๐ง๐ท
Peregrine
2026-10-06 03:11:10
(2 hours ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:47 - ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:47 -0300] "GET /.gitlab-ci.yml HTTP/1.1" 404 414
34.21.217.8 162.158.162.92 - - [28/Sep/2026:23:14:47 -0300] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 414
34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/id_ed25519 HTTP/1.1" 404 414
34.21.217.8 162.158.162.92 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/id_rsa HTTP/1.1" 404 414
34.21.217.8 172.69.165.58 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/config HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-10-05 03:11:10
(1 day ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:47 - ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:47 -0300] "GET /.gitlab-ci.yml HTTP/1.1" 404 414
34.21.217.8 162.158.162.92 - - [28/Sep/2026:23:14:47 -0300] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 414
34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/id_ed25519 HTTP/1.1" 404 414
34.21.217.8 162.158.162.92 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/id_rsa HTTP/1.1" 404 414
34.21.217.8 172.69.165.58 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/config HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-10-03 03:11:20
(3 days ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:47 - ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:47 -0300] "GET /.gitlab-ci.yml HTTP/1.1" 404 414
34.21.217.8 162.158.162.92 - - [28/Sep/2026:23:14:47 -0300] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 414
34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/id_ed25519 HTTP/1.1" 404 414
34.21.217.8 162.158.162.92 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/id_rsa HTTP/1.1" 404 414
34.21.217.8 172.69.165.58 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/config HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-10-02 03:11:04
(4 days ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:47 - ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:47 -0300] "GET /.gitlab-ci.yml HTTP/1.1" 404 414
34.21.217.8 162.158.162.92 - - [28/Sep/2026:23:14:47 -0300] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 414
34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/id_ed25519 HTTP/1.1" 404 414
34.21.217.8 162.158.162.92 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/id_rsa HTTP/1.1" 404 414
34.21.217.8 172.69.165.58 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/config HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-10-01 03:10:49
(5 days ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:47 - ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:47 -0300] "GET /.gitlab-ci.yml HTTP/1.1" 404 414
34.21.217.8 162.158.162.92 - - [28/Sep/2026:23:14:47 -0300] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 414
34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/id_ed25519 HTTP/1.1" 404 414
34.21.217.8 162.158.162.92 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/id_rsa HTTP/1.1" 404 414
34.21.217.8 172.69.165.58 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/config HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-09-30 03:10:43
(6 days ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:47 - ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:47 -0300] "GET /.gitlab-ci.yml HTTP/1.1" 404 414
34.21.217.8 162.158.162.92 - - [28/Sep/2026:23:14:47 -0300] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 414
34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/id_ed25519 HTTP/1.1" 404 414
34.21.217.8 162.158.162.92 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/id_rsa HTTP/1.1" 404 414
34.21.217.8 172.69.165.58 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/config HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-09-29 02:14:52
(1 week ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:47 - ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:47 -0300] "GET /.gitlab-ci.yml HTTP/1.1" 404 414
34.21.217.8 162.158.162.92 - - [28/Sep/2026:23:14:47 -0300] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 414
34.21.217.8 162.158.162.93 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/id_ed25519 HTTP/1.1" 404 414
34.21.217.8 162.158.162.92 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/id_rsa HTTP/1.1" 404 414
34.21.217.8 172.69.165.58 - - [28/Sep/2026:23:14:48 -0300] "GET /.ssh/config HTTP/1.1" 404 414
show less
Bad Web Bot
๐ฌ๐ง
consul.to
2026-09-29 01:38:01
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
๐ง๐ท
Halux
2026-09-28 23:51:07
(1 week ago)
34.21.217.8 Probing protected path or service
Web App Attack
๐ง๐ท
dominioz
2026-09-28 11:02:38
(1 week ago)
[2026-09-28 08:01:06] [UA-ROTATION] 34.21.217.8 - 4 User-Agents distintos (IIS)
[2026-09-28 08:01:12 ...
show more
[2026-09-28 08:01:06] [UA-ROTATION] 34.21.217.8 - 4 User-Agents distintos (IIS)
[2026-09-28 08:01:12] [UA-ROTATION] 34.21.217.8 - 4 User-Agents distintos (IIS)
[2026-09-28 08:01:19] [UA-ROTATION] 34.21.217.8 - 4 User-Agents distintos (IIS)
[2026-09-28 08:01:27] [UA-ROTATION] 34.21.217.8 - 4 User-Agents distintos (IIS)
[2026-09-28 08:01:39] [UA-ROTATION] 34.21.217.8 - 4 User-Agents distintos (IIS)
[2026-09-28 08:01:50] [UA-ROTATION] 34.21.217.8 - 4 User-Agents distintos (IIS)
[2026-09-28 08:01:59] [UA-ROTATION] 34.21.217.8 - 4 User-Agents distintos (IIS)
[2026-09-28 08:02:11] [UA-ROTATION] 34.21.217.8 - 4 User-Agents distintos (IIS)
[2026-09-28 08:02:26] [UA-ROTATION] 34.21.217.8 - 4 User-Agents distintos (IIS)
[2026-09-28 08:02:36] [UA-ROTATION] 34.21.217.8 - 4 User-Agents distintos (IIS)
...
show less
DDoS Attack
Web Spam
Blog Spam
Port Scan
Brute-Force
Exploited Host
Web App Attack
๐ฒ๐พ
Rizzy
2026-09-28 01:02:21
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฌ๐ง
consul.to
2026-09-27 20:53:28
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
๐ง๐ท
dermatovirtual
2026-09-27 01:26:03
(1 week ago)
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ...
show more
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 76 unauthorized requests recorded between 2026-09-26 01:22:23 UTC and 2026-09-26 01:22:36 UTC (rate: ~76 req/min). Edge perimeter firewall drop active.
Log sample:
[2026-09-26 01:22:34 UTC] IP: 34.21.217.8 - W3C IIS (Port 443): GET /public/.env -> HTTP 404 [CLIENT: 34.21.217.8]
[2026-09-26 01:22:34 UTC] IP: 34.21.217.8 - W3C IIS (Port 443): GET /core/.env -> HTTP 404 [CLIENT: 34.21.217.8]
[2026-09-26 01:22:35 UTC] IP: 34.21.217.8 - W3C IIS (Port 443): GET /secrets.env -> HTTP 404 [CLIENT: 34.21.217.8]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
agenciahypelab.com.br
2026-09-26 22:22:32
(1 week ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_PERMBLOCK_COUNT
Brute-Force
SSH
๐ฌ๐ง
consul.to
2026-09-26 20:42:29
(1 week ago)
Web attack/malicious scanning detected
Web App Attack