Anonymous
2026-10-11 16:32:58
(2 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
π§π·
Peregrine
2026-10-10 03:15:32
(3 days ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.180.92.225 172.68.119.164 - - [06/Oct/2026:06:07 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.180.92.225 172.68.119.164 - - [06/Oct/2026:06:07:29 -0300] "GET /.ssh/config HTTP/1.1" 404 18149
show less
Bad Web Bot
π§π·
Peregrine
2026-10-08 03:16:10
(5 days ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.180.92.225 172.68.119.164 - - [06/Oct/2026:06:07 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.180.92.225 172.68.119.164 - - [06/Oct/2026:06:07:29 -0300] "GET /.ssh/config HTTP/1.1" 404 18149
show less
Bad Web Bot
π§π·
maviei
2026-10-07 04:03:51
(6 days ago)
34.180.92.225 - - [07/Oct/2026:01:03:49 -0300] "GET /.git-credentials HTTP/2.0" 403 5459 "-" "Mozill ...
show more
34.180.92.225 - - [07/Oct/2026:01:03:49 -0300] "GET /.git-credentials HTTP/2.0" 403 5459 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 0.000 -
34.180.92.225 - - [07/Oct/2026:01:03:49 -0300] "GET /.gitlab-ci.yml HTTP/2.0" 403 5459 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 0.033 -
...
show less
Bad Web Bot
π§π·
SvrAdmin
2026-10-06 18:06:06
(1 week ago)
[204] (cpanel) Failed cPanel login from 34.180.92.225 (JP/Japan/225.92.180.34.bc.googleusercontent.c ...
show more
[204] (cpanel) Failed cPanel login from 34.180.92.225 (JP/Japan/225.92.180.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-10-06 15:05:59 -0300] info [cpaneld] 34.180.92.225 - - "GET /bsvggbqlsrprshwxlalq HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-06 15:05:59 -0300] info [cpaneld] 34.180.92.225 - - "GET /dist/manifest.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-06 15:05:59 -0300] info [cpaneld] 34.180.92.225 - - "GET /asset-manifest.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-06 15:05:59 -0300] info [cpaneld] 34.180.92.225 - - "GET /wozgviqq8k00atlcru5m HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-06 15:05:59 -0300] info [cpaneld] 34.180.92.225 - - "GET /z9x8c7v6b5-debug-trigger-cpanel.portaldebeltrao.com.br HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
show less
Port Scan
Hacking
Brute-Force
Exploited Host
π§π·
govfacil.app
2026-10-06 16:36:30
(1 week ago)
(cpanel) Failed cPanel login from 34.180.92.225 (JP/Japan/225.92.180.34.bc.googleusercontent.com): 5 ...
show more
(cpanel) Failed cPanel login from 34.180.92.225 (JP/Japan/225.92.180.34.bc.googleusercontent.com): 50 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-10-06 13:36:12 -0300] info [cpaneld] 34.180.92.225 - - "GET /9ewgpk06qzsrk54xpfvs HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-06 13:36:14 -0300] info [cpaneld] 34.180.92.225 - - "GET /wp-json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-06 13:36:14 -0300] info [cpaneld] 34.180.92.225 - - "GET /.ssh/id_rsa HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-06 13:36:14 -0300] info [cpaneld] 34.180.92.225 - - "GET /.npmrc HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-06 13:36:15 -0300] info [cpaneld] 34.180.92.225 - - "POST /graphql HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-06 13:36:19 -0300] info [cpaneld] 34.180.92.225 - - "GET /@fs/app/.env?raw?? HTTP/1.1" FAILED LOGIN cpane [truncated]
show less
Brute-Force
πΊπΈ
hostmach
2026-10-06 16:36:15
(1 week ago)
(cpanel) Failed cPanel login from 34.180.92.225 (JP/Japan/225.92.180.34.bc.googleusercontent.com): 5 ...
show more
(cpanel) Failed cPanel login from 34.180.92.225 (JP/Japan/225.92.180.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-10-06 12:36:12 -0400] info [cpaneld] 34.180.92.225 - - "GET /assets/manifest.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-06 12:36:12 -0400] info [cpaneld] 34.180.92.225 - - "GET /dist/manifest.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-06 12:36:12 -0400] info [cpaneld] 34.180.92.225 - - "GET /webpack-stats.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-06 12:36:12 -0400] info [cpaneld] 34.180.92.225 - - "GET /asset-manifest.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-06 12:36:14 -0400] info [cpaneld] 34.180.92.225 - - "GET /.npmrc HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
show less
Brute-Force
SSH
π§π·
Host One
2026-10-06 13:52:00
(1 week ago)
[Honeypot] Malicious activity detected by honeypot on port 80. IP attempted unauthorized access to d ...
show more
[Honeypot] Malicious activity detected by honeypot on port 80. IP attempted unauthorized access to decoy service. Original message: Web honeypot: 96 malicious requests. Attack types: admin_scan, vulnerability_scan, file_inclusion, generic_scan. Sample: GET / HTTP/2.0. Attempted credentials captured.
show less
Brute-Force
Web App Attack
π©πͺ
niedson
2026-10-06 13:30:02
(1 week ago)
Automated scanning for exposed secrets: repeated requests for multiple distinct credential paths (.e ...
show more
Automated scanning for exposed secrets: repeated requests for multiple distinct credential paths (.env variants, .git metadata, .ssh private keys, .aws/credentials). Unsolicited. Reported automatically.
show less
Web App Attack
Anonymous
2026-10-06 13:22:50
(1 week ago)
34.180.92.225 - - [06/Oct/2026:10:22:49 -0300] "GET /.htpasswd HTTP/2.0" 403 548 "-" "Mozilla/5.0 (M ...
show more
34.180.92.225 - - [06/Oct/2026:10:22:49 -0300] "GET /.htpasswd HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
...
show less
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
π§π·
dominioz
2026-10-06 13:07:56
(1 week ago)
2026-10-06 13:07:51 GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env raw?? - 34.180.92.225 HTTP/2 Mozilla ...
show more
2026-10-06 13:07:51 GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env raw?? - 34.180.92.225 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+PerplexityBot/1.0;++https://perplexity.ai/perplexitybot) - 301 610
...
show less
Bad Web Bot
Web App Attack
πΊπΈ
abuse-opdc
2026-10-06 12:05:47
(1 week ago)
Malicious HTTP requests matching injection/exploit signatures.
Web App Attack
Brute-Force
π§π·
Peregrine
2026-10-06 09:07:40
(1 week ago)
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 34.180.92.225 172.68.119.164 - - [06/Oct/2026:06:07:28 - ...
show more
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 34.180.92.225 172.68.119.164 - - [06/Oct/2026:06:07:28 -0300] "GET /.vite/manifest.json HTTP/1.1" 404 18149
34.180.92.225 172.68.119.164 - - [06/Oct/2026:06:07:28 -0300] "GET /dist/manifest.json HTTP/1.1" 404 18149
34.180.92.225 172.68.119.163 - - [06/Oct/2026:06:07:28 -0300] "GET /dist/.vite/manifest.json HTTP/1.1" 404 18149
34.180.92.225 172.68.119.163 - - [06/Oct/2026:06:07:28 -0300] "GET /build/manifest.json HTTP/1.1" 404 18149
34.180.92.225 172.68.119.163 - - [06/Oct/2026:06:07:28 -0300] "GET /b3sqqemfmkel9ln2t63z HTTP/1.1" 404 18149
show less
Bad Web Bot
Web App Attack
π§π·
Halux
2026-10-06 08:25:23
(1 week ago)
34.180.92.225 Probing protected path or service
Web App Attack
Anonymous
2026-10-06 06:55:02
(1 week ago)
suspicious request in access.log
Web App Attack