๐ฉ๐ช
144.31.148.249
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.148.249 - - [15/May/2026:15:08:57 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.148.249 - - [15/May/2026:15:08:57 +0000] "GET /invoker/JMXInvokerServlet HTTP/1.1" 401 13750 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
13 alerts in 40s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.1
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.148.1 - - [14/May/2026:13:58:48 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.148.1 - - [14/May/2026:13:58:48 +0000] "GET /Autodiscover/Autodiscover.xml HTTP/1.1" 404 18725 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
17 alerts in 20s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.12
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
95.85.251.12 - - [14/May/2026:09:12:41 +0000] "GET /serv ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
95.85.251.12 - - [14/May/2026:09:12:41 +0000] "GET /server-status HTTP/1.1" 401 42337 "-" "node-fetch/3.3.2"
10 alerts in 23s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.175
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
95.85.251.175 - - [14/May/2026:23:38:38 +0000] "GET /deb ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
95.85.251.175 - - [14/May/2026:23:38:38 +0000] "GET /debug/pprof/ HTTP/1.1" 401 504 "-" "axios/1.6.8"
12 alerts in 36s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.28
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.223.28 - - [15/May/2026:02:01:18 +0000] "GET /tel ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.223.28 - - [15/May/2026:02:01:18 +0000] "GET /telescope/requests HTTP/1.1" 401 44817 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv)"
17 alerts in 57s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.102
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
95.85.251.102 - - [14/May/2026:03:15:09 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
95.85.251.102 - - [14/May/2026:03:15:09 +0000] "GET /v2/_catalog HTTP/1.1" 404 17722 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
3 alerts in 53s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.102
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.238.102 - - [14/May/2026:03:24:56 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.238.102 - - [14/May/2026:03:24:56 +0000] "GET /ecp/default.aspx HTTP/1.1" 403 2527 "-" "Wget/1.21.4"
23 alerts in 25s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
31.76.244.208
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.244.208 - - [15/May/2026:05:02:29 +0000] " ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.244.208 - - [15/May/2026:05:02:29 +0000] "GET /console/ HTTP/1.1" 403 48596 "-" "Go-http-client/1.1"
10 alerts in 20s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.84
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.169.84 - - [15/May/2026:17:09:46 +0000] "GET /gr ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.169.84 - - [15/May/2026:17:09:46 +0000] "GET /graphql HTTP/1.1" 404 5532 "-" "okhttp/4.12.0"
30 alerts in 17s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.111
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.148.111 - - [14/May/2026:10:48:08 +0000] ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.148.111 - - [14/May/2026:10:48:08 +0000] "GET /cmd HTTP/1.1" 401 30069 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv)"
17 alerts in 45s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.128
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.53.128 - - [16/May/2026:02:10:58 +0000] " ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.53.128 - - [16/May/2026:02:10:58 +0000] "GET /boaform/admin/formLogin HTTP/1.1" 401 1874 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv)"
15 alerts in 24s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.151
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.238.151 - - [16/May/2026:13:19:40 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.238.151 - - [16/May/2026:13:19:40 +0000] "GET /swagger.json HTTP/1.1" 403 40159 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
28 alerts in 6s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.26
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.223.26 - - [14/May/2026:01:32:18 +0000] "GET /wp ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.223.26 - - [14/May/2026:01:32:18 +0000] "GET /wp-json/wp/v2/users HTTP/1.1" 404 30652 "-" "Go-http-client/2.0"
16 alerts in 57s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.229
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.223.229 - - [15/May/2026:02:00:54 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.223.229 - - [15/May/2026:02:00:54 +0000] "GET /db.sql HTTP/1.1" 403 28822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
15 alerts in 36s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.177
17 May 2026
CrowdSec: crowdsecurity/ssh-slow-bf
70 auth failures in 158s
sshd[21779]: Failed password for deploy ...
show more
CrowdSec: crowdsecurity/ssh-slow-bf
70 auth failures in 158s
sshd[21779]: Failed password for deploy from 144.31.148.177 port 34660 ssh2
Action: ban 4h
show less
Brute-Force
SSH
๐ฉ๐ช
2.26.123.40
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
2.26.123.40 - - [16/May/2026:11:49:52 +0000] "GET /a ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
2.26.123.40 - - [16/May/2026:11:49:52 +0000] "GET /api/v1/namespaces HTTP/1.1" 401 33503 "-" "curl/8.7.1"
7 alerts in 52s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.84
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
2.26.122.84 - - [16/May/2026:12:34:59 +0000] "GET /a ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
2.26.122.84 - - [16/May/2026:12:34:59 +0000] "GET /api/v1/pods HTTP/1.1" 404 30286 "-" "Mozilla/5.0 zgrab/0.x"
10 alerts in 27s | Action: ban 4h
show less
Web App Attack
๐ต๐ฑ
31.76.251.61
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.251.61 - - [15/May/2026:06:56:01 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
31.76.251.61 - - [15/May/2026:06:56:01 +0000] "GET /manager/html HTTP/1.1" 403 13267 "-" "HTTPie/3.2.2"
17 alerts in 50s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.141
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
2.26.123.141 - - [16/May/2026:04:24:44 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
2.26.123.141 - - [16/May/2026:04:24:44 +0000] "GET /backup.sql HTTP/1.1" 403 21245 "-" "python-requests/2.31.0"
28 alerts in 8s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.63
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.169.63 - - [14/May/2026:14:17:54 +0000] "GET /wp- ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.169.63 - - [14/May/2026:14:17:54 +0000] "GET /wp-config.php~ HTTP/1.1" 403 7703 "-" "Wget/1.21.4"
8 alerts in 8s | Action: ban 4h
show less
Web App Attack
๐ต๐ฑ
31.76.251.44
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
31.76.251.44 - - [16/May/2026:04:34:58 +0000] "GET /wp- ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
31.76.251.44 - - [16/May/2026:04:34:58 +0000] "GET /wp-config.php~ HTTP/1.1" 403 174 "-" "libwww-perl/6.72"
5 alerts in 44s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
31.76.245.123
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
31.76.245.123 - - [15/May/2026:11:38:26 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
31.76.245.123 - - [15/May/2026:11:38:26 +0000] "GET /api/v1/namespaces HTTP/1.1" 401 39134 "-" "HTTPie/3.2.2"
9 alerts in 52s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.100
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
95.85.251.100 - - [16/May/2026:17:09:48 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
95.85.251.100 - - [16/May/2026:17:09:48 +0000] "GET /server-status HTTP/1.1" 404 26296 "-" "python-requests/2.32.3"
23 alerts in 22s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.31
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.223.31 - - [16/May/2026:03:03:52 +0000] "GET /swagger.js ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.223.31 - - [16/May/2026:03:03:52 +0000] "GET /swagger.json HTTP/1.1" 404 41825 "-" "python-requests/2.32.3"
8 alerts in 11s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.213
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.169.213 - - [15/May/2026:19:43:52 +0000] "GET /ma ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.169.213 - - [15/May/2026:19:43:52 +0000] "GET /manager/status HTTP/1.1" 403 10696 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
27 alerts in 31s | Action: ban 4h
show less
Web App Attack