Anonymous
2026-10-27 04:31:56
(20 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ณ๐ฑ
Alt255
2026-10-27 04:25:17
(20 hours ago)
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 136 ...
show more
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 136.72.15.184 - - \[22/Oct/2026:17:09:20 +0200\] "GET /.htpasswd HTTP/1.1" 403 7427 "-" "Mozilla/5.0 \(compatible\; YouBot/1.0\; +https://you.com/bot\)"
...
show less
Bad Web Bot
Web App Attack
๐ง๐ท
Peregrine
2026-10-27 03:12:28
(22 hours ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 136.72.15.184 104.22.56.89 - - [25/Oct/2026:23:24:3 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 136.72.15.184 104.22.56.89 - - [25/Oct/2026:23:24:33 -0300] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 18149
show less
Bad Web Bot
๐บ๐ธ
craudiovizai
2026-10-26 12:30:31
(1 day ago)
Automated honeypot detection. blocked ip against a Next.js application. Paths: /.github/workflows/de ...
show more
Automated honeypot detection. blocked ip against a Next.js application. Paths: /.github/workflows/deploy.yml, /userfiles?path=..%2F..%2F..%2F.env, /userfiles/x?path=..%2F..%2F.env. Blocked at the edge.
show less
Bad Web Bot
๐บ๐ธ
Matthew Ping
2026-10-26 06:45:01
(1 day ago)
Excessive connections (DDoS/flood) blocked by CSF CT_LIMIT on d865.
DDoS Attack
Brute-Force
๐ซ๐ท
security.rdmc.fr
2026-10-26 05:19:02
(1 day ago)
Web App Attack
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-26 05:16:52
(1 day ago)
[cb-03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.72.15.184 - - [26/Oct/2026:06:16:41 +0100] "GET /.next/.env HTTP/2.0" 404 343 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
...
show less
Bad Web Bot
Web App Attack
๐ง๐ท
Peregrine
2026-10-26 02:24:38
(1 day ago)
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 136.72.15.184 104.22.56.88 - - [25/Oct/2026:23:24:33 -03 ...
show more
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 136.72.15.184 104.22.56.88 - - [25/Oct/2026:23:24:33 -0300] "GET /build/manifest.json HTTP/1.1" 404 18149
136.72.15.184 104.22.56.88 - - [25/Oct/2026:23:24:33 -0300] "GET /5pwlavry5fdp7v101onl HTTP/1.1" 404 18149
136.72.15.184 104.22.56.88 - - [25/Oct/2026:23:24:33 -0300] "GET /dist/.vite/manifest.json HTTP/1.1" 404 18149
136.72.15.184 104.22.56.88 - - [25/Oct/2026:23:24:33 -0300] "GET /dist/manifest.json HTTP/1.1" 404 18149
136.72.15.184 104.22.56.89 - - [25/Oct/2026:23:24:33 -0300] "GET /.vite/manifest.json HTTP/1.1" 404 18149
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
โจ
2026-10-26 02:24:18
(1 day ago)
Rule : Security
IP in black list
Port Scan
Hacking
Brute-Force
๐ง๐ท
dominioz
2026-10-25 22:38:39
(2 days ago)
[2026-10-25 19:38:37] [UA-ROTATION] 136.72.15.184 - 4 User-Agents distintos (IIS)
[2026-10-25 19:38: ...
show more
[2026-10-25 19:38:37] [UA-ROTATION] 136.72.15.184 - 4 User-Agents distintos (IIS)
[2026-10-25 19:38:37] [UA-ROTATION] 136.72.15.184 - 4 User-Agents distintos (IIS)
[2026-10-25 19:38:38] [UA-ROTATION] 136.72.15.184 - 4 User-Agents distintos (IIS)
[2026-10-25 19:38:38] [UA-ROTATION] 136.72.15.184 - 4 User-Agents distintos (IIS)
[2026-10-25 19:38:38] [UA-ROTATION] 136.72.15.184 - 4 User-Agents distintos (IIS)
...
show less
DDoS Attack
Web Spam
Blog Spam
Port Scan
Brute-Force
Exploited Host
Web App Attack
๐ง๐ท
govfacil.app
2026-10-25 22:10:52
(2 days ago)
(cpanel) Failed cPanel login from 136.72.15.184 (US/United States/184.15.72.136.bc.googleusercontent ...
show more
(cpanel) Failed cPanel login from 136.72.15.184 (US/United States/184.15.72.136.bc.googleusercontent.com): 50 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-10-25 19:10:34 -0300] info [webmaild] 136.72.15.184 - - "GET /sitemap.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-10-25 19:10:36 -0300] info [webmaild] 136.72.15.184 - - "GET /7xdv4lcaai0c3uamgjay HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-10-25 19:10:38 -0300] info [webmaild] 136.72.15.184 - - "GET /.env.production::$DATA?raw HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-10-25 19:10:38 -0300] info [webmaild] 136.72.15.184 - - "GET /.env.development?import&raw HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-10-25 19:10:38 -0300] info [webmaild] 136.72.15.184 - - "GET /.env.production?import&raw HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-10-25 19:10:38 -0300] info [webm [truncated]
show less
Brute-Force
๐ง๐ท
Host One
2026-10-25 18:04:46
(2 days ago)
Web vulnerability scanning: requests to known exploit/probe paths; requests blocked by WAF (ModSecur ...
show more
Web vulnerability scanning: requests to known exploit/probe paths; requests blocked by WAF (ModSecurity) rules. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /graphql, /credentials.json, /serviceAccountKey.json. Automated report.
show less
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-10-25 17:02:42
(2 days ago)
Multiple web server 400 error codes from same source ip
Web App Attack
๐บ๐ธ
agenciahypelab.com.br
2026-10-25 16:17:29
(2 days ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
๐ณ๐ฑ
Alt255
2026-10-25 13:49:46
(2 days ago)
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 136 ...
show more
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 136.72.15.184 - - \[22/Oct/2026:17:09:20 +0200\] "GET /.htpasswd HTTP/1.1" 403 7427 "-" "Mozilla/5.0 \(compatible\; YouBot/1.0\; +https://you.com/bot\)"
...
show less
Bad Web Bot
Web App Attack