|
π©πͺ
156.67.83.29
|
|
www.radiojfsliberdade.com.br 156.67.83.29 - - [29/Oct/2026:13:15:19 -0300] "GET /wp/wp-content/uploa ...
show more
www.radiojfsliberdade.com.br 156.67.83.29 - - [29/Oct/2026:13:15:19 -0300] "GET /wp/wp-content/uploads/2022/10/android.png HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
π©πͺ
167.94.146.54
|
|
CrowdSec local detection on srv1349699: http-bad-user-agent. Blocked. AS398705 (US), 2 events.
|
Bad Web Bot
Web App Attack
|
|
π³π±
195.178.110.135
|
|
CrowdSec local detection on srv01: http-probing. Blocked. AS48090 (BG), 21 events.
|
Bad Web Bot
Web App Attack
|
|
πΈπ¬
139.59.232.34
|
|
139.59.232.34 - - [29/Oct/2026:12:10:00 -0300] "GET //images/images/cache.php HTTP/2.0" 404 179 "www ...
show more
139.59.232.34 - - [29/Oct/2026:12:10:00 -0300] "GET //images/images/cache.php HTTP/2.0" 404 179 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 0.223 0.110
139.59.232.34 - - [29/Oct/2026:12:10:02 -0300] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/2.0" 404 179 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 0.363 0.112
...
show less
|
Web App Attack
|
|
π³π±
45.148.10.244
|
|
radiojfsliberdade.com.br 45.148.10.244 - - [29/Oct/2026:11:59:37 -0300] "GET /admin HTTP/2.0" 403 57 ...
show more
radiojfsliberdade.com.br 45.148.10.244 - - [29/Oct/2026:11:59:37 -0300] "GET /admin HTTP/2.0" 403 5754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
π¨π¦
2607:5300:205:300::1aee
|
|
CrowdSec local detection on srv1251771: http-bad-user-agent. Blocked. AS16276 (CA), 2 events.
|
Bad Web Bot
Web App Attack
|
|
π¦πΊ
15.135.91.30
|
|
prolcasulo.com.br 15.135.91.30 - - [29/Oct/2026:10:09:46 -0300] "GET /wp-includes/css/buttons.css HT ...
show more
prolcasulo.com.br 15.135.91.30 - - [29/Oct/2026:10:09:46 -0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 162 "-" "Go-http-client/1.1"
...
show less
|
Web App Attack
|
|
π§πͺ
34.62.68.97
|
|
34.62.68.97 - - [29/Oct/2026:09:48:55 -0300] "GET /.svn/all-wcprops HTTP/2.0" 403 5459 "-" "Mozilla/ ...
show more
34.62.68.97 - - [29/Oct/2026:09:48:55 -0300] "GET /.svn/all-wcprops HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.000 -
34.62.68.97 - - [29/Oct/2026:09:48:55 -0300] "GET /.hg/requires HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.000 -
...
show less
|
Web App Attack
|
|
π§π·
45.140.193.140
|
|
CrowdSec local detection on srv01: http-cve-2021-42013. Blocked. AS268581 (BR), 1 events.
|
Hacking
Web App Attack
|
|
π³π±
195.178.110.132
|
|
radiojfsliberdade.com.br 195.178.110.132 - - [29/Oct/2026:07:30:30 -0300] "GET /admin HTTP/2.0" 403 ...
show more
radiojfsliberdade.com.br 195.178.110.132 - - [29/Oct/2026:07:30:30 -0300] "GET /admin HTTP/2.0" 403 5754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
π©πͺ
2a02:c202:2359:8556::1
|
|
www.radiojfsliberdade.com.br 2a02:c202:2359:8556::1 - - [29/Oct/2026:06:59:25 -0300] "GET /wp/wp-con ...
show more
www.radiojfsliberdade.com.br 2a02:c202:2359:8556::1 - - [29/Oct/2026:06:59:25 -0300] "GET /wp/wp-content/uploads/2021/11/sliter-6.jpg HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
π«π·
85.204.70.106
|
|
85.204.70.106 - - [29/Oct/2026:06:43:03 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 403 5459 ...
show more
85.204.70.106 - - [29/Oct/2026:06:43:03 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 0.000 -
85.204.70.106 - - [29/Oct/2026:06:43:04 -0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0" 403 5459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 0.000 -
...
show less
|
Web App Attack
|
|
π¬π§
185.93.89.132
|
|
CrowdSec local detection on srv01: CVE-2017-9841. Blocked. AS213790 (IR), 1 events.
|
Hacking
Web App Attack
|
|
πΊπΈ
104.30.167.164
|
|
kitmaster.tieafins.com.br 104.30.167.164 - - [29/Oct/2026:03:51:45 -0300] "HEAD / HTTP/1.1" 400 0 "- ...
show more
kitmaster.tieafins.com.br 104.30.167.164 - - [29/Oct/2026:03:51:45 -0300] "HEAD / HTTP/1.1" 400 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 (compatible; +https://developers.cloudflare.com/security-center/)" 0.000
ev.tieafins.com.br 104.30.167.164 - - [29/Oct/2026:03:51:45 -0300] "HEAD / HTTP/1.1" 400 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 (compatible; +https://developers.cloudflare.com/security-center/)" 0.000
oab.tieafins.com.br 104.30.167.164 - - [29/Oct/2026:03:51:45 -0300] "HEAD / HTTP/1.1" 400 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 (compatible; +https://developers.cloudflare.com/security-center/)" 0.000
cmetrack.tieafins.com.br 104.30.167.164 - - [29/Oct/2026:03:51:45 -0300] "HEAD / HTTP/1.1" 400 0 "-" "Mozilla/5.0 (Maci
...
show less
|
Bad Web Bot
|
|
π©πͺ
213.202.253.4
|
|
CrowdSec local detection on srv1349699: http-bad-user-agent. Blocked. AS24961 (DE), 2 events.
|
Bad Web Bot
Web App Attack
|
|
πΊπΈ
136.70.78.0
|
|
136.70.78.0 - - [29/Oct/2026:02:46:35 -0300] "GET /.aws/credentials HTTP/2.0" 404 179 "-" "Mozilla/5 ...
show more
136.70.78.0 - - [29/Oct/2026:02:46:35 -0300] "GET /.aws/credentials HTTP/2.0" 404 179 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 0.076 0.036
136.70.78.0 - - [29/Oct/2026:02:46:35 -0300] "GET /.aws/credentials HTTP/2.0" 404 179 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 0.040 0.037
...
show less
|
Web App Attack
|
|
π©πͺ
2a02:c202:2360:817::1
|
|
www.radiojfsliberdade.com.br 2a02:c202:2360:817::1 - - [29/Oct/2026:01:48:15 -0300] "GET /wp/wp-cont ...
show more
www.radiojfsliberdade.com.br 2a02:c202:2360:817::1 - - [29/Oct/2026:01:48:15 -0300] "GET /wp/wp-content/uploads/2022/11/parceiro-apeoc2.png HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
π§πͺ
35.233.118.158
|
|
177.19.138.245 35.233.118.158 - - [29/Oct/2026:01:28:46 -0300] "GET / HTTP/1.1" 400 230 "-" "Mozilla ...
show more
177.19.138.245 35.233.118.158 - - [29/Oct/2026:01:28:46 -0300] "GET / HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible)" 0.000
177.19.138.245 35.233.118.158 - - [29/Oct/2026:01:28:46 -0300] "OPTIONS / HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible)" 0.000
177.19.138.245 35.233.118.158 - - [29/Oct/2026:01:28:47 -0300] "JVQH / HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible)" 0.000
177.19.138.245 35.233.118.158 - - [29/Oct/2026:01:28:47 -0300] "GET /favicon.ico HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible)" 0.000
177.19.138.245 35.233.118.158 - - [29/Oct/2026:01:28:48 -0300] "GET / HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible)" 0.000
...
show less
|
Bad Web Bot
|
|
π§πͺ
130.211.51.214
|
|
_ 130.211.51.214 - - [29/Oct/2026:00:23:40 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03>\x1B ...
show more
_ 130.211.51.214 - - [29/Oct/2026:00:23:40 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03>\x1B\x10\x19\xF2OU4\x05\x03\xCAf\x88\x11\xE7\x0C\xD33gw\x01N\xEF%\x8F\x0B\xA42\x18o\x07\xF1 \xEF\xAC%Z\x0E4\x83\xEBO\xCA\xA5\x8E\xDB\xEB7\xC6t_:\x82v\xED'\x8C\xB1e\xB5\x8B}g\x01\x0B\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" 0.391
_ 130.211.51.214 - - [29/Oct/2026:00:23:44 -0300] "x\xF7\xB0\x13\x930\x22b\x82&\xCA\x01\xBA\x1F\xCB8R\x88\x06\x8Ds\xA6\x00W\xDFh\x22\xA0\xC7\xC7\xAB\xFD\xFA.7\x9F\x80\x7F\xD3\xFE\x95F\x95M\x07V\xA4\xCC5\xD8K\x02a\xC0\xEC\x0E\xAE\xFC\x882\x0F^r\x1C" 400 150 "-" "-" 1.700
_ 130.211.51.214 - - [29/Oct/2026:00:23:46 -0300] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 5.192
_ 130.211.51.214 - - [29/Oct/2026:00:24:28 -0300] "\x00\x1E\x95\xC9\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00
...
show less
|
Bad Web Bot
|
|
π§πͺ
35.233.20.194
|
|
_ 35.233.20.194 - - [28/Oct/2026:23:59:06 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x00\x ...
show more
_ 35.233.20.194 - - [28/Oct/2026:23:59:06 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x00\x8F\xC1\xE5\xBB\xA0l\x0E\xDE\xB3\x84\x08I\xA1\x1E3\xF9m\x22kX\xA7\xB9\x16\x13\x19\xCE\xDFY\x08\x9AL \x1E\xB3\x93M%\xED\x96\x8Bb\xC5\xDE,\xD2\xF46;i\xD3\xD4" 400 150 "-" "-" 0.235
_ 35.233.20.194 - - [28/Oct/2026:23:59:11 -0300] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 5.003
_ 35.233.20.194 - - [28/Oct/2026:23:59:12 -0300] "\x153&D\xA81\xD5\x10F\xD3h\x00Q\x87\xD9,\xB8*,\x07)\xC93\xC5\xA4\xBB\xDE\xD8\xCBB\x94\xA1\x91\x1C?_\xC5l\xEC/;}L\x8D\xFE.\x06b\xEFX\xF9y\x99\xFD\xA2}@A\xD9)\xBF\x19x\xA7" 400 150 "-" "-" 5.001
_ 35.233.20.194 - - [28/Oct/2026:23:59:51 -0300] "\x00\x1E\x1D\xF6\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" 5.001
_ 35.233.20.194 - - [29/Oct/2026:00:00:02 -0300] "\
...
show less
|
Bad Web Bot
|
|
π§πͺ
35.189.208.44
|
|
_ 35.189.208.44 - - [28/Oct/2026:23:43:27 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03]r;\xC ...
show more
_ 35.189.208.44 - - [28/Oct/2026:23:43:27 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03]r;\xCC\x8E>:\x0F\xC2\xB8+\x0C\xFD\xD6\x8C6Q\x85y\x22)3\xAB\xA7\x0F?.\xEF=\xC3\xC6\xDF \xE0K\x8E\xB8\xC8R+l\x0Ev\x04\xA8\xC26\xA4\x8C\x03c\x92z\xD4\x11#e\x01\xA2nf\xDB0\x5C\x99\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" 1.076
_ 35.189.208.44 - - [28/Oct/2026:23:43:34 -0300] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 5.790
_ 35.189.208.44 - - [28/Oct/2026:23:43:37 -0300] "\x049\xDB\xC7'Q\xE5\xE5\xD7\xE3\x95\xC4vs\x0E\x8A\x22\xA5r\xFF\xE7\x18\xA5\xEA{r\x9F\x00\x93\xBF\xD0\xAE&`BR(6\x89\xCB\xD5h\x1E.\xD0y;\x8B}:\xBF\xCF\x85_\x95\x95\xDEh\xB3\xBE\xEA\x88 \x0E" 400 150 "-" "-" 5.003
_ 35.189.208.44 - - [28/Oct/2026:23:44:00 -0300] "\x00\x1EI\x87\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x0
...
show less
|
Bad Web Bot
|
|
πΈπ¬
152.42.237.107
|
|
radiojfsliberdade.com.br 152.42.237.107 - - [28/Oct/2026:23:39:19 -0300] "HEAD /wp-content/ HTTP/2.0 ...
show more
radiojfsliberdade.com.br 152.42.237.107 - - [28/Oct/2026:23:39:19 -0300] "HEAD /wp-content/ HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
π¨π΄
186.29.66.201
|
|
www.radiojfsliberdade.com.br 186.29.66.201 - - [28/Oct/2026:19:06:47 -0300] "GET /wp/wp-content/uplo ...
show more
www.radiojfsliberdade.com.br 186.29.66.201 - - [28/Oct/2026:19:06:47 -0300] "GET /wp/wp-content/uploads/2021/11/IMG_20220623_173248-200x200.jpg HTTP/2.0" 444 0 "https://www.radiojfsliberdade.com.br/wp/equipe/mario-vieira/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.137 Safari/537.36 OPR/50.0.2762.67"
...
show less
|
Web App Attack
|
|
πΈπ¬
168.144.242.158
|
|
radiojfsliberdade.com.br 168.144.242.158 - - [28/Oct/2026:17:54:15 -0300] "GET //wp-content/plugins/ ...
show more
radiojfsliberdade.com.br 168.144.242.158 - - [28/Oct/2026:17:54:15 -0300] "GET //wp-content/plugins/plugins/cache.php HTTP/2.0" 444 0 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
|
Web App Attack
|
|
πΈπ¬
188.166.176.58
|
|
188.166.176.58 - - [28/Oct/2026:15:51:53 -0300] "GET /wp-includes/js/json2.js HTTP/2.0" 404 179 "-" ...
show more
188.166.176.58 - - [28/Oct/2026:15:51:53 -0300] "GET /wp-includes/js/json2.js HTTP/2.0" 404 179 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 0.086 0.044
188.166.176.58 - - [28/Oct/2026:15:52:23 -0300] "GET /wp/wp-includes/js/json2.js HTTP/2.0" 404 179 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 0.041 0.003
...
show less
|
Web App Attack
|