๐ซ๐ฎ
95.85.251.110
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
95.85.251.110 - - [16/May/2026:10:51:38 +0000] " ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
95.85.251.110 - - [16/May/2026:10:51:38 +0000] "GET /wp-json/wp/v2/users HTTP/1.1" 404 9905 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
29 alerts in 9s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.54
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.238.54 - - [14/May/2026:09:05:40 +0000] "GET /v2/ ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.238.54 - - [14/May/2026:09:05:40 +0000] "GET /v2/_catalog HTTP/1.1" 403 16727 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
17 alerts in 33s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
31.76.244.93
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
31.76.244.93 - - [14/May/2026:12:50:48 +0000] "GET /wp- ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
31.76.244.93 - - [14/May/2026:12:50:48 +0000] "GET /wp-json/wp/v2/users HTTP/1.1" 404 38162 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv)"
5 alerts in 19s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.238
17 May 2026
CrowdSec: crowdsecurity/ssh-bf
67 auth failures in 141s
sshd[60599]: Failed password for user from 1 ...
show more
CrowdSec: crowdsecurity/ssh-bf
67 auth failures in 141s
sshd[60599]: Failed password for user from 144.31.169.238 port 54888 ssh2
Action: ban 4h
show less
Brute-Force
SSH
๐ซ๐ฎ
144.31.169.22
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.169.22 - - [14/May/2026:08:27:29 +0000] "GET /con ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.169.22 - - [14/May/2026:08:27:29 +0000] "GET /config.php HTTP/1.1" 401 30619 "-" "Mozilla/5.0 zgrab/0.x"
30 alerts in 38s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.26
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
2.26.122.26 - - [14/May/2026:03:12:43 +0000] "GET /Au ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
2.26.122.26 - - [14/May/2026:03:12:43 +0000] "GET /Autodiscover/Autodiscover.xml HTTP/1.1" 401 32907 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
6 alerts in 37s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
31.76.244.6
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.244.6 - - [16/May/2026:06:40:53 +0000] "GE ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.244.6 - - [16/May/2026:06:40:53 +0000] "GET /wp-login.php HTTP/1.1" 403 33032 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
13 alerts in 41s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.202
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.53.202 - - [16/May/2026:13:49:38 +0000] "GET /wp- ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.53.202 - - [16/May/2026:13:49:38 +0000] "GET /wp-json/wp/v2/users HTTP/1.1" 404 41068 "-" "node-fetch/3.3.2"
29 alerts in 10s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.126
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.148.126 - - [15/May/2026:01:35:21 +0000] "GET /actuator/ ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.148.126 - - [15/May/2026:01:35:21 +0000] "GET /actuator/health HTTP/1.1" 404 33903 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
21 alerts in 39s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.127
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.148.127 - - [14/May/2026:07:18:11 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.148.127 - - [14/May/2026:07:18:11 +0000] "GET /xmlrpc.php HTTP/1.1" 403 45934 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
26 alerts in 49s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.172
17 May 2026
CrowdSec: crowdsecurity/http-probing
95.85.251.172 - - [14/May/2026:03:50:47 +0000] "GET /.aws/crede ...
show more
CrowdSec: crowdsecurity/http-probing
95.85.251.172 - - [14/May/2026:03:50:47 +0000] "GET /.aws/credentials HTTP/1.1" 403 48638 "-" "Go-http-client/2.0"
8 alerts in 24s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
31.76.244.52
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
31.76.244.52 - - [14/May/2026:12:11:10 +0000] "GET /a ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
31.76.244.52 - - [14/May/2026:12:11:10 +0000] "GET /administrator/ HTTP/1.1" 404 8459 "-" "axios/1.6.8"
5 alerts in 58s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.224
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.238.224 - - [14/May/2026:15:43:32 +0000] ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.238.224 - - [14/May/2026:15:43:32 +0000] "GET /actuator/health HTTP/1.1" 401 23707 "-" "Go-http-client/2.0"
16 alerts in 16s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.38
17 May 2026
CrowdSec: crowdsecurity/http-probing
2.26.123.38 - - [14/May/2026:15:25:42 +0000] "GET /telescope/re ...
show more
CrowdSec: crowdsecurity/http-probing
2.26.123.38 - - [14/May/2026:15:25:42 +0000] "GET /telescope/requests HTTP/1.1" 403 43212 "-" "node-fetch/3.3.2"
25 alerts in 56s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
31.76.245.158
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
31.76.245.158 - - [15/May/2026:03:04:41 +0000] "GET /wp- ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
31.76.245.158 - - [15/May/2026:03:04:41 +0000] "GET /wp-admin/ HTTP/1.1" 401 42151 "-" "okhttp/4.12.0"
6 alerts in 12s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.242
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
95.85.251.242 - - [16/May/2026:15:45:52 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
95.85.251.242 - - [16/May/2026:15:45:52 +0000] "GET /manager/status HTTP/1.1" 404 27062 "-" "curl/8.4.0"
9 alerts in 43s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.150
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
2.26.123.150 - - [15/May/2026:08:32:53 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
2.26.123.150 - - [15/May/2026:08:32:53 +0000] "GET /.htaccess HTTP/1.1" 401 16917 "-" "python-requests/2.31.0"
21 alerts in 56s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.20
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.148.20 - - [15/May/2026:16:11:35 +0000] "GET /eva ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.148.20 - - [15/May/2026:16:11:35 +0000] "GET /eval HTTP/1.1" 404 35687 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
29 alerts in 11s | Action: ban 4h
show less
Web App Attack
๐ต๐ฑ
31.76.251.57
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
31.76.251.57 - - [14/May/2026:18:33:48 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
31.76.251.57 - - [14/May/2026:18:33:48 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 401 39149 "-" "HTTPie/3.2.2"
10 alerts in 49s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.156
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.238.156 - - [15/May/2026:18:28:52 +0000] "GET /w ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.238.156 - - [15/May/2026:18:28:52 +0000] "GET /wp-login.php HTTP/1.1" 403 5301 "-" "python-requests/2.32.3"
12 alerts in 58s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.96
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.53.96 - - [15/May/2026:14:55:38 +0000] "GET /conf ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.53.96 - - [15/May/2026:14:55:38 +0000] "GET /config.php HTTP/1.1" 403 34289 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"
18 alerts in 34s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
31.76.244.9
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.244.9 - - [15/May/2026:14:31:53 +0000] "GE ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.244.9 - - [15/May/2026:14:31:53 +0000] "GET /telescope/requests HTTP/1.1" 403 34839 "-" "okhttp/4.12.0"
10 alerts in 26s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.63
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.63 - - [16/May/2026:11:54:27 +0000] "GET /wp- ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.63 - - [16/May/2026:11:54:27 +0000] "GET /wp-json/wp/v2/users HTTP/1.1" 404 34672 "-" "libwww-perl/6.72"
26 alerts in 12s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.103
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.238.103 - - [15/May/2026:10:57:22 +0000] "GET /e ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.238.103 - - [15/May/2026:10:57:22 +0000] "GET /exchange/autodiscover HTTP/1.1" 404 7642 "-" "curl/8.7.1"
17 alerts in 54s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.80
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
2.26.122.80 - - [15/May/2026:01:47:02 +0000] "GET /.env ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
2.26.122.80 - - [15/May/2026:01:47:02 +0000] "GET /.env HTTP/1.1" 401 34604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
10 alerts in 25s | Action: ban 4h
show less
Web App Attack