🇧🇷
Peregrine
2026-11-03 03:10:34
UTC ·
(3 days ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:56 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:57 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 1 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:56 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:57 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:57 -0300] "GET /wp-login.php HTTP/1.1" 404 414
show less
Bad Web Bot
🇧🇷
Peregrine
2026-11-02 03:10:19
UTC ·
(4 days ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:56 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:57 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 1 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:56 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:57 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:57 -0300] "GET /wp-login.php HTTP/1.1" 404 414
show less
Bad Web Bot
Anonymous
2026-11-01 22:30:15
UTC ·
(4 days ago)
Fail2Ban: repeated malicious HTTP requests (path probing / exploit attempts) against a public web server.
Web App Attack
Bad Web Bot
🇧🇷
Peregrine
2026-11-01 03:09:39
UTC ·
(5 days ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:56 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:57 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 1 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:56 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:57 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:57 -0300] "GET /wp-login.php HTTP/1.1" 404 414
show less
Bad Web Bot
🇧🇷
Host One
2026-10-31 07:30:24
UTC ·
(6 days ago)
Web vulnerability scanning: requests to known exploit/probe paths; requests blocked by WAF (ModSecurity) rules. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /graphql, /key.json, /servic ...
show more
Web vulnerability scanning: requests to known exploit/probe paths; requests blocked by WAF (ModSecurity) rules. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /graphql, /key.json, /service_account.json, /serviceAccountKey.json. Automated report.
show less
Hacking
Bad Web Bot
Web App Attack
🇧🇷
SOC-BR
2026-10-31 07:24:02
UTC ·
(6 days ago)
Attack detected by Fortinet - applications3: Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass - 2026-10-30 05:41:45 - Source Port 36516
Port Scan
Hacking
🇧🇷
radardatelecom
2026-10-30 16:52:03
UTC ·
(6 days ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇨🇦
cubie
2026-10-30 16:11:23
UTC ·
(6 days ago)
Port Scan: Admin Enumeration - Reported by CubieCloud Firewall [CFW_H623-009]
Port Scan
🇨🇦
cubie
2026-10-30 14:51:32
UTC ·
(6 days ago)
CubieCloud automated detection (CubieAurora): sensitive-file probing (x32); path traversal attempts (x12); CMS/admin scanner paths (x1). Observed over ~7h against our web platform. Confidence score 100/100.
Hacking
Web App Attack
🇺🇸
hostmach
2026-10-30 13:41:00
UTC ·
(1 week ago)
(cpanel) Failed cPanel login from 35.241.164.62 (BE/Belgium/62.164.241.35.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-10-30 09:40:54 -0400] info [webmaild] 35.241.164.62 - - "GET /si ...
show more
(cpanel) Failed cPanel login from 35.241.164.62 (BE/Belgium/62.164.241.35.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-10-30 09:40:54 -0400] info [webmaild] 35.241.164.62 - - "GET /sitemap.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-10-30 09:40:57 -0400] info [webmaild] 35.241.164.62 - - "GET /ngsw.json HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-10-30 09:40:58 -0400] info [webmaild] 35.241.164.62 - - "POST /graphql HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-10-30 09:40:58 -0400] info [webmaild] 35.241.164.62 - - "GET /error403.php HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-10-30 09:40:58 -0400] info [webmaild] 35.241.164.62 - - "GET /error403.php HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
show less
Brute-Force
SSH
🇧🇷
dominioz
2026-10-30 12:34:59
UTC ·
(1 week ago)
35.241.164.62 - - [30/Oct/2026:08:30:09 -0300] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 173 "-" "-" "-"
35.241.164.62 - - [30/Oct/2026:09:34:54 -0300] "GET /robots.txt HTTP/1.1" 404 6401 "-" "Mozilla/5.0 (compatible; C ...
show more
35.241.164.62 - - [30/Oct/2026:08:30:09 -0300] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 173 "-" "-" "-"
35.241.164.62 - - [30/Oct/2026:09:34:54 -0300] "GET /robots.txt HTTP/1.1" 404 6401 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" "-"
35.241.164.62 - - [30/Oct/2026:09:34:54 -0300] "GET /robots.txt HTTP/1.1" 404 6401 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" "-"
35.241.164.62 - - [30/Oct/2026:09:34:57 -0300] "GET /sitemap_index.xml HTTP/1.1" 404 6401 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" "-"
35.241.164.62 - - [30/Oct/2026:09:34:57 -0300] "GET /sitemap_index.xml HTTP/1.1" 404 6401 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" "-"
35.241.164.62 - - [30/Oct/2026:09:34:58 -0300] "GET /webhooks HTTP/1.1" 404 6401 "-" "Mozilla/5.
...
show less
Web App Attack
🇧🇷
dominioz
2026-10-30 11:30:00
UTC ·
(1 week ago)
35.241.164.62 - - [30/Oct/2026:08:29:54 -0300] "GET /robots.txt HTTP/1.1" 404 6401 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "-"
35.241.164.62 - - [30/Oct/2026:08:29:56 -0300] "GET /sitemap.xml HTTP/1.1" 404 6401 "-" "Mozilla/5.0 ...
show more
35.241.164.62 - - [30/Oct/2026:08:29:54 -0300] "GET /robots.txt HTTP/1.1" 404 6401 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "-"
35.241.164.62 - - [30/Oct/2026:08:29:56 -0300] "GET /sitemap.xml HTTP/1.1" 404 6401 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" "-"
35.241.164.62 - - [30/Oct/2026:08:29:58 -0300] "GET /swagger HTTP/1.1" 404 6401 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" "-"
35.241.164.62 - - [30/Oct/2026:08:29:58 -0300] "GET /secrets HTTP/1.1" 404 6401 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" "-"
35.241.164.62 - - [30/Oct/2026:08:29:58 -0300] "GET /login HTTP/1.1" 404 6401 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" "-"
35.241.164.62 - - [30/Oct/2026:08:29:58 -0300] "GET /integrations HTTP/1.1" 404 64
...
show less
Web App Attack
🇧🇷
Peregrine
2026-10-30 10:05:00
UTC ·
(1 week ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:56 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:57 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 1 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:56 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:57 -0300] "GET /wp-admin/ HTTP/1.1" 404 414
35.241.164.62 172.71.118.166 - - [30/Oct/2026:07:04:57 -0300] "GET /wp-login.php HTTP/1.1" 404 414
show less
Bad Web Bot
🇧🇷
SvrAdmin
2026-10-30 07:49:38
UTC ·
(1 week ago)
[204] (cpanel) Failed cPanel login from 35.241.164.62 (BE/Belgium/62.164.241.35.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-10-30 04:49:18 -0300] info [cpaneld] 35.241.164.62 - - "GE ...
show more
[204] (cpanel) Failed cPanel login from 35.241.164.62 (BE/Belgium/62.164.241.35.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-10-30 04:49:18 -0300] info [cpaneld] 35.241.164.62 - - "GET /sitemap.xml HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-30 04:49:24 -0300] info [cpaneld] 35.241.164.62 - - "GET /ngsw.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-30 04:49:24 -0300] info [cpaneld] 35.241.164.62 - - "GET /kz0sbtvn1qixzovna2ud HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-30 04:49:30 -0300] info [cpaneld] 35.241.164.62 - - "GET /.turbo/config.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-30 04:49:34 -0300] info [cpaneld] 35.241.164.62 - - "GET /auth HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
show less
Port Scan
Hacking
Brute-Force
Exploited Host
🇺🇸
agenciahypelab.com.br
2026-10-30 07:37:22
UTC ·
(1 week ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH