๐ง๐ท
Peregrine
2026-06-10 03:12:43
(2 months ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:11 -0300] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:12 -0300] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-06-09 03:12:24
(2 months ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:11 -0300] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:12 -0300] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-06-07 03:10:59
(2 months ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:11 -0300] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:12 -0300] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-06-05 03:12:45
(2 months ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:11 -0300] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:12 -0300] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
show less
Bad Web Bot
Anonymous
2026-06-03 13:28:21
(2 months ago)
IP banned by Fail2Ban
Brute-Force
SSH
๐ง๐ท
Peregrine
2026-06-03 03:16:49
(2 months ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:11 -0300] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:12 -0300] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-06-01 03:12:50
(2 months ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:11 -0300] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:12 -0300] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-05-30 03:15:06
(2 months ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:11 -0300] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:12 -0300] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-05-29 03:10:13
(2 months ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:11 -0300] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:12 -0300] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-05-27 03:11:15
(2 months ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:11 -0300] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:12 -0300] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-05-26 03:10:10
(3 months ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:10 -0300] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:11 -0300] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
- 198.44.238.17 - - [22/May/2026:16:52:12 -0300] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414
show less
Bad Web Bot
๐ณ๐ฑ
0xffffffff
2026-05-25 01:29:53
(3 months ago)
[2026-05-25 04:29:45.273879] [core:error] [pid 820424:tid 130141971789504] [client 198.44.238.17:584 ...
show more
[2026-05-25 04:29:45.273879] [core:error] [pid 820424:tid 130141971789504] [client 198.44.238.17:58486] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) , URI:'/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh'
[2026-05-25 04:29:47.410105] [core:error] [pid 820423:tid 130141711746752] [client 198.44.238.17:60498] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) , URI:'/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh'
[2026-05-25 04:29:49.398718] [authz_core:error] [pid 820424:tid 130141929825984] [client 198.44.238.17:33970] AH01630: client denied by server configuration: /var/www/*/hello.world , error_notes:wrong-host , URI:'/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input'
[2026-05-25 04:29:50.878052] [authz_core:error] [pid 820424:tid 130141921433280
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
gamabe
2026-05-24 22:54:12
(3 months ago)
Detected crowdsecurity/CVE-2017-9841 attack pattern. Reported by CrowdSec IDS.
Web App Attack
๐ณ๐ฑ
Alboweb B.V.
2026-05-24 21:11:10
(3 months ago)
SSH abuse or brute-force attack detected by Fail2Ban in ssh jail
Brute-Force
SSH
๐ฉ๐ฐ
Carina L. (DKCERT)
2026-05-24 19:48:00
(3 months ago)
Port Scan
Brute-Force
SSH