๐ฉ๐ช
144.31.223.9
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.223.9 - - [16/May/2026:10:11:35 +0000] "GET /.DS_ ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.223.9 - - [16/May/2026:10:11:35 +0000] "GET /.DS_Store HTTP/1.1" 404 49768 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
25 alerts in 53s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.5
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.223.5 - - [15/May/2026:07:35:10 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.223.5 - - [15/May/2026:07:35:10 +0000] "GET /backup.sql HTTP/1.1" 403 42976 "-" "libwww-perl/6.72"
14 alerts in 52s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
31.76.245.103
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
31.76.245.103 - - [15/May/2026:04:23:12 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
31.76.245.103 - - [15/May/2026:04:23:12 +0000] "GET /wp-content/uploads/ HTTP/1.1" 403 386 "-" "node-fetch/3.3.2"
17 alerts in 28s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
31.76.245.120
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
31.76.245.120 - - [14/May/2026:02:48:08 +0000] "GET /exc ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
31.76.245.120 - - [14/May/2026:02:48:08 +0000] "GET /exchange/autodiscover HTTP/1.1" 404 693 "-" "python-requests/2.32.3"
12 alerts in 52s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
31.76.245.34
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
31.76.245.34 - - [14/May/2026:12:17:16 +0000] "GET /con ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
31.76.245.34 - - [14/May/2026:12:17:16 +0000] "GET /config.php HTTP/1.1" 403 44974 "-" "okhttp/4.12.0"
23 alerts in 10s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.12
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.169.12 - - [15/May/2026:20:17:20 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.169.12 - - [15/May/2026:20:17:20 +0000] "GET /wp-json/wp/v2/users HTTP/1.1" 401 30667 "-" "node-fetch/3.3.2"
10 alerts in 52s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.37
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.148.37 - - [14/May/2026:17:07:22 +0000] " ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.148.37 - - [14/May/2026:17:07:22 +0000] "GET /.env HTTP/1.1" 401 19154 "-" "node-fetch/3.3.2"
18 alerts in 38s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.217
17 May 2026
CrowdSec: crowdsecurity/http-probing
2.26.122.217 - - [15/May/2026:15:15:40 +0000] "GET /api/config ...
show more
CrowdSec: crowdsecurity/http-probing
2.26.122.217 - - [15/May/2026:15:15:40 +0000] "GET /api/config HTTP/1.1" 401 17227 "-" "libwww-perl/6.72"
9 alerts in 18s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.16
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.148.16 - - [16/May/2026:05:35:07 +0000] "GET /so ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.148.16 - - [16/May/2026:05:35:07 +0000] "GET /solr/admin/info/system HTTP/1.1" 401 25994 "-" "Wget/1.21.4"
11 alerts in 35s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.15
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.148.15 - - [14/May/2026:00:46:49 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.148.15 - - [14/May/2026:00:46:49 +0000] "GET /api/graphql HTTP/1.1" 403 41249 "-" "HTTPie/3.2.2"
24 alerts in 30s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.208
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.238.208 - - [16/May/2026:08:30:38 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.238.208 - - [16/May/2026:08:30:38 +0000] "GET /.htaccess HTTP/1.1" 404 9467 "-" "Go-http-client/1.1"
4 alerts in 28s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.158
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
2.26.122.158 - - [16/May/2026:20:00:31 +0000] "GET /.git ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
2.26.122.158 - - [16/May/2026:20:00:31 +0000] "GET /.git/config HTTP/1.1" 403 35151 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv)"
5 alerts in 42s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.73
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.53.73 - - [14/May/2026:20:17:32 +0000] "GET /db.s ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.53.73 - - [14/May/2026:20:17:32 +0000] "GET /db.sql HTTP/1.1" 403 9668 "-" "python-requests/2.32.3"
30 alerts in 41s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.78
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.53.78 - - [16/May/2026:14:17:13 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.53.78 - - [16/May/2026:14:17:13 +0000] "GET /cgi-bin/luci HTTP/1.1" 404 44116 "-" "HTTPie/3.2.2"
4 alerts in 38s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.150
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
2.26.123.150 - - [16/May/2026:17:09:00 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
2.26.123.150 - - [16/May/2026:17:09:00 +0000] "GET /dump.sql HTTP/1.1" 403 32349 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
17 alerts in 8s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.64
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.223.64 - - [14/May/2026:14:00:12 +0000] "GET /ap ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.223.64 - - [14/May/2026:14:00:12 +0000] "GET /api/v1/namespaces HTTP/1.1" 404 21192 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
7 alerts in 49s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.124
17 May 2026
CrowdSec: crowdsecurity/http-probing
2.26.123.124 - - [16/May/2026:12:20:29 +0000] "GET /wp-config.p ...
show more
CrowdSec: crowdsecurity/http-probing
2.26.123.124 - - [16/May/2026:12:20:29 +0000] "GET /wp-config.php.bak HTTP/1.1" 404 49326 "-" "libwww-perl/6.72"
4 alerts in 10s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.10
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
2.26.123.10 - - [14/May/2026:23:04:49 +0000] "GET /Au ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
2.26.123.10 - - [14/May/2026:23:04:49 +0000] "GET /Autodiscover/Autodiscover.xml HTTP/1.1" 404 29428 "-" "python-requests/2.31.0"
24 alerts in 38s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.41
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.41 - - [16/May/2026:20:47:37 +0000] "GET /wp- ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.41 - - [16/May/2026:20:47:37 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 401 42267 "-" "curl/8.4.0"
19 alerts in 60s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.231
17 May 2026
CrowdSec: crowdsecurity/ssh-slow-bf
43 auth failures in 295s
sshd[6348]: Failed password for ec2-use ...
show more
CrowdSec: crowdsecurity/ssh-slow-bf
43 auth failures in 295s
sshd[6348]: Failed password for ec2-user from 95.85.251.231 port 51006 ssh2
Action: ban 4h
show less
Brute-Force
SSH
๐ซ๐ฎ
144.31.53.91
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.53.91 - - [16/May/2026:21:55:23 +0000] "GET /user/login ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.53.91 - - [16/May/2026:21:55:23 +0000] "GET /user/login HTTP/1.1" 403 30665 "-" "libwww-perl/6.72"
6 alerts in 33s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
31.76.244.93
17 May 2026
CrowdSec: crowdsecurity/http-probing
31.76.244.93 - - [14/May/2026:23:03:04 +0000] "GET /phpinfo.php ...
show more
CrowdSec: crowdsecurity/http-probing
31.76.244.93 - - [14/May/2026:23:03:04 +0000] "GET /phpinfo.php HTTP/1.1" 401 34674 "-" "python-requests/2.32.3"
24 alerts in 34s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.55
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
2.26.122.55 - - [16/May/2026:16:42:41 +0000] "GET /eval ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
2.26.122.55 - - [16/May/2026:16:42:41 +0000] "GET /eval HTTP/1.1" 401 29001 "-" "okhttp/4.12.0"
16 alerts in 53s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.25
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
95.85.251.25 - - [15/May/2026:16:12:47 +0000] "GET /api ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
95.85.251.25 - - [15/May/2026:16:12:47 +0000] "GET /api/graphql HTTP/1.1" 404 37520 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv)"
19 alerts in 9s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.20
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
2.26.122.20 - - [14/May/2026:18:47:26 +0000] "GET /sh ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
2.26.122.20 - - [14/May/2026:18:47:26 +0000] "GET /shell HTTP/1.1" 404 1643 "-" "curl/8.4.0"
17 alerts in 58s | Action: ban 4h
show less
Web App Attack