๐ซ๐ฎ
144.31.53.78
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.53.78 - - [16/May/2026:14:17:13 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.53.78 - - [16/May/2026:14:17:13 +0000] "GET /cgi-bin/luci HTTP/1.1" 404 44116 "-" "HTTPie/3.2.2"
4 alerts in 38s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.150
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
2.26.123.150 - - [16/May/2026:17:09:00 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
2.26.123.150 - - [16/May/2026:17:09:00 +0000] "GET /dump.sql HTTP/1.1" 403 32349 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
17 alerts in 8s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.64
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.223.64 - - [14/May/2026:14:00:12 +0000] "GET /ap ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.223.64 - - [14/May/2026:14:00:12 +0000] "GET /api/v1/namespaces HTTP/1.1" 404 21192 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
7 alerts in 49s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.124
17 May 2026
CrowdSec: crowdsecurity/http-probing
2.26.123.124 - - [16/May/2026:12:20:29 +0000] "GET /wp-config.p ...
show more
CrowdSec: crowdsecurity/http-probing
2.26.123.124 - - [16/May/2026:12:20:29 +0000] "GET /wp-config.php.bak HTTP/1.1" 404 49326 "-" "libwww-perl/6.72"
4 alerts in 10s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.10
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
2.26.123.10 - - [14/May/2026:23:04:49 +0000] "GET /Au ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
2.26.123.10 - - [14/May/2026:23:04:49 +0000] "GET /Autodiscover/Autodiscover.xml HTTP/1.1" 404 29428 "-" "python-requests/2.31.0"
24 alerts in 38s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.41
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.41 - - [16/May/2026:20:47:37 +0000] "GET /wp- ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.41 - - [16/May/2026:20:47:37 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 401 42267 "-" "curl/8.4.0"
19 alerts in 60s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.231
17 May 2026
CrowdSec: crowdsecurity/ssh-slow-bf
43 auth failures in 295s
sshd[6348]: Failed password for ec2-use ...
show more
CrowdSec: crowdsecurity/ssh-slow-bf
43 auth failures in 295s
sshd[6348]: Failed password for ec2-user from 95.85.251.231 port 51006 ssh2
Action: ban 4h
show less
Brute-Force
SSH
๐ซ๐ฎ
144.31.53.91
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.53.91 - - [16/May/2026:21:55:23 +0000] "GET /user/login ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.53.91 - - [16/May/2026:21:55:23 +0000] "GET /user/login HTTP/1.1" 403 30665 "-" "libwww-perl/6.72"
6 alerts in 33s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
31.76.244.93
17 May 2026
CrowdSec: crowdsecurity/http-probing
31.76.244.93 - - [14/May/2026:23:03:04 +0000] "GET /phpinfo.php ...
show more
CrowdSec: crowdsecurity/http-probing
31.76.244.93 - - [14/May/2026:23:03:04 +0000] "GET /phpinfo.php HTTP/1.1" 401 34674 "-" "python-requests/2.32.3"
24 alerts in 34s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.55
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
2.26.122.55 - - [16/May/2026:16:42:41 +0000] "GET /eval ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
2.26.122.55 - - [16/May/2026:16:42:41 +0000] "GET /eval HTTP/1.1" 401 29001 "-" "okhttp/4.12.0"
16 alerts in 53s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.25
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
95.85.251.25 - - [15/May/2026:16:12:47 +0000] "GET /api ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
95.85.251.25 - - [15/May/2026:16:12:47 +0000] "GET /api/graphql HTTP/1.1" 404 37520 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv)"
19 alerts in 9s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.20
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
2.26.122.20 - - [14/May/2026:18:47:26 +0000] "GET /sh ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
2.26.122.20 - - [14/May/2026:18:47:26 +0000] "GET /shell HTTP/1.1" 404 1643 "-" "curl/8.4.0"
17 alerts in 58s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
31.76.244.37
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
31.76.244.37 - - [16/May/2026:04:34:25 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
31.76.244.37 - - [16/May/2026:04:34:25 +0000] "GET /wp-admin/ HTTP/1.1" 403 3254 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
22 alerts in 20s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.3
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
2.26.122.3 - - [14/May/2026:21:53:44 +0000] "GET /cgi-bi ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
2.26.122.3 - - [14/May/2026:21:53:44 +0000] "GET /cgi-bin/luci HTTP/1.1" 403 16193 "-" "okhttp/4.12.0"
17 alerts in 44s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.48
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
2.26.122.48 - - [16/May/2026:23:49:55 +0000] "GET /invo ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
2.26.122.48 - - [16/May/2026:23:49:55 +0000] "GET /invoker/JMXInvokerServlet HTTP/1.1" 401 20441 "-" "node-fetch/3.3.2"
19 alerts in 53s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
31.76.244.98
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
31.76.244.98 - - [16/May/2026:16:34:32 +0000] "GET /con ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
31.76.244.98 - - [16/May/2026:16:34:32 +0000] "GET /config.php HTTP/1.1" 401 23632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
14 alerts in 58s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.142
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
95.85.251.142 - - [16/May/2026:10:56:36 +0000] "GET /.en ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
95.85.251.142 - - [16/May/2026:10:56:36 +0000] "GET /.env HTTP/1.1" 403 12522 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
8 alerts in 59s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.238
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.53.238 - - [15/May/2026:02:08:16 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.53.238 - - [15/May/2026:02:08:16 +0000] "GET /dump.sql HTTP/1.1" 403 29681 "-" "python-requests/2.32.3"
21 alerts in 29s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.2
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.169.2 - - [15/May/2026:09:41:13 +0000] "GET /phpm ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.169.2 - - [15/May/2026:09:41:13 +0000] "GET /phpmyadmin/ HTTP/1.1" 404 45246 "-" "Go-http-client/1.1"
25 alerts in 21s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.52
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.238.52 - - [15/May/2026:02:40:29 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.238.52 - - [15/May/2026:02:40:29 +0000] "GET /api/v1/pods HTTP/1.1" 403 12645 "-" "python-requests/2.31.0"
5 alerts in 13s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.31
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.223.31 - - [14/May/2026:13:29:42 +0000] "GET /wp-admin/ ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.223.31 - - [14/May/2026:13:29:42 +0000] "GET /wp-admin/ HTTP/1.1" 401 10384 "-" "curl/8.7.1"
25 alerts in 23s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.243
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.238.243 - - [16/May/2026:21:50:39 +0000] "GET /.DS_Store ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.238.243 - - [16/May/2026:21:50:39 +0000] "GET /.DS_Store HTTP/1.1" 404 34644 "-" "HTTPie/3.2.2"
10 alerts in 43s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.240
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
2.26.123.240 - - [16/May/2026:20:26:02 +0000] "GET /conf ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
2.26.123.240 - - [16/May/2026:20:26:02 +0000] "GET /config.php HTTP/1.1" 403 36992 "-" "curl/8.7.1"
5 alerts in 13s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.75
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.223.75 - - [16/May/2026:22:21:02 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.223.75 - - [16/May/2026:22:21:02 +0000] "GET /dump.sql HTTP/1.1" 403 14700 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv)"
13 alerts in 54s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.70
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.53.70 - - [15/May/2026:22:42:03 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.53.70 - - [15/May/2026:22:42:03 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 19080 "-" "axios/1.6.8"
18 alerts in 58s | Action: ban 4h
show less
Web App Attack