๐ซ๐ฎ
31.76.245.218
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
31.76.245.218 - - [14/May/2026:11:06:40 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
31.76.245.218 - - [14/May/2026:11:06:40 +0000] "GET /wp-content/uploads/ HTTP/1.1" 403 33976 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
4 alerts in 46s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
31.76.244.8
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
31.76.244.8 - - [15/May/2026:02:45:47 +0000] "GET /.git/ ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
31.76.244.8 - - [15/May/2026:02:45:47 +0000] "GET /.git/HEAD HTTP/1.1" 403 39157 "-" "python-requests/2.32.3"
14 alerts in 11s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
31.76.245.208
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
31.76.245.208 - - [14/May/2026:18:42:56 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
31.76.245.208 - - [14/May/2026:18:42:56 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 403 22804 "-" "Mozilla/5.0 zgrab/0.x"
13 alerts in 15s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.142
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.238.142 - - [15/May/2026:00:26:24 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.238.142 - - [15/May/2026:00:26:24 +0000] "GET /wp-config.php.bak HTTP/1.1" 404 44328 "-" "Go-http-client/2.0"
17 alerts in 28s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.5
17 May 2026
CrowdSec: crowdsecurity/ssh-slow-bf
43 auth failures in 207s
sshd[54749]: Failed password for guest ...
show more
CrowdSec: crowdsecurity/ssh-slow-bf
43 auth failures in 207s
sshd[54749]: Failed password for guest from 2.26.123.5 port 58792 ssh2
Action: ban 4h
show less
Brute-Force
SSH
๐ฉ๐ช
31.76.244.55
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
31.76.244.55 - - [16/May/2026:14:42:41 +0000] "GET /wp-c ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
31.76.244.55 - - [16/May/2026:14:42:41 +0000] "GET /wp-config.php~ HTTP/1.1" 403 37186 "-" "python-requests/2.32.3"
29 alerts in 46s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.73
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
2.26.123.73 - - [14/May/2026:16:22:37 +0000] "GET /remo ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
2.26.123.73 - - [14/May/2026:16:22:37 +0000] "GET /remote/logincheck HTTP/1.1" 404 22350 "-" "curl/8.7.1"
3 alerts in 37s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.208
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
2.26.122.208 - - [15/May/2026:17:03:04 +0000] "GET /solr ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
2.26.122.208 - - [15/May/2026:17:03:04 +0000] "GET /solr/admin/info/system HTTP/1.1" 401 30583 "-" "curl/8.7.1"
18 alerts in 35s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.54
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.148.54 - - [15/May/2026:17:48:33 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.148.54 - - [15/May/2026:17:48:33 +0000] "GET /.git/HEAD HTTP/1.1" 404 25682 "-" "Go-http-client/2.0"
5 alerts in 25s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
31.76.245.6
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
31.76.245.6 - - [15/May/2026:17:29:39 +0000] "GET /w ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
31.76.245.6 - - [15/May/2026:17:29:39 +0000] "GET /wp-cron.php HTTP/1.1" 403 32673 "-" "Mozilla/5.0 zgrab/0.x"
8 alerts in 38s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.213
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.169.213 - - [14/May/2026:09:18:36 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.169.213 - - [14/May/2026:09:18:36 +0000] "GET /pma/ HTTP/1.1" 401 39548 "-" "okhttp/4.12.0"
30 alerts in 26s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.34
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.238.34 - - [15/May/2026:21:14:07 +0000] "GET /pm ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.238.34 - - [15/May/2026:21:14:07 +0000] "GET /pma/ HTTP/1.1" 403 36492 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
12 alerts in 31s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.64
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
95.85.251.64 - - [16/May/2026:15:56:14 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
95.85.251.64 - - [16/May/2026:15:56:14 +0000] "GET /api/v1/pods HTTP/1.1" 404 23965 "-" "python-requests/2.32.3"
18 alerts in 12s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.191
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.53.191 - - [16/May/2026:10:29:44 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.53.191 - - [16/May/2026:10:29:44 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 403 8957 "-" "okhttp/4.12.0"
19 alerts in 54s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.202
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.53.202 - - [15/May/2026:01:25:09 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.53.202 - - [15/May/2026:01:25:09 +0000] "GET /wp-admin/ HTTP/1.1" 403 6952 "-" "Go-http-client/1.1"
7 alerts in 13s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.159
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.148.159 - - [14/May/2026:10:04:55 +0000] "GET /administr ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.148.159 - - [14/May/2026:10:04:55 +0000] "GET /administrator/ HTTP/1.1" 403 48823 "-" "python-requests/2.32.3"
20 alerts in 60s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.139
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.148.139 - - [14/May/2026:04:16:17 +0000] "GET /cmd HTTP/ ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.148.139 - - [14/May/2026:04:16:17 +0000] "GET /cmd HTTP/1.1" 404 32233 "-" "python-requests/2.32.3"
22 alerts in 20s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.44
17 May 2026
CrowdSec: crowdsecurity/ssh-slow-bf
18 auth failures in 152s
sshd[44076]: Failed password for jenkin ...
show more
CrowdSec: crowdsecurity/ssh-slow-bf
18 auth failures in 152s
sshd[44076]: Failed password for jenkins from 95.85.251.44 port 42449 ssh2
Action: ban 4h
show less
Brute-Force
SSH
๐ฉ๐ช
144.31.238.17
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.238.17 - - [14/May/2026:08:35:28 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.238.17 - - [14/May/2026:08:35:28 +0000] "GET /wp-json/wp/v2/users HTTP/1.1" 401 7789 "-" "Go-http-client/2.0"
22 alerts in 22s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
31.76.244.99
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
31.76.244.99 - - [15/May/2026:06:57:33 +0000] "GET /m ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
31.76.244.99 - - [15/May/2026:06:57:33 +0000] "GET /manager/status HTTP/1.1" 403 30756 "-" "curl/8.7.1"
4 alerts in 5s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.55
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.238.55 - - [14/May/2026:15:12:12 +0000] "GET /sw ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.238.55 - - [14/May/2026:15:12:12 +0000] "GET /swagger.json HTTP/1.1" 401 49106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
7 alerts in 54s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.205
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.53.205 - - [15/May/2026:10:59:35 +0000] "GET /cgi ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.53.205 - - [15/May/2026:10:59:35 +0000] "GET /cgi-bin/luci HTTP/1.1" 403 3201 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"
22 alerts in 24s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.215
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.53.215 - - [16/May/2026:12:40:40 +0000] "GET /pma ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.53.215 - - [16/May/2026:12:40:40 +0000] "GET /pma/ HTTP/1.1" 401 41424 "-" "axios/1.6.8"
9 alerts in 55s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
31.76.245.75
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.245.75 - - [16/May/2026:06:52:08 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.245.75 - - [16/May/2026:06:52:08 +0000] "GET /solr/admin/info/system HTTP/1.1" 403 5669 "-" "Go-http-client/2.0"
25 alerts in 15s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.24
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
95.85.251.24 - - [15/May/2026:06:23:31 +0000] "GET /b ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
95.85.251.24 - - [15/May/2026:06:23:31 +0000] "GET /boaform/admin/formLogin HTTP/1.1" 403 18766 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
15 alerts in 52s | Action: ban 4h
show less
Web App Attack