๐ท๐บ
176.32.33.99
18 Sep 2026
block ruleset ADD2CA495F319B998688CC149C6EED3147847B03
Web App Attack
Hacking
๐ณ๐ฑ
89.125.144.17
18 Sep 2026
Automated sensor: 3 HTTP connection/probe attempts over the last 24h (latest 2026-07-29T05:53:14+00: ...
show more
Automated sensor: 3 HTTP connection/probe attempts over the last 24h (latest 2026-07-29T05:53:14+00:00).
show less
Port Scan
๐ท๐บ
46.17.40.216
18 Sep 2026
BnL877: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ...
show more
BnL877: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 443 - [04/Sep/2026:14:32:56 +0000] "GET [redacted] HTTP/1.1" 503 2556 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0"
show less
Bad Web Bot
Web Spam
๐ฆ๐ช
77.74.201.44
18 Sep 2026
Unauthorized connection attempt to port from 77.74.201.44
Port Scan
Exploited Host
Brute-Force
๐บ๐ธ
38.114.100.185
18 Sep 2026
BnL453: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ...
show more
BnL453: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 443 - [10/Sep/2026:12:17:39 +0000] "GET [redacted] HTTP/1.1" 403 2944 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web Spam
๐ท๐บ
45.136.245.159
18 Sep 2026
Asking over plain http and never following the redirect served โ a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served โ a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-10 15:53 UTC
show less
Bad Web Bot
Web Spam
๐ฉ๐ช
103.31.76.81
18 Sep 2026
Blocked by UFW on Mailcow [null/27] Source port: N/A TTL: 64 Packet length: 71 TOS: 0x00
Port Scan
Brute-Force
Exploited Host
๐ธ๐ฌ
192.124.176.34
18 Sep 2026
firewall-block, port(s): /31
Port Scan
Brute-Force
Exploited Host
๐ท๐บ
46.29.164.19
18 Sep 2026
Did not receive identification string from 46.29.164.19 port 43058
Brute-Force
SSH
๐ท๐บ
185.22.152.52
18 Sep 2026
firewall-block, port(s): /14
Port Scan
Exploited Host
Brute-Force
๐บ๐ธ
166.1.18.65
18 Sep 2026
WAF | Sensitive file probe detected - looking for .env
Hacking
Web App Attack
๐ท๐บ
91.206.92.8
18 Sep 2026
Blocked by UFW on Mailcow [null/3] Source port: N/A TTL: 245 Packet length: 78 TOS: 0x00
Port Scan
Brute-Force
Exploited Host
๐ท๐บ
45.135.134.4
18 Sep 2026
trying to access non-authorized port
Port Scan
๐ฉ๐ช
144.31.223.30
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.223.30 - - [16/May/2026:11:28:58 +0000] "GET /v2 ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.223.30 - - [16/May/2026:11:28:58 +0000] "GET /v2/_catalog HTTP/1.1" 401 43450 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
4 alerts in 32s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.120
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.148.120 - - [14/May/2026:14:53:02 +0000] "GET /gr ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.148.120 - - [14/May/2026:14:53:02 +0000] "GET /graphql HTTP/1.1" 403 2936 "-" "Go-http-client/1.1"
5 alerts in 16s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.135
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.223.135 - - [16/May/2026:04:21:41 +0000] "GET /Autodisco ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.223.135 - - [16/May/2026:04:21:41 +0000] "GET /Autodiscover/Autodiscover.xml HTTP/1.1" 401 49806 "-" "node-fetch/3.3.2"
14 alerts in 54s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.46
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
95.85.251.46 - - [14/May/2026:06:51:04 +0000] "GET /d ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
95.85.251.46 - - [14/May/2026:06:51:04 +0000] "GET /debug/pprof/ HTTP/1.1" 403 44043 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
19 alerts in 8s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.128
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.169.128 - - [15/May/2026:14:34:55 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.169.128 - - [15/May/2026:14:34:55 +0000] "GET /ecp/default.aspx HTTP/1.1" 404 21407 "-" "libwww-perl/6.72"
9 alerts in 13s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.126
17 May 2026
CrowdSec: crowdsecurity/http-probing
95.85.251.126 - - [14/May/2026:16:09:34 +0000] "GET /server-sta ...
show more
CrowdSec: crowdsecurity/http-probing
95.85.251.126 - - [14/May/2026:16:09:34 +0000] "GET /server-status HTTP/1.1" 404 33763 "-" "okhttp/4.12.0"
10 alerts in 22s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.142
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.223.142 - - [14/May/2026:23:47:52 +0000] "GET /gr ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.223.142 - - [14/May/2026:23:47:52 +0000] "GET /graphql HTTP/1.1" 403 5990 "-" "Go-http-client/2.0"
17 alerts in 60s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.50
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.148.50 - - [14/May/2026:16:45:29 +0000] "GET /te ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.148.50 - - [14/May/2026:16:45:29 +0000] "GET /test.php HTTP/1.1" 403 31149 "-" "libwww-perl/6.72"
26 alerts in 35s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.137
17 May 2026
CrowdSec: crowdsecurity/http-probing
2.26.123.137 - - [15/May/2026:03:07:21 +0000] "GET /boaform/adm ...
show more
CrowdSec: crowdsecurity/http-probing
2.26.123.137 - - [15/May/2026:03:07:21 +0000] "GET /boaform/admin/formLogin HTTP/1.1" 401 32873 "-" "curl/8.7.1"
25 alerts in 42s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.220
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.148.220 - - [15/May/2026:14:15:47 +0000] ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.148.220 - - [15/May/2026:14:15:47 +0000] "GET /Autodiscover/Autodiscover.xml HTTP/1.1" 403 9370 "-" "python-requests/2.31.0"
25 alerts in 59s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.173
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.173 - - [15/May/2026:01:43:43 +0000] "GET /ph ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.173 - - [15/May/2026:01:43:43 +0000] "GET /phpmyadmin/ HTTP/1.1" 403 35629 "-" "curl/8.7.1"
18 alerts in 31s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.228
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.148.228 - - [15/May/2026:02:33:35 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.148.228 - - [15/May/2026:02:33:35 +0000] "GET /api/graphql HTTP/1.1" 403 39574 "-" "python-requests/2.31.0"
20 alerts in 10s | Action: ban 4h
show less
Web App Attack