🇧🇷
Caue Henrique
2026-10-02 13:00:37
UTC ·
(1 month ago)
Multiple common web attacks from same source ip.
Web Spam
Hacking
Web App Attack
🇧🇷
Host One
2026-10-01 15:05:15
UTC ·
(1 month ago)
Attack blocked by firewall: hosting control panel login brute-force. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 2083, 2087 (cPanel/WHM). Automated report.
Brute-Force
Web App Attack
🇧🇷
Peregrine
2026-10-01 03:12:28
UTC ·
(1 month ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/../.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.245.139 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/../.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.245.139 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.244 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.245.139 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.244 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 404 414
show less
Bad Web Bot
🇧🇷
Caue Henrique
2026-09-30 15:07:00
UTC ·
(1 month ago)
Web App Attack
Web Spam
🇧🇷
Host One
2026-09-30 15:05:05
UTC ·
(1 month ago)
Attack blocked by firewall: hosting control panel login brute-force. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 2083, 2087 (cPanel/WHM). Automated report.
Brute-Force
Web App Attack
🇧🇷
Peregrine
2026-09-30 03:10:46
UTC ·
(1 month ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/../.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.245.139 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/../.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.245.139 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.244 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.245.139 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.244 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 404 414
show less
Bad Web Bot
🇧🇷
Host One
2026-09-29 14:17:04
UTC ·
(1 month ago)
Attack blocked by firewall: hosting control panel login brute-force. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 2083, 2087 (cPanel/WHM). Automated report.
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-09-29 08:49:57
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇧🇷
Halux
2026-09-29 07:57:02
UTC ·
(1 month ago)
8.231.218.211 Web Application Firewall multiple violations
Hacking
Web App Attack
🇺🇸
agenciahypelab.com.br
2026-09-29 07:00:29
UTC ·
(1 month ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_PERMBLOCK_COUNT
Brute-Force
SSH
🇺🇸
paulo.apoloni
2026-09-29 04:20:54
UTC ·
(1 month ago)
8.231.218.211 - - [29/Sep/2026:01:20:53 -0300] "GET /rclone.conf HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
8.231.218.211 - - [29/Sep/2026:01:20:53 -0300] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compati ...
show more
8.231.218.211 - - [29/Sep/2026:01:20:53 -0300] "GET /rclone.conf HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
8.231.218.211 - - [29/Sep/2026:01:20:53 -0300] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
...
show less
Bad Web Bot
Web App Attack
🇧🇷
Peregrine
2026-09-29 03:10:34
UTC ·
(1 month ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/../.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.245.139 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/../.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.245.139 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.244 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.245.139 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.244 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 404 414
show less
Bad Web Bot
🇧🇷
Host One
2026-09-28 14:15:55
UTC ·
(1 month ago)
Attack blocked by firewall: hosting control panel login brute-force. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 2083, 2087 (cPanel/WHM). Automated report.
Brute-Force
Web App Attack
Anonymous
2026-09-27 22:39:43
UTC ·
(1 month ago)
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
Web App Attack
Bad Web Bot
🇧🇷
Peregrine
2026-09-27 16:20:05
UTC ·
(1 month ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/../.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.245.139 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/../.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.245.139 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.244 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.245.139 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.244 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 404 414
8.231.218.211 108.162.246.243 - - [27/Sep/2026:13:20:00 -0300] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 404 414
show less
Bad Web Bot