๐ง๐ท
Peregrine
2026-10-05 03:12:47
(1 day ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 136.92.38.63 172.71.164.141 - - [02/Oct/2026:10:27: ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 136.92.38.63 172.71.164.141 - - [02/Oct/2026:10:27:58 -0300] "GET /cache/original/%2e%2e/.env HTTP/1.1" 404 18149
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-10-04 03:12:29
(2 days ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 136.92.38.63 172.71.164.141 - - [02/Oct/2026:10:27: ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 136.92.38.63 172.71.164.141 - - [02/Oct/2026:10:27:58 -0300] "GET /cache/original/%2e%2e/.env HTTP/1.1" 404 18149
show less
Bad Web Bot
Anonymous
2026-10-03 04:31:27
(3 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ฉ๐ช
macrob
2026-10-02 15:17:57
(4 days ago)
2026/10/02 15:17:56 [error] 2231819#2231819: *9030147 access forbidden by rule, client: 136.92.38.63 ...
show more
2026/10/02 15:17:56 [error] 2231819#2231819: *9030147 access forbidden by rule, client: 136.92.38.63, server: binixo.com.br, request: "GET /.ssh/config HTTP/2.0", host: "binixo.com.br"
2026/10/02 15:17:56 [error] 2231819#2231819: *9030147 access forbidden by rule, client: 136.92.38.63, server: binixo.com.br, request: "GET /.ssh/id_ed25519 HTTP/2.0", host: "binixo.com.br"
2026/10/02 15:17:56 [error] 2231819#2231819: *9030147 access forbidden by rule, client: 136.92.38.63, server: binixo.com.br, request: "GET /.zshrc HTTP/2.0", host: "binixo.com.br"
...
show less
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-02 14:10:03
(4 days ago)
crowdsecurity/http-cve-2021-41773
Brute-Force
Web App Attack
๐ง๐ท
Peregrine
2026-10-02 13:28:04
(4 days ago)
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 136.92.38.63 172.71.164.141 - - [02/Oct/2026:10:27:57 -0 ...
show more
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 136.92.38.63 172.71.164.141 - - [02/Oct/2026:10:27:57 -0300] "GET /uudero2ob8e3sncv0enz HTTP/1.1" 404 18149
136.92.38.63 172.71.164.140 - - [02/Oct/2026:10:27:57 -0300] "POST /lib/terminal-xhr.php HTTP/1.1" 404 18149
136.92.38.63 172.71.164.141 - - [02/Oct/2026:10:27:57 -0300] "GET /dist/manifest.json HTTP/1.1" 404 18149
136.92.38.63 172.71.164.140 - - [02/Oct/2026:10:27:57 -0300] "GET /webpack-stats.json HTTP/1.1" 404 18149
136.92.38.63 172.71.164.140 - - [02/Oct/2026:10:27:57 -0300] "GET /manifest.json HTTP/1.1" 404 18149
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
hostmach
2026-10-02 12:58:51
(4 days ago)
(cpanel) Failed cPanel login from 136.92.38.63 (DE/Germany/63.38.92.136.bc.googleusercontent.com): 5 ...
show more
(cpanel) Failed cPanel login from 136.92.38.63 (DE/Germany/63.38.92.136.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-10-02 08:58:45 -0400] info [cpaneld] 136.92.38.63 - - "GET /model/info HTTP/1.1" FAILED LOGIN cpaneld: Authorization: type not known
[2026-10-02 08:58:45 -0400] info [cpaneld] 136.92.38.63 - - "GET /assets/manifest.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-02 08:58:46 -0400] info [cpaneld] 136.92.38.63 - - "GET /model/info HTTP/1.1" FAILED LOGIN cpaneld: Authorization: type not known
[2026-10-02 08:58:48 -0400] info [cpaneld] 136.92.38.63 - - "POST /v1/graphql HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-02 08:58:49 -0400] info [cpaneld] 136.92.38.63 - - "POST /v1/graphql HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
show less
Brute-Force
SSH
๐ฉ๐ช
macrob
2026-10-02 11:47:12
(4 days ago)
2026/10/02 11:47:09 [error] 2231818#2231818: *8421363 access forbidden by rule, client: 136.92.38.63 ...
show more
2026/10/02 11:47:09 [error] 2231818#2231818: *8421363 access forbidden by rule, client: 136.92.38.63, server: binixo.com.br, request: "GET /.ssh/config HTTP/2.0", host: "binixo.com.br"
2026/10/02 11:47:09 [error] 2231818#2231818: *8421363 access forbidden by rule, client: 136.92.38.63, server: binixo.com.br, request: "GET /.ssh/id_ed25519 HTTP/2.0", host: "binixo.com.br"
2026/10/02 11:47:11 [error] 2231819#2231819: *8411915 access forbidden by rule, client: 136.92.38.63, server: binixo.com.br, request: "GET /@fs/src/.env?raw?? HTTP/2.0", host: "binixo.com.br"
...
show less
Web App Attack
๐ง๐ท
Halux
2026-10-02 10:19:04
(4 days ago)
136.92.38.63 Web Application Firewall multiple violations
Hacking
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-02 10:00:07
(4 days ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
๐ง๐ท
Halux
2026-10-02 09:26:44
(4 days ago)
136.92.38.63 Probing protected path or service
Web App Attack
๐ง๐ท
Host One
2026-10-02 09:15:39
(4 days ago)
Web vulnerability scanning: requests to known exploit/probe paths; requests blocked by WAF (ModSecur ...
show more
Web vulnerability scanning: requests to known exploit/probe paths; requests blocked by WAF (ModSecurity) rules. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /firebase-credentials.json, /gcp-key.json, /graphql, /keys/service-account.json. Automated report.
show less
Hacking
Bad Web Bot
Web App Attack
๐จ๐ฆ
cubie
2026-10-02 09:11:21
(4 days ago)
Port Scan: Admin Enumeration - Reported by CubieCloud Firewall [CFW_H426-004]
Port Scan
๐ง๐ท
Sysadmin-CLC
2026-10-02 09:02:29
(4 days ago)
Probing and trying to access sensitive files caught in f2b nginx-forbidden filter
Web App Attack
Port Scan
๐บ๐ธ
abuse-opdc
2026-10-02 07:56:08
(4 days ago)
Malicious HTTP requests matching injection/exploit signatures.
Web App Attack
Brute-Force