🇩🇪
cxx
2026-11-13 16:27:01
UTC ·
(4 hours ago)
vulnerability scans
...
Web App Attack
🇺🇸
cwytech
2026-11-13 14:38:10
UTC ·
(6 hours ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-probing.
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-13 14:11:12
UTC ·
(6 hours ago)
excessive HTTP 404 errors
Bad Web Bot
Anonymous
2026-11-13 12:20:20
UTC ·
(8 hours ago)
Detected by CrowdSec
IP: 31.76.93.72
Scenario: crowdsecurity/http-probing
Date: Fri, 13 Nov 2026 13:20:20 CET (GMT +01:00)
Web App Attack
Bad Web Bot
Anonymous
2026-11-13 12:18:30
UTC ·
(8 hours ago)
31.76.93.72 - - [13/Nov/2026:13:16:41 +0100] "GET /signup HTTP/1.1" 404 8520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:13:16:41 +0100] "GET /sign ...
show more
31.76.93.72 - - [13/Nov/2026:13:16:41 +0100] "GET /signup HTTP/1.1" 404 8520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:13:16:41 +0100] "GET /sign-up HTTP/1.1" 404 8528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:13:16:42 +0100] "GET /register HTTP/1.1" 404 8521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:13:16:42 +0100] "GET /registration HTTP/1.1" 404 8522 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:13:16:43 +0100] "GET /create-account HTTP/1.1" 404 8530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93
...
show less
DDoS Attack
🇫🇷
Zundapper
2026-11-13 10:23:09
UTC ·
(10 hours ago)
31.76.93.72 - - [13/Nov/2026:11:23:09 +0100] "GET /signup HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:11:23:09 +0100] "GET /sign- ...
show more
31.76.93.72 - - [13/Nov/2026:11:23:09 +0100] "GET /signup HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:11:23:09 +0100] "GET /sign-up HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:11:23:09 +0100] "GET /register HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:11:23:09 +0100] "GET /registration HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:11:23:09 +0100] "GET /create-account HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Web App Attack
Port Scan
🇩🇪
msavo
2026-11-13 10:20:09
UTC ·
(10 hours ago)
CIR Sentinel: cost_weighted_probe; 43.7s upstream time across 15 distinct failed paths; failed responses 88% in 120s; first=2026-11-13T10:18:23+00:00; last=2026-11-13T10:19:07+00:00; permanently blocked by local firewall.
Bad Web Bot
Web App Attack
Anonymous
2026-11-13 07:56:54
UTC ·
(13 hours ago)
Unauthorized access (443/tcp/https)
Port Scan
Web App Attack
🇺🇸
nyt
2026-11-13 07:30:46
UTC ·
(13 hours ago)
Bad Web Bot, Web App Attack, suspicious: 404 flood (16/60s)
Bad Web Bot
Web App Attack
Anonymous
2026-11-13 07:19:26
UTC ·
(13 hours ago)
31.76.93.72 - - [13/Nov/2026:09:19:24 +0200] "GET /signup HTTP/1.1" 404 185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:09:19:24 +0200] "GET /sign- ...
show more
31.76.93.72 - - [13/Nov/2026:09:19:24 +0200] "GET /signup HTTP/1.1" 404 185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:09:19:24 +0200] "GET /sign-up HTTP/1.1" 404 185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:09:19:24 +0200] "GET /register HTTP/1.1" 404 185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:09:19:24 +0200] "GET /registration HTTP/1.1" 404 185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 - - [13/Nov/2026:09:19:24 +0200] "GET /create-account HTTP/1.1" 404 185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
31.76.93.72 -
...
show less
Bad Web Bot
Web App Attack
🇫🇷
ecodehost.com
2026-11-13 05:39:06
UTC ·
(15 hours ago)
Domain : cozumdoktoru.com
Rule : WEB
IP in black list
Port Scan
Anonymous
2026-11-13 05:22:22
UTC ·
(15 hours ago)
Blocked by Fail2Ban rule: Login form scanners
...
Bad Web Bot
Web App Attack
🇦🇺
A.i.D.A.N.N
2026-11-13 05:15:45
UTC ·
(15 hours ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected
Web App Attack
🇬🇧
consul.to
2026-11-13 04:03:46
UTC ·
(17 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇧🇪
cmbplf
2026-11-13 03:58:49
UTC ·
(17 hours ago)
3.697 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot