๐ต๐ฑ
31.76.251.28
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.251.28 - - [16/May/2026:02:55:07 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.251.28 - - [16/May/2026:02:55:07 +0000] "GET /.env HTTP/1.1" 401 26174 "-" "python-requests/2.31.0"
11 alerts in 40s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
31.76.244.39
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.244.39 - - [15/May/2026:20:58:44 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.244.39 - - [15/May/2026:20:58:44 +0000] "GET /wp-config.php~ HTTP/1.1" 401 20397 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
19 alerts in 47s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.241
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
2.26.122.241 - - [15/May/2026:15:33:03 +0000] "GET /.htp ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
2.26.122.241 - - [15/May/2026:15:33:03 +0000] "GET /.htpasswd HTTP/1.1" 401 18736 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
9 alerts in 52s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.144
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.238.144 - - [14/May/2026:06:21:09 +0000] "GET /w ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.238.144 - - [14/May/2026:06:21:09 +0000] "GET /wp-json/wp/v2/users HTTP/1.1" 404 39301 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"
30 alerts in 20s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.220
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
2.26.122.220 - - [15/May/2026:11:30:21 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
2.26.122.220 - - [15/May/2026:11:30:21 +0000] "GET /exchange/autodiscover HTTP/1.1" 404 11073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
5 alerts in 41s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.201
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
95.85.251.201 - - [16/May/2026:21:28:51 +0000] " ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
95.85.251.201 - - [16/May/2026:21:28:51 +0000] "GET /wp-config.old HTTP/1.1" 404 47238 "-" "python-requests/2.31.0"
9 alerts in 11s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.184
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
2.26.122.184 - - [15/May/2026:20:28:56 +0000] "GET /invo ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
2.26.122.184 - - [15/May/2026:20:28:56 +0000] "GET /invoker/JMXInvokerServlet HTTP/1.1" 401 19328 "-" "python-requests/2.31.0"
15 alerts in 37s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.96
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.96 - - [15/May/2026:03:11:14 +0000] "GET /use ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.96 - - [15/May/2026:03:11:14 +0000] "GET /user/login HTTP/1.1" 404 29060 "-" "Mozilla/5.0 zgrab/0.x"
5 alerts in 55s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.33
17 May 2026
CrowdSec: crowdsecurity/ssh-slow-bf
63 auth failures in 66s
sshd[18198]: Failed password for vagrant ...
show more
CrowdSec: crowdsecurity/ssh-slow-bf
63 auth failures in 66s
sshd[18198]: Failed password for vagrant from 144.31.223.33 port 62757 ssh2
Action: ban 4h
show less
Brute-Force
SSH
๐ซ๐ฎ
2.26.122.229
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
2.26.122.229 - - [14/May/2026:15:18:10 +0000] "GET /serv ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
2.26.122.229 - - [14/May/2026:15:18:10 +0000] "GET /server-status HTTP/1.1" 404 39994 "-" "curl/8.7.1"
17 alerts in 9s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.193
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.148.193 - - [15/May/2026:15:02:45 +0000] "GET /. ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.148.193 - - [15/May/2026:15:02:45 +0000] "GET /.git/config HTTP/1.1" 404 47682 "-" "libwww-perl/6.72"
28 alerts in 12s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.83
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.238.83 - - [15/May/2026:00:52:36 +0000] "GET /wp- ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.238.83 - - [15/May/2026:00:52:36 +0000] "GET /wp-json/wp/v2/users HTTP/1.1" 403 30958 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
17 alerts in 12s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.72
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.148.72 - - [16/May/2026:07:21:23 +0000] "GET /wp ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.148.72 - - [16/May/2026:07:21:23 +0000] "GET /wp-admin/ HTTP/1.1" 401 31583 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
15 alerts in 27s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
31.76.245.103
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
31.76.245.103 - - [14/May/2026:12:18:14 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
31.76.245.103 - - [14/May/2026:12:18:14 +0000] "GET /wp-config.php.bak HTTP/1.1" 404 8179 "-" "python-requests/2.32.3"
29 alerts in 43s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.251
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.148.251 - - [16/May/2026:04:02:45 +0000] ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.148.251 - - [16/May/2026:04:02:45 +0000] "GET /config.php HTTP/1.1" 403 25918 "-" "Go-http-client/1.1"
15 alerts in 42s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.77
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.53.77 - - [14/May/2026:17:24:00 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.53.77 - - [14/May/2026:17:24:00 +0000] "GET /console/ HTTP/1.1" 404 13799 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
5 alerts in 47s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.170
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.53.170 - - [16/May/2026:06:30:13 +0000] "GET /api/v1/pod ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.53.170 - - [16/May/2026:06:30:13 +0000] "GET /api/v1/pods HTTP/1.1" 404 29297 "-" "axios/1.6.8"
14 alerts in 48s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.150
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.148.150 - - [16/May/2026:23:38:50 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.148.150 - - [16/May/2026:23:38:50 +0000] "GET /.git/config HTTP/1.1" 401 47171 "-" "okhttp/4.12.0"
10 alerts in 26s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.88
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.223.88 - - [14/May/2026:12:54:53 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.223.88 - - [14/May/2026:12:54:53 +0000] "GET /.git/HEAD HTTP/1.1" 404 7058 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
4 alerts in 33s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
31.76.245.141
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.245.141 - - [16/May/2026:22:08:49 +0000] " ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.245.141 - - [16/May/2026:22:08:49 +0000] "GET /eval HTTP/1.1" 401 10793 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
7 alerts in 37s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.48
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.169.48 - - [16/May/2026:04:07:06 +0000] "GET /api/v1/pod ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.169.48 - - [16/May/2026:04:07:06 +0000] "GET /api/v1/pods HTTP/1.1" 401 49225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
24 alerts in 17s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.89
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.148.89 - - [15/May/2026:13:38:22 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.148.89 - - [15/May/2026:13:38:22 +0000] "GET /backup.sql HTTP/1.1" 403 7064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
24 alerts in 14s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.222
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.169.222 - - [16/May/2026:02:44:34 +0000] "GET /a ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.169.222 - - [16/May/2026:02:44:34 +0000] "GET /administrator/ HTTP/1.1" 401 3217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
28 alerts in 60s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.154
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
95.85.251.154 - - [14/May/2026:11:41:29 +0000] "GET /.ht ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
95.85.251.154 - - [14/May/2026:11:41:29 +0000] "GET /.htpasswd HTTP/1.1" 404 33846 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
29 alerts in 23s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.147
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.238.147 - - [14/May/2026:12:30:20 +0000] "GET /wp-conten ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.238.147 - - [14/May/2026:12:30:20 +0000] "GET /wp-content/debug.log HTTP/1.1" 404 30457 "-" "Go-http-client/1.1"
6 alerts in 52s | Action: ban 4h
show less
Web App Attack