300] "GET /admin HTTP/2.0" 403 5754 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇧🇷
Peregrine
2026-10-14 19:20:14
(2 days ago)
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 136.107.167.225 104.22.100.45 - - [14/Oct/2026:16:20:04 ...
show more
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 136.107.167.225 104.22.100.45 - - [14/Oct/2026:16:20:04 -0300] "GET /z9x8c7v6b5-debug-trigger-decise.com.br HTTP/1.1" 404 18149
136.107.167.225 104.22.100.45 - - [14/Oct/2026:16:20:04 -0300] "GET /.vite/manifest.json HTTP/1.1" 404 18149
136.107.167.225 104.22.100.45 - - [14/Oct/2026:16:20:04 -0300] "GET /dist/manifest.json HTTP/1.1" 404 18149
136.107.167.225 104.22.100.45 - - [14/Oct/2026:16:20:04 -0300] "GET /build/manifest.json HTTP/1.1" 404 18149
136.107.167.225 104.22.100.45 - - [14/Oct/2026:16:20:04 -0300] "POST /icecoder/lib/terminal-xhr.php HTTP/1.1" 404 18149
show less
Bad Web Bot
Web App Attack
2026-10-14 18:58:15
(2 days ago)
136.107.167.225 - - [14/Oct/2026:15:58:14 -0300] "GET /.git/HEAD HTTP/2.0" 301 162 "-" "Mozilla/5.0 ...
show more
136.107.167.225 - - [14/Oct/2026:15:58:14 -0300] "GET /.git/HEAD HTTP/2.0" 301 162 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
2026-10-14 17:45:07
(2 days ago)
CVE-2025-55182 - RSC NEXTJS RCE Exploit - HTTP (Request)
Hacking
🇨🇦
DRI
2026-10-14 17:00:55
(2 days ago)
Web attack/Malicious activity detected
Web App Attack
🇩🇪
updown.io
2026-10-14 16:49:23
(2 days ago)
{"level":"info","ts":1791996559.5723994,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1791996559.5723994,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.107.167.225","remote_port":"38204","client_ip":"136.107.167.225","proto":"HTTP/2.0","method":"GET","host":"status.bots.business","uri":"/signup","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Sec-Fetch-Dest":["document"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Mobile":["?1"],"Sec-Fetch-User":["?1"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua-Platform":["\"Android\""],"Sec-Fetch-Mode":["navigate"],"Accept-Language":["en-US,en;q=0.9"],"X-Nextjs-Data":["1"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Google Chrome\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Upgrade-Insecure-Requests":["1"],"Priority":["u=0, i"],"Use
...
show less
DDoS Attack
Web App Attack
🇬🇧
venus.launch.bz
2026-10-14 15:33:03
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 136.107.167.225 (US/United States/225.1 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 136.107.167.225 (US/United States/225.167.107.136.bc.googleusercontent.com)
show less
SQL Injection
🇧🇷
ICS Labs
2026-10-14 15:18:24
(2 days ago)
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-10-14 UTC.
Hacking
🇫🇷
mrcrassi
2026-10-14 14:04:19
(2 days ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST metho ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /dashboard
UA: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇧🇷
Halux
2026-10-14 13:05:01
(2 days ago)
136.107.167.225 Web Application Firewall multiple violations
Hacking
Web App Attack