🇺🇸
136.70.43.193
16 hours ago
radiojfsliberdade.com.br 136.70.43.193 - - [26/Oct/2026:03:16:20 -0300] "GET /admin/settings HTTP/2. ...
show more
radiojfsliberdade.com.br 136.70.43.193 - - [26/Oct/2026:03:16:20 -0300] "GET /admin/settings HTTP/2.0" 403 5754 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇩🇪
167.94.146.62
17 hours ago
CrowdSec local detection on srv01: http-bad-user-agent. Blocked. AS398705 (US), 2 events.
Bad Web Bot
Web App Attack
🇦🇺
192.9.176.139
20 hours ago
CrowdSec local detection on srv1251771: http-cve-probing. Blocked. AS31898 (AU), 1 events.
Hacking
Web App Attack
🇫🇷
185.177.72.75
21 hours ago
prolcasulo.com.br 185.177.72.75 - - [25/Oct/2026:22:09:51 -0300] "GET /?pp=phpinfo HTTP/1.1" 301 162 ...
show more
prolcasulo.com.br 185.177.72.75 - - [25/Oct/2026:22:09:51 -0300] "GET /?pp=phpinfo HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
prolcasulo.com.br 185.177.72.75 - - [25/Oct/2026:22:09:52 -0300] "GET /__phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 14; SM-S928B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
...
show less
Bad Web Bot
🇺🇸
34.174.240.5
21 hours ago
34.174.240.5 - - [25/Oct/2026:22:09:03 -0300] "GET /phpinfo.php HTTP/2.0" 404 179 "-" "Mozilla/5.0 ( ...
show more
34.174.240.5 - - [25/Oct/2026:22:09:03 -0300] "GET /phpinfo.php HTTP/2.0" 404 179 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.060 0.021
34.174.240.5 - - [25/Oct/2026:22:09:03 -0300] "GET /info.php HTTP/2.0" 404 179 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.005 0.003
...
show less
Web App Attack
🇳🇱
45.148.10.95
22 hours ago
CrowdSec local detection on srv01: http-probing. Blocked. AS48090 (NL), 11 events.
Bad Web Bot
Web App Attack
🇺🇸
136.64.164.70
23 hours ago
136.64.164.70 - - [25/Oct/2026:19:33:38 -0300] "GET /admin HTTP/2.0" 503 592 "-" "Mozilla/5.0 (Windo ...
show more
136.64.164.70 - - [25/Oct/2026:19:33:38 -0300] "GET /admin HTTP/2.0" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 0.000 -
136.64.164.70 - - [25/Oct/2026:19:33:43 -0300] "GET /.svn/entries HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 0.000 -
...
show less
Web App Attack
🇫🇷
143.244.57.90
25 Oct 2026
143.244.57.90 - - [25/Oct/2026:18:44:01 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 403 5459 ...
show more
143.244.57.90 - - [25/Oct/2026:18:44:01 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 0.000 -
143.244.57.90 - - [25/Oct/2026:18:44:01 -0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 0.000 -
...
show less
Web App Attack
🇳🇱
46.151.178.15
25 Oct 2026
177.19.138.245 46.151.178.15 - - [25/Oct/2026:18:09:30 -0300] "GET /.env.local HTTP/1.1" 444 0 "-" " ...
show more
177.19.138.245 46.151.178.15 - - [25/Oct/2026:18:09:30 -0300] "GET /.env.local HTTP/1.1" 444 0 "-" "Mozilla/5.0" 0.000
177.19.138.245 46.151.178.15 - - [25/Oct/2026:18:09:30 -0300] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0" 0.000
...
show less
Web App Attack
🇩🇪
167.94.146.51
25 Oct 2026
CrowdSec local detection on srv01: http-bad-user-agent. Blocked. AS398705 (US), 2 events.
Bad Web Bot
Web App Attack
🇸🇬
152.42.231.77
25 Oct 2026
152.42.231.77 - - [25/Oct/2026:16:27:49 -0300] "GET //images/images/cache.php HTTP/2.0" 404 179 "www ...
show more
152.42.231.77 - - [25/Oct/2026:16:27:49 -0300] "GET //images/images/cache.php HTTP/2.0" 404 179 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 0.065 0.023
152.42.231.77 - - [25/Oct/2026:16:28:15 -0300] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/2.0" 404 179 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 0.042 0.003
...
show less
Web App Attack
🇮🇩
43.157.211.165
25 Oct 2026
CrowdSec local detection on srv1349699: http-cve-2021-41773. Blocked. AS132203 (ID), 1 events.
Hacking
Web App Attack
🇵🇱
45.138.12.103
25 Oct 2026
CrowdSec local detection on srv01: http-sensitive-files. Blocked. AS0 (LT), 8 events.
Bad Web Bot
Web App Attack
🇸🇬
129.212.233.218
25 Oct 2026
129.212.233.218 - - [25/Oct/2026:10:47:58 -0300] "GET //images/images/cache.php HTTP/2.0" 404 179 "w ...
show more
129.212.233.218 - - [25/Oct/2026:10:47:58 -0300] "GET //images/images/cache.php HTTP/2.0" 404 179 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 0.060 0.022
129.212.233.218 - - [25/Oct/2026:10:48:12 -0300] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/2.0" 404 179 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 0.073 0.021
...
show less
Web App Attack
🇺🇸
38.146.25.142
25 Oct 2026
CrowdSec local detection on srv1349699: http-cve-2021-42013. Blocked. AS174 (US), 1 events.
Hacking
Web App Attack
🇩🇪
172.252.147.100
25 Oct 2026
www.radiojfsliberdade.com.br 172.252.147.100 - - [25/Oct/2026:09:39:08 -0300] "GET /wp-content/uploa ...
show more
www.radiojfsliberdade.com.br 172.252.147.100 - - [25/Oct/2026:09:39:08 -0300] "GET /wp-content/uploads/2024/05/012.jpg HTTP/2.0" 444 0 "https://www.radiojfsliberdade.com.br/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇧🇪
35.241.204.214
25 Oct 2026
35.241.204.214 - - [25/Oct/2026:07:48:07 -0300] "GET /.git-credentials HTTP/2.0" 403 5459 "-" "Mozil ...
show more
35.241.204.214 - - [25/Oct/2026:07:48:07 -0300] "GET /.git-credentials HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" 0.000 -
35.241.204.214 - - [25/Oct/2026:07:48:07 -0300] "GET /.git-credentials HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" 0.000 -
...
show less
Web App Attack
🇺🇸
34.174.66.102
25 Oct 2026
34.174.66.102 - - [25/Oct/2026:06:58:37 -0300] "GET /phpinfo.php HTTP/2.0" 404 179 "-" "Mozilla/5.0 ...
show more
34.174.66.102 - - [25/Oct/2026:06:58:37 -0300] "GET /phpinfo.php HTTP/2.0" 404 179 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.049 0.012
34.174.66.102 - - [25/Oct/2026:06:58:37 -0300] "GET /info.php HTTP/2.0" 404 179 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.007 0.006
...
show less
Web App Attack
🇧🇷
35.247.206.51
25 Oct 2026
docs.apeoc.org.br 35.247.206.51 - - [25/Oct/2026:05:20:44 -0300] "GET /admin/login HTTP/2.0" 403 575 ...
show more
docs.apeoc.org.br 35.247.206.51 - - [25/Oct/2026:05:20:44 -0300] "GET /admin/login HTTP/2.0" 403 5754 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇧🇪
35.241.204.214
25 Oct 2026
radiojfsliberdade.com.br 35.241.204.214 - - [25/Oct/2026:04:44:37 -0300] "GET /.git-credentials HTTP ...
show more
radiojfsliberdade.com.br 35.241.204.214 - - [25/Oct/2026:04:44:37 -0300] "GET /.git-credentials HTTP/2.0" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1"
...
show less
Web App Attack
🇧🇪
146.148.11.239
25 Oct 2026
_ 146.148.11.239 - - [25/Oct/2026:03:27:09 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xA4\ ...
show more
_ 146.148.11.239 - - [25/Oct/2026:03:27:09 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xA4\x94\xD3P\x89W\x16\xA22\x89\xAEv.\x08^\x85\x0B\x99;\xC9\xF9\x92\xCA\xCA;\xDB\x062\xFE\x9Ew\xFE \xB9\x9C(\xF1\xCB\xB1\xBAx\x9C=Xs\xAB>W\x01\xF23\xAEw\x1D\x09i >\xB8^\xA9\xDEQ\xC0\xB6\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" 0.232
_ 146.148.11.239 - - [25/Oct/2026:03:27:14 -0300] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 5.004
_ 146.148.11.239 - - [25/Oct/2026:03:27:15 -0300] "\x9D\xAB\x8C\x809\x9F\xD0\xB8CqG%-\xF0q\x1FX\xC8\x0Ed\x03\x98\x9FZ\xF6\x9D\xE2it\x0E\xFF\x09\xBDI\xEB\x15\xB6\x05\x91\xB2\x8B\xC0\xEA\xC4\xDA\x86!q\x91\x8F8\x10h\x06\x1B \xD0\xDB'\x19\xE4_D5" 400 150 "-" "-" 5.001
_ 146.148.11.239 - - [25/Oct/2026:03:27:55 -0300] "\x00\x1E:\xC5\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07ve
...
show less
Bad Web Bot
🇧🇪
34.52.192.44
25 Oct 2026
_ 34.52.192.44 - - [25/Oct/2026:02:59:29 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03I*\xBD\ ...
show more
_ 34.52.192.44 - - [25/Oct/2026:02:59:29 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03I*\xBD\xAE\xE6\x85Me\xC2\x1E\xF5PL1\xC8\xDE\x1B\xBE$G\x9C\x88\x06u-aj\x19\xAAz\xD9\x80 n\xC7n\xEE/#\xE6\xE0\xC0\xFA\xFD\x155\xA7g\x8D\xAE\xE5&\xC8\x0E\xE1\x86\xC2G\x9Am\xFA\xA5$\xEB\x7F\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" 0.235
_ 34.52.192.44 - - [25/Oct/2026:02:59:35 -0300] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 5.004
_ 34.52.192.44 - - [25/Oct/2026:02:59:36 -0300] "\x8E\xE8C\x83\x8C\x02\x8B\xCC*s\xD5\xDA\x17sP\xB3\xAAR\xE0pG\xFC5[\xB11\xE50\x1C\x92\xAC_\xF8H\xA8\x11\xA114\xB2\x17\x11B>\x8C\xFF\xAEDD\xE2N\xAC\xD1\x06C3\xE4\xBD\xF8\x01\x1E\xBBPC" 400 150 "-" "-" 5.001
_ 34.52.192.44 - - [25/Oct/2026:03:00:15 -0300] "\x00\x1E@\xE3\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00
...
show less
Bad Web Bot
🇧🇪
34.156.100.23
25 Oct 2026
_ 34.156.100.23 - - [25/Oct/2026:02:44:16 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x037\x9Dr ...
show more
_ 34.156.100.23 - - [25/Oct/2026:02:44:16 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x037\x9DrV\x07\xDB\xB6E\xA7tw\x1A\xFC\xDE\xE3\xE6%(B<}t\xED\x7Fc\x03`\xB5\xAF5\x99\xA5 /g\xEAH\xE6\xE2-\xD1\xBF\x1F\x22GSj\xAD\xDE/c^\x06\x01z\xD2\x17\x90\xCD\x9E\x1F\x12\x81P\xC5\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" 0.792
_ 34.156.100.23 - - [25/Oct/2026:02:44:22 -0300] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 5.579
_ 34.156.100.23 - - [25/Oct/2026:02:44:24 -0300] "\xA0Q\xAF\xF0J\xDF[\x82sk\xD8\xB0\xFF\xE75wh\x04:\xEC\x0E\x095\x01~(\xB1\xD6\x89\xAB\x8C(5\xCA\xFFU\xBC\x82`&e\x11\x1B\x80\xA8)D\x99Zs\xE4\xBC\xF7\x88\xD3\xD9\xE5\x5C\x11\x01\xC7\xED\xC1\xAF" 400 150 "-" "-" 5.000
_ 34.156.100.23 - - [25/Oct/2026:02:44:45 -0300] "\x00\x1E\x16\x0B\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04b
...
show less
Bad Web Bot
🇧🇷
34.95.207.195
25 Oct 2026
docs.apeoc.org.br 34.95.207.195 - - [25/Oct/2026:02:22:09 -0300] "GET /admin HTTP/2.0" 403 5754 "-" ...
show more
docs.apeoc.org.br 34.95.207.195 - - [25/Oct/2026:02:22:09 -0300] "GET /admin HTTP/2.0" 403 5754 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇵🇱
45.138.12.6
25 Oct 2026
45.138.12.6 - - [25/Oct/2026:01:58:29 -0300] "GET /.svn/wc.db HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (X ...
show more
45.138.12.6 - - [25/Oct/2026:01:58:29 -0300] "GET /.svn/wc.db HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 0.041 -
45.138.12.6 - - [25/Oct/2026:01:58:29 -0300] "GET /.svn/entries HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 0.000 -
...
show less
Web App Attack