๐ซ๐ฎ
144.31.53.72
17 May 2026
Fail2Ban (sshd): Ban 144.31.53.72 after 54 failures
sshd[4744]: Failed password for invalid user ftp ...
show more
Fail2Ban (sshd): Ban 144.31.53.72 after 54 failures
sshd[4744]: Failed password for invalid user ftpuser from 144.31.53.72 port 32839 ssh2
sshd[33018]: Failed password for root from 144.31.53.72 port 51432 ssh2
show less
Brute-Force
SSH
๐ฉ๐ช
2.26.123.96
17 May 2026
Fail2Ban (traefik-auth): Ban 2.26.123.96 after 39 failures
2.26.123.96 - - [15/May/2026:12:20:46 +00 ...
show more
Fail2Ban (traefik-auth): Ban 2.26.123.96 after 39 failures
2.26.123.96 - - [15/May/2026:12:20:46 +0000] "GET /api/v1/pods HTTP/1.1" 404 15492 "-" "python-requests/2.31.0"
2.26.123.96 - - [15/May/2026:12:20:46 +0000] "GET /api/config HTTP/1.1" 403 7070 "-" "python-requests/2.31.0"
show less
Web App Attack
๐ซ๐ฎ
144.31.169.112
17 May 2026
Fail2Ban (traefik-badrequests): Ban 144.31.169.112 after 33 failures
144.31.169.112 - - [14/May/2026 ...
show more
Fail2Ban (traefik-badrequests): Ban 144.31.169.112 after 33 failures
144.31.169.112 - - [14/May/2026:09:05:55 +0000] "GET /wp-cron.php HTTP/1.1" 404 48058 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
144.31.169.112 - - [14/May/2026:09:05:55 +0000] "GET /db.sql HTTP/1.1" 403 5296 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
show less
Web App Attack
๐ต๐ฑ
31.76.251.37
16 May 2026
CrowdSec Detection: crowdsecurity/http-sensitive-files
31.76.251.37 - - [14/May/2026:09:46:50 +0000] ...
show more
CrowdSec Detection: crowdsecurity/http-sensitive-files
31.76.251.37 - - [14/May/2026:09:46:50 +0000] "GET /api/v1/pods HTTP/1.1" 403 6031 "-" "curl/8.4.0"
14 alerts in 35s. Decision: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.220
16 May 2026
CrowdSec Detection: crowdsecurity/http-probing
144.31.169.220 - - [14/May/2026:17:11:31 +0000] "GET ...
show more
CrowdSec Detection: crowdsecurity/http-probing
144.31.169.220 - - [14/May/2026:17:11:31 +0000] "GET /wp-login.php HTTP/1.1" 403 21808 "-" "python-requests/2.31.0"
22 alerts in 56s. Decision: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.158
16 May 2026
CrowdSec Detection: crowdsecurity/http-sensitive-files
2.26.122.158 - - [16/May/2026:07:30:01 +0000] ...
show more
CrowdSec Detection: crowdsecurity/http-sensitive-files
2.26.122.158 - - [16/May/2026:07:30:01 +0000] "GET /swagger.json HTTP/1.1" 403 22022 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
12 alerts in 56s. Decision: ban 4h
show less
Web App Attack
๐ซ๐ฎ
31.76.245.46
16 May 2026
CrowdSec Detection: crowdsecurity/http-path-traversal-probing
31.76.245.46 - - [16/May/2026:11:25:16 ...
show more
CrowdSec Detection: crowdsecurity/http-path-traversal-probing
31.76.245.46 - - [16/May/2026:11:25:16 +0000] "GET /boaform/admin/formLogin HTTP/1.1" 403 5832 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
4 alerts in 18s. Decision: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.164
16 May 2026
CrowdSec Detection: crowdsecurity/http-crawl-non_statics
144.31.238.164 - - [16/May/2026:08:59:45 +0 ...
show more
CrowdSec Detection: crowdsecurity/http-crawl-non_statics
144.31.238.164 - - [16/May/2026:08:59:45 +0000] "GET /v2/_catalog HTTP/1.1" 403 12220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
12 alerts in 39s. Decision: ban 4h
show less
Web App Attack
๐ซ๐ฎ
31.76.245.31
16 May 2026
CrowdSec Detection: crowdsecurity/http-probing
31.76.245.31 - - [15/May/2026:21:32:09 +0000] "GET /e ...
show more
CrowdSec Detection: crowdsecurity/http-probing
31.76.245.31 - - [15/May/2026:21:32:09 +0000] "GET /ecp/default.aspx HTTP/1.1" 404 49796 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"
23 alerts in 80s. Decision: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.127
16 May 2026
CrowdSec Detection: crowdsecurity/http-probing
2.26.123.127 - - [15/May/2026:15:09:44 +0000] "GET /m ...
show more
CrowdSec Detection: crowdsecurity/http-probing
2.26.123.127 - - [15/May/2026:15:09:44 +0000] "GET /manager/html HTTP/1.1" 404 2786 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
5 alerts in 55s. Decision: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.35
16 May 2026
CrowdSec Detection: crowdsecurity/http-crawl-non_statics
144.31.238.35 - - [16/May/2026:09:15:55 +00 ...
show more
CrowdSec Detection: crowdsecurity/http-crawl-non_statics
144.31.238.35 - - [16/May/2026:09:15:55 +0000] "GET /actuator/env HTTP/1.1" 401 2188 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
4 alerts in 36s. Decision: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.175
16 May 2026
CrowdSec Detection: crowdsecurity/http-probing
95.85.251.175 - - [15/May/2026:19:40:32 +0000] "GET / ...
show more
CrowdSec Detection: crowdsecurity/http-probing
95.85.251.175 - - [15/May/2026:19:40:32 +0000] "GET /.env HTTP/1.1" 404 6201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
7 alerts in 79s. Decision: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.38
16 May 2026
CrowdSec Detection: crowdsecurity/http-path-traversal-probing
2.26.123.38 - - [14/May/2026:14:39:41 ...
show more
CrowdSec Detection: crowdsecurity/http-path-traversal-probing
2.26.123.38 - - [14/May/2026:14:39:41 +0000] "GET /api/v1/pods HTTP/1.1" 404 15712 "-" "python-requests/2.31.0"
20 alerts in 65s. Decision: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.78
16 May 2026
CrowdSec Detection: crowdsecurity/http-path-traversal-probing
2.26.122.78 - - [15/May/2026:02:54:59 ...
show more
CrowdSec Detection: crowdsecurity/http-path-traversal-probing
2.26.122.78 - - [15/May/2026:02:54:59 +0000] "GET /.DS_Store HTTP/1.1" 401 45163 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
24 alerts in 36s. Decision: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.193
16 May 2026
CrowdSec Detection: crowdsecurity/http-probing
95.85.251.193 - - [14/May/2026:13:06:20 +0000] "GET / ...
show more
CrowdSec Detection: crowdsecurity/http-probing
95.85.251.193 - - [14/May/2026:13:06:20 +0000] "GET /backup.sql HTTP/1.1" 403 40114 "-" "python-requests/2.31.0"
21 alerts in 64s. Decision: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.157
16 May 2026
CrowdSec Detection: crowdsecurity/http-probing
144.31.53.157 - - [16/May/2026:09:38:56 +0000] "GET / ...
show more
CrowdSec Detection: crowdsecurity/http-probing
144.31.53.157 - - [16/May/2026:09:38:56 +0000] "GET /wp-config.php~ HTTP/1.1" 403 2766 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
28 alerts in 49s. Decision: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.124
16 May 2026
CrowdSec Detection: crowdsecurity/http-probing
144.31.238.124 - - [14/May/2026:19:46:17 +0000] "GET ...
show more
CrowdSec Detection: crowdsecurity/http-probing
144.31.238.124 - - [14/May/2026:19:46:17 +0000] "GET /info.php HTTP/1.1" 403 16319 "-" "python-requests/2.31.0"
14 alerts in 84s. Decision: ban 4h
show less
Web App Attack
๐ซ๐ฎ
31.76.245.233
16 May 2026
CrowdSec Detection: crowdsecurity/http-probing
31.76.245.233 - - [15/May/2026:20:10:45 +0000] "GET / ...
show more
CrowdSec Detection: crowdsecurity/http-probing
31.76.245.233 - - [15/May/2026:20:10:45 +0000] "GET /.htpasswd HTTP/1.1" 403 3551 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
16 alerts in 67s. Decision: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.124
16 May 2026
CrowdSec Detection: crowdsecurity/http-backdoors-attempts
144.31.53.124 - - [14/May/2026:18:39:58 +0 ...
show more
CrowdSec Detection: crowdsecurity/http-backdoors-attempts
144.31.53.124 - - [14/May/2026:18:39:58 +0000] "GET /wp-config.old HTTP/1.1" 403 44384 "-" "Go-http-client/1.1"
13 alerts in 23s. Decision: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.25
16 May 2026
CrowdSec Detection: crowdsecurity/http-backdoors-attempts
144.31.238.25 - - [14/May/2026:18:43:58 +0 ...
show more
CrowdSec Detection: crowdsecurity/http-backdoors-attempts
144.31.238.25 - - [14/May/2026:18:43:58 +0000] "GET /ecp/default.aspx HTTP/1.1" 401 38589 "-" "python-requests/2.31.0"
35 alerts in 38s. Decision: ban 4h
show less
Web App Attack
๐ซ๐ฎ
31.76.245.231
16 May 2026
CrowdSec Detection: crowdsecurity/http-crawl-non_statics
31.76.245.231 - - [16/May/2026:04:50:40 +00 ...
show more
CrowdSec Detection: crowdsecurity/http-crawl-non_statics
31.76.245.231 - - [16/May/2026:04:50:40 +0000] "GET /boaform/admin/formLogin HTTP/1.1" 401 44387 "-" "Go-http-client/1.1"
34 alerts in 52s. Decision: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.155
16 May 2026
CrowdSec Detection: crowdsecurity/http-crawl-non_statics
144.31.148.155 - - [15/May/2026:09:31:41 +0 ...
show more
CrowdSec Detection: crowdsecurity/http-crawl-non_statics
144.31.148.155 - - [15/May/2026:09:31:41 +0000] "GET /Autodiscover/Autodiscover.xml HTTP/1.1" 403 15888 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
16 alerts in 73s. Decision: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.97
16 May 2026
CrowdSec Detection: crowdsecurity/http-crawl-non_statics
144.31.169.97 - - [15/May/2026:22:17:36 +00 ...
show more
CrowdSec Detection: crowdsecurity/http-crawl-non_statics
144.31.169.97 - - [15/May/2026:22:17:36 +0000] "GET /remote/logincheck HTTP/1.1" 403 44797 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
33 alerts in 36s. Decision: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.245
16 May 2026
CrowdSec Detection: crowdsecurity/http-wordpress-scan
2.26.123.245 - - [16/May/2026:08:50:29 +0000] ...
show more
CrowdSec Detection: crowdsecurity/http-wordpress-scan
2.26.123.245 - - [16/May/2026:08:50:29 +0000] "GET /console/ HTTP/1.1" 403 4959 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
30 alerts in 18s. Decision: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.93
16 May 2026
CrowdSec Detection: crowdsecurity/http-backdoors-attempts
95.85.251.93 - - [14/May/2026:19:02:30 +00 ...
show more
CrowdSec Detection: crowdsecurity/http-backdoors-attempts
95.85.251.93 - - [14/May/2026:19:02:30 +0000] "GET /.htaccess HTTP/1.1" 401 40104 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"
13 alerts in 49s. Decision: ban 4h
show less
Web App Attack