|
🇧🇪
34.140.132.132
|
|
34.140.132.132 - - [27/Oct/2026:10:09:37 -0300] "GET /.gitlab-ci.yml HTTP/2.0" 403 5459 "-" "Mozilla ...
show more
34.140.132.132 - - [27/Oct/2026:10:09:37 -0300] "GET /.gitlab-ci.yml HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 0.000 -
34.140.132.132 - - [27/Oct/2026:10:09:37 -0300] "GET /_profiler/phpinfo HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 0.000 -
...
show less
|
Bad Web Bot
|
|
🇨🇦
34.95.13.186
|
|
34.95.13.186 - - [27/Oct/2026:09:16:52 -0300] "GET /console HTTP/2.0" 503 592 "-" "Mozilla/5.0 (Wind ...
show more
34.95.13.186 - - [27/Oct/2026:09:16:52 -0300] "GET /console HTTP/2.0" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 0.000 -
34.95.13.186 - - [27/Oct/2026:09:16:52 -0300] "GET /admin HTTP/2.0" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 0.000 -
...
show less
|
Web App Attack
|
|
🇺🇸
23.239.27.128
|
|
177.19.138.245 23.239.27.128 - - [27/Oct/2026:08:35:34 -0300] "GET /.env HTTP/1.1" 444 0 "-" "Mozill ...
show more
177.19.138.245 23.239.27.128 - - [27/Oct/2026:08:35:34 -0300] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" 0.000
177.19.138.245 23.239.27.128 - - [27/Oct/2026:08:35:34 -0300] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" 0.000
...
show less
|
Web App Attack
|
|
🇺🇸
192.236.202.11
|
|
CrowdSec local detection on srv1349699: http-open-proxy. Blocked. AS54290 (US), 1 events.
|
Bad Web Bot
Web App Attack
|
|
🇧🇪
34.156.206.32
|
|
34.156.206.32 - - [27/Oct/2026:05:26:28 -0300] "GET /.gitlab-ci.yml HTTP/2.0" 403 5459 "-" "Mozilla/ ...
show more
34.156.206.32 - - [27/Oct/2026:05:26:28 -0300] "GET /.gitlab-ci.yml HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 0.000 -
34.156.206.32 - - [27/Oct/2026:05:26:28 -0300] "GET /.git-credentials HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 0.000 -
...
show less
|
Bad Web Bot
|
|
🇳🇱
46.151.178.14
|
|
2026-10-19 06:22:30,633 fail2ban.actions [1446]: NOTICE [portscan] Ban 46.151.178.14
2026-10 ...
show more
2026-10-19 06:22:30,633 fail2ban.actions [1446]: NOTICE [portscan] Ban 46.151.178.14
2026-10-21 03:00:24,771 fail2ban.actions [1446]: NOTICE [portscan] Ban 46.151.178.14
2026-10-23 12:59:58,863 fail2ban.actions [1446]: NOTICE [portscan] Ban 46.151.178.14
2026-10-25 08:37:09,352 fail2ban.actions [1446]: NOTICE [portscan] Ban 46.151.178.14
2026-10-27 05:04:28,969 fail2ban.actions [1446]: NOTICE [portscan] Ban 46.151.178.14
...
show less
|
Brute-Force
|
|
🇺🇸
47.253.238.28
|
|
cmetrack.tieafins.com.br 47.253.238.28 - - [27/Oct/2026:03:37:32 -0300] "POST /cgi-bin/.%2e/.%2e/.%2 ...
show more
cmetrack.tieafins.com.br 47.253.238.28 - - [27/Oct/2026:03:37:32 -0300] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" 0.092
cmetrack.tieafins.com.br 47.253.238.28 - - [27/Oct/2026:03:37:32 -0300] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 150 "-" "-" 0.088
177.19.138.245 47.253.238.28 - - [27/Oct/2026:03:37:32 -0300] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 400 230 "-" "libredtail-http" 0.000
177.19.138.245 47.253.238.28 - - [27/Oct/2026:03:37:33 -0300] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 400 230 "-" "libredtail-http" 0.000
177.19.138.245 47.253.238.28 - - [27/Oct/2026:03:37:33 -0300] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 400 230 "-" "libredtail-http" 0.000
...
show less
|
Bad Web Bot
|
|
🇺🇸
173.239.211.216
|
|
prolcasulo.com.br 173.239.211.216 - - [27/Oct/2026:03:07:56 -0300] "GET /wp-login.php HTTP/1.1" 301 ...
show more
prolcasulo.com.br 173.239.211.216 - - [27/Oct/2026:03:07:56 -0300] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0"
...
show less
|
Web App Attack
|
|
🇩🇪
201.79.14.16
|
|
prolcasulo.com.br 201.79.14.16 - - [27/Oct/2026:02:45:55 -0300] "GET /wp-login.php HTTP/1.1" 301 162 ...
show more
prolcasulo.com.br 201.79.14.16 - - [27/Oct/2026:02:45:55 -0300] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0"
...
show less
|
Web App Attack
|
|
🇧🇪
35.205.134.12
|
|
_ 35.205.134.12 - - [27/Oct/2026:02:40:53 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x1E\x ...
show more
_ 35.205.134.12 - - [27/Oct/2026:02:40:53 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x1E\x0F5\xBC\xBC\xE8\xFC\x01\xBA #A\x90\x90|\xDB~X\xAD<&\x12\xCC\xB5\xCCt\x96$\xC1\xEE}\x96 \x1A_\xB3(\x1D}\x12'\x0C\xA8\x1A2\x9F\xDD\xE5~" 400 150 "-" "-" 0.247
_ 35.205.134.12 - - [27/Oct/2026:02:40:59 -0300] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 5.003
_ 35.205.134.12 - - [27/Oct/2026:02:41:00 -0300] "\xB4^\xB5\x83\xE2Cyv\xE1\xF2\xD3\x8B\x15b\xCFT\x00\xBB5\xF3\x853ek\xB1\xEDo\x16K\xC1i\xFA\x1B\x7F\x80\xBC\xAC\xEE\xDB\xD0e\xDD\xB6\xA6\x8B\xD4\xF0\x91y\x9A\xC4\xC0\x14\x96\x04|\x15~\xFC\x1Af\x8E&\xB2" 400 150 "-" "-" 5.002
_ 35.205.134.12 - - [27/Oct/2026:02:41:38 -0300] "\x00\x1E\xC1\x9C\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" 4.219
_ 35.205.134.12 - - [27/Oct/2026:02:41:50
...
show less
|
Bad Web Bot
|
|
🇺🇸
159.223.111.165
|
|
prolcasulo.com.br 159.223.111.165 - - [27/Oct/2026:02:27:39 -0300] "GET /wp-login.php HTTP/1.1" 301 ...
show more
prolcasulo.com.br 159.223.111.165 - - [27/Oct/2026:02:27:39 -0300] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0"
...
show less
|
Web App Attack
|
|
🇧🇪
34.62.153.64
|
|
_ 34.62.153.64 - - [27/Oct/2026:02:14:24 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xDD\x8 ...
show more
_ 34.62.153.64 - - [27/Oct/2026:02:14:24 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xDD\x81\x9C\x7F\x5C\x8C\x9F\xDE\xD5\x14B\xF8\xB2~myh\xAFX\xAD6x\x16\x9D\xB1\x1A`\xF8\xA2\xFB\xD9c &\xB1\x88\x01\xAA\xB3\x02&V\x12\xA4\xBC#-\x19\xAE\xCC[\xA8\x1E\x95\x9A\xB0\x19\xCF\xD1QD~|9a\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" 0.235
_ 34.62.153.64 - - [27/Oct/2026:02:14:29 -0300] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 5.004
_ 34.62.153.64 - - [27/Oct/2026:02:14:30 -0300] "\xCC_B0\x18\xF1\xF7\x01G\xAD^\xFD\x0F\xB9f\x95\xB3`\xA7x\x8E}\x11i\xF1\xBF\xFA4R\x98\x1A\x7F9\xE8\xAC\xB3\xE2r\xD2\xBBK\x03^\xE7\xC9r\x18\x10D\xEE\x9F\xA2\xA2\xD4\x0C\xB3$]F\xA1\x88\x8CVW" 400 150 "-" "-" 5.000
_ 34.62.153.64 - - [27/Oct/2026:02:15:09 -0300] "\x00\x1E\xA1\xB1\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07vers
...
show less
|
Bad Web Bot
|
|
🇧🇪
34.22.190.242
|
|
_ 34.22.190.242 - - [27/Oct/2026:02:01:43 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xDE\x ...
show more
_ 34.22.190.242 - - [27/Oct/2026:02:01:43 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xDE\x94ux\xCE\xB3%\x90\xC2\xEB\xD4g_u\xCAvl\x86\xC9\xD9\x1D\xF2\x09KLH\x0Cc#d\x849 2(\x84=tG\xBD\x86\xCA3\xD3\x03\x08m\xD0p\x95\x98\x98T\x09XI\xF4\xB0?\x91\xEA/u\x80'\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" 0.751
_ 34.22.190.242 - - [27/Oct/2026:02:01:50 -0300] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 6.030
_ 34.22.190.242 - - [27/Oct/2026:02:01:53 -0300] "\x93$6\x88,\xA5\xA4/\x87\xE8t\x8E\xED\xE5\xC9\x00_\xEEe\xEA\xF7\xB0\xCBV\xC4e\x8AU\xC9y\xE0\x85\x9A\xA67\xB3\xC3\x10J\xF9\xB8\x9Df\xAF\x86b\xAF&4\xF7\x0F\xDD*\xC9A\xB5?\xEA\xC0\xB5\xC3=\xAC\x8C" 400 150 "-" "-" 5.001
_ 34.22.190.242 - - [27/Oct/2026:02:02:15 -0300] "\x00\x1E\xCBz\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x
...
show less
|
Bad Web Bot
|
|
🇨🇴
181.133.38.50
|
|
www.radiojfsliberdade.com.br 181.133.38.50 - - [27/Oct/2026:00:34:20 -0300] "GET /wp/wp-content/uplo ...
show more
www.radiojfsliberdade.com.br 181.133.38.50 - - [27/Oct/2026:00:34:20 -0300] "GET /wp/wp-content/uploads/2021/11/sliter-6.jpg HTTP/2.0" 444 0 "https://www.radiojfsliberdade.com.br/wp/" "Mozilla/5.0 (X11; Linux i686 on x86_64; rv:52.4.1) Gecko/20100101 Firefox/52.4.1"
...
show less
|
Web App Attack
|
|
🇸🇬
165.232.169.79
|
|
165.232.169.79 - - [26/Oct/2026:20:42:10 -0300] "GET /wp-includes/js/json2.js HTTP/2.0" 404 179 "-" ...
show more
165.232.169.79 - - [26/Oct/2026:20:42:10 -0300] "GET /wp-includes/js/json2.js HTTP/2.0" 404 179 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/122.0" 0.051 0.007
165.232.169.79 - - [26/Oct/2026:20:42:21 -0300] "GET /wp/wp-includes/js/json2.js HTTP/2.0" 404 179 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/120.0.1" 0.042 0.002
...
show less
|
Web App Attack
|
|
🇧🇷
34.95.166.157
|
|
radiojfsliberdade.com.br 34.95.166.157 - - [26/Oct/2026:20:17:08 -0300] "GET /admin HTTP/2.0" 403 57 ...
show more
radiojfsliberdade.com.br 34.95.166.157 - - [26/Oct/2026:20:17:08 -0300] "GET /admin HTTP/2.0" 403 5754 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇫🇷
212.47.78.233
|
|
CrowdSec local detection on srv1349699: http-cve-2021-42013. Blocked. AS51167 (FR), 1 events.
|
Hacking
Web App Attack
|
|
🇺🇸
2602:80d:1006::5a
|
|
CrowdSec local detection on srv1349699: http-bad-user-agent. Blocked. AS398324 (US), 2 events.
|
Bad Web Bot
Web App Attack
|
|
🇱🇹
62.60.130.58
|
|
prolcasulo.com.br 62.60.130.58 - - [26/Oct/2026:18:00:30 -0300] "GET /wp-content/ HTTP/1.1" 301 162 ...
show more
prolcasulo.com.br 62.60.130.58 - - [26/Oct/2026:18:00:30 -0300] "GET /wp-content/ HTTP/1.1" 301 162 "https://www.binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇺🇸
34.85.177.21
|
|
radiojfsliberdade.com.br 34.85.177.21 - - [26/Oct/2026:17:13:04 -0300] "GET /.git-credentials HTTP/2 ...
show more
radiojfsliberdade.com.br 34.85.177.21 - - [26/Oct/2026:17:13:04 -0300] "GET /.git-credentials HTTP/2.0" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0"
...
show less
|
Web App Attack
|
|
🇧🇷
34.95.184.34
|
|
34.95.184.34 - - [26/Oct/2026:16:58:22 -0300] "GET /admin HTTP/2.0" 503 592 "-" "Mozilla/5.0 (Window ...
show more
34.95.184.34 - - [26/Oct/2026:16:58:22 -0300] "GET /admin HTTP/2.0" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 0.000 -
34.95.184.34 - - [26/Oct/2026:16:58:22 -0300] "GET /admin/users HTTP/2.0" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 0.000 -
...
show less
|
Web App Attack
|
|
🇨🇦
20.151.218.88
|
|
20.151.218.88 - - [26/Oct/2026:16:38:20 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
20.151.218.88 - - [26/Oct/2026:16:38:20 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0" 404 179 "-" "-" 0.063 0.025
20.151.218.88 - - [26/Oct/2026:16:38:20 -0300] "GET /this_is_a_new_hello_world.php HTTP/2.0" 404 179 "-" "-" 0.023 0.022
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.27
|
|
45.138.12.27 - - [26/Oct/2026:15:53:24 -0300] "GET /.aws/config HTTP/2.0" 403 5459 "https://enfajuli ...
show more
45.138.12.27 - - [26/Oct/2026:15:53:24 -0300] "GET /.aws/config HTTP/2.0" 403 5459 "https://enfajulianabarros.com.br/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 0.039 -
45.138.12.27 - - [26/Oct/2026:15:53:25 -0300] "GET /.config/gcloud/application_default_credentials.json HTTP/2.0" 403 5459 "https://enfajulianabarros.com.br/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 0.000 -
...
show less
|
Web App Attack
|
|
🇧🇷
34.95.184.34
|
|
social.tieafins.com.br 34.95.184.34 - - [26/Oct/2026:15:18:09 -0300] "GET /admin/dashboard HTTP/2.0" ...
show more
social.tieafins.com.br 34.95.184.34 - - [26/Oct/2026:15:18:09 -0300] "GET /admin/dashboard HTTP/2.0" 403 5754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇩🇪
167.94.146.48
|
|
CrowdSec local detection on srv1251771: http-bad-user-agent. Blocked. AS398705 (US), 2 events.
|
Bad Web Bot
Web App Attack
|