Boletim XLabs / SEC-OPS | Edição contínua | 2026.04.24
Honeypot público XLabs Pro

Telemetria · atualização contínua

Tráfego e tentativas de exploração por borda

Comparamos o que cada borda deixa passar até a origem. Cada cenário (Sem WAF, Cloudflare Free, XLabs Pro) é contabilizado em paralelo, e qualquer payload classificado como ataque também aparece no log abaixo.

Requisições (24h) 333269
Ataques (24h) 241794
% ataques (24h) 0,73
Total registrado 241794

Requisições vs ataques por borda (24h)

Atualiza a cada 4s
Modo Requisições Ataques % ataques Distribuição
Cloudflare Free 333041 241692 0,7
SEM WAF 64 41 0,6
XLabs Pro 164 61 0,4

Por categoria (24h)

  • xss 79936
  • sqli 70552
  • recon 28430
  • ssrf 14451
  • rce 13260
  • lfi 12522
  • open_redirect 10784
  • ssti 5675
  • cve 5031
  • exposed_file 1146

Por severidade (24h)

  • high 183237
  • low 28431
  • critical 18291
  • medium 11835

Top IPs com mais ataques (24h)

geolocalização via XLabs GeoIP
IP Origem Eventos
188.241.x.x BR 241493 filtrar
201.20.x.x BR 84 filtrar
52.15.x.x US 34 filtrar
216.73.x.x US 26 filtrar
77.83.x.x UA 16 filtrar
104.164.x.x — 13 filtrar
162.159.x.x BR 13 filtrar
216.73.x.x US 12 filtrar
45.148.x.x — 9 filtrar
162.159.x.x BR 8 filtrar

Países com mais IPs catalogados

cache GeoIP / XLabs
País IPs
United States 17
Brazil 11
Singapore 5
Netherlands 4
Germany 3
Hong Kong 2
South Korea 2
Argentina 1
Indonesia 1
Spain 1

Stream de eventos

Atualiza a cada 4s · página 1 de 4836
Hora Sev. Categoria Método Caminho IP País Rota
01:54:01 high Cross-Site Scripting GET /preview/ 188.241.x.x BR cf-free
01:54:01 high Cross-Site Scripting GET /ir/ 188.241.x.x BR cf-free
01:54:01 high Cross-Site Scripting GET /preview 188.241.x.x BR cf-free
01:54:01 high Cross-Site Scripting GET /passwd 188.241.x.x BR cf-free
01:54:01 high Cross-Site Scripting GET /visualizar/ 188.241.x.x BR cf-free
01:54:01 high Cross-Site Scripting GET /produtos/ 188.241.x.x BR cf-free
01:54:00 low Reconhecimento GET /visualizar 188.241.x.x BR cf-free
01:54:00 high Local File Inclusion / Path Traversal GET /ir 188.241.x.x BR cf-free
01:54:00 high Local File Inclusion / Path Traversal GET /tema/advisory 188.241.x.x BR cf-free
01:54:00 high Server-Side Template Injection GET /preview 188.241.x.x BR cf-free
01:54:00 high Cross-Site Scripting GET /proxy/ 188.241.x.x BR cf-free
01:54:00 high Cross-Site Scripting POST /login/ 188.241.x.x BR cf-free
01:54:00 high Cross-Site Scripting POST /ferramentas/ping/ 188.241.x.x BR cf-free
01:54:00 high Cross-Site Scripting GET /preview/ 188.241.x.x BR cf-free
01:54:00 high Cross-Site Scripting GET /ir/ 188.241.x.x BR cf-free
01:53:59 high Cross-Site Scripting GET /preview/ 188.241.x.x BR cf-free
01:53:59 high Cross-Site Scripting GET /passwd 188.241.x.x BR cf-free
01:53:59 high Cross-Site Scripting GET /produtos/ 188.241.x.x BR cf-free
01:53:59 high Cross-Site Scripting GET /visualizar/ 188.241.x.x BR cf-free
01:53:59 critical Remote Command Execution GET /visualizar/ 188.241.x.x BR cf-free
01:53:59 high Local File Inclusion / Path Traversal GET /ir/ 188.241.x.x BR cf-free
01:53:59 high Server-Side Template Injection GET /preview/ 188.241.x.x BR cf-free
01:53:47 high Cross-Site Scripting GET /preview 188.241.x.x BR cf-free
01:53:47 high Cross-Site Scripting POST /login/ 188.241.x.x BR cf-free
01:53:47 high Cross-Site Scripting GET /proxy/ 188.241.x.x BR cf-free
01:53:47 high Cross-Site Scripting POST /ferramentas/ping/ 188.241.x.x BR cf-free
01:53:47 high Cross-Site Scripting GET /preview/ 188.241.x.x BR cf-free
01:53:47 high Cross-Site Scripting GET /ir/ 188.241.x.x BR cf-free
01:53:47 critical Remote Command Execution GET /passwd 188.241.x.x BR cf-free
01:53:46 high Cross-Site Scripting GET /visualizar/ 188.241.x.x BR cf-free
01:53:46 high Cross-Site Scripting GET /produtos/ 188.241.x.x BR cf-free
01:53:46 critical Remote Command Execution GET /visualizar 188.241.x.x BR cf-free
01:53:46 high Local File Inclusion / Path Traversal GET /ir 188.241.x.x BR cf-free
01:53:46 high Server-Side Template Injection GET /preview 188.241.x.x BR cf-free
01:53:45 high Cross-Site Scripting GET /preview 188.241.x.x BR cf-free
01:53:45 high Cross-Site Scripting POST /login/ 188.241.x.x BR cf-free
01:53:45 high Cross-Site Scripting POST /ferramentas/ping/ 188.241.x.x BR cf-free
01:53:45 high Cross-Site Scripting GET /proxy/ 188.241.x.x BR cf-free
01:53:44 high Cross-Site Scripting GET /ir/ 188.241.x.x BR cf-free
01:53:44 high Cross-Site Scripting GET /preview/ 188.241.x.x BR cf-free
01:53:44 high Cross-Site Scripting GET /produtos/ 188.241.x.x BR cf-free
01:53:44 high Cross-Site Scripting GET /passwd 188.241.x.x BR cf-free
01:53:44 high Cross-Site Scripting GET /visualizar/ 188.241.x.x BR cf-free
01:53:44 low Reconhecimento GET /visualizar/ 188.241.x.x BR cf-free
01:53:44 high Local File Inclusion / Path Traversal GET /tema/dossier/ 188.241.x.x BR cf-free
01:53:43 high Local File Inclusion / Path Traversal GET /ir/ 188.241.x.x BR cf-free
01:53:32 high Cross-Site Scripting GET /preview/ 188.241.x.x BR cf-free
01:53:32 high Cross-Site Scripting POST /login/ 188.241.x.x BR cf-free
01:53:32 high Cross-Site Scripting GET /proxy/ 188.241.x.x BR cf-free
01:53:32 high Cross-Site Scripting POST /ferramentas/ping/ 188.241.x.x BR cf-free