๐ซ๐ฎ
144.31.53.215
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.53.215 - - [15/May/2026:14:56:49 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.53.215 - - [15/May/2026:14:56:49 +0000] "GET /admin/ HTTP/1.1" 404 12231 "-" "HTTPie/3.2.2"
30 alerts in 29s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.162
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.148.162 - - [14/May/2026:00:04:14 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.148.162 - - [14/May/2026:00:04:14 +0000] "GET /.well-known/openid-configuration HTTP/1.1" 404 14183 "-" "Mozilla/5.0 zgrab/0.x"
4 alerts in 51s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.8
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.148.8 - - [14/May/2026:04:36:02 +0000] "GET /xmlr ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.148.8 - - [14/May/2026:04:36:02 +0000] "GET /xmlrpc.php HTTP/1.1" 404 13753 "-" "HTTPie/3.2.2"
24 alerts in 58s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.93
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.169.93 - - [15/May/2026:12:15:07 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.169.93 - - [15/May/2026:12:15:07 +0000] "GET /user/login HTTP/1.1" 404 42368 "-" "node-fetch/3.3.2"
29 alerts in 13s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.1
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.148.1 - - [15/May/2026:12:15:29 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.148.1 - - [15/May/2026:12:15:29 +0000] "GET /user/login HTTP/1.1" 403 30000 "-" "node-fetch/3.3.2"
17 alerts in 29s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.59
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.223.59 - - [14/May/2026:07:03:10 +0000] "GET /wp ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.223.59 - - [14/May/2026:07:03:10 +0000] "GET /wp-config.php.bak HTTP/1.1" 401 49790 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
3 alerts in 45s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.166
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.169.166 - - [16/May/2026:07:38:57 +0000] "GET /vendor/ph ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.169.166 - - [16/May/2026:07:38:57 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 401 36594 "-" "Mozilla/5.0 zgrab/0.x"
25 alerts in 42s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.143
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.148.143 - - [14/May/2026:19:54:24 +0000] "GET /pm ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.148.143 - - [14/May/2026:19:54:24 +0000] "GET /pma/ HTTP/1.1" 404 46184 "-" "curl/8.4.0"
22 alerts in 9s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
2.26.123.121
17 May 2026
CrowdSec: crowdsecurity/http-backdoors-attempts
2.26.123.121 - - [16/May/2026:23:12:18 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
2.26.123.121 - - [16/May/2026:23:12:18 +0000] "GET /v2/_catalog HTTP/1.1" 403 4669 "-" "python-requests/2.31.0"
30 alerts in 20s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.14
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
95.85.251.14 - - [14/May/2026:11:15:23 +0000] "G ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
95.85.251.14 - - [14/May/2026:11:15:23 +0000] "GET /_all_dbs HTTP/1.1" 404 9475 "-" "libwww-perl/6.72"
25 alerts in 37s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.148.52
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.148.52 - - [16/May/2026:00:02:35 +0000] "GET /api ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.148.52 - - [16/May/2026:00:02:35 +0000] "GET /api/config HTTP/1.1" 403 17235 "-" "axios/1.6.8"
6 alerts in 34s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.88
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.88 - - [14/May/2026:10:21:36 +0000] "GET /bac ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.88 - - [14/May/2026:10:21:36 +0000] "GET /backup.sql HTTP/1.1" 403 35553 "-" "Mozilla/5.0 zgrab/0.x"
16 alerts in 31s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.118
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.53.118 - - [14/May/2026:07:24:12 +0000] " ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.53.118 - - [14/May/2026:07:24:12 +0000] "GET /shell HTTP/1.1" 404 23666 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
14 alerts in 30s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.250
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.223.250 - - [14/May/2026:10:41:23 +0000] "GET /ex ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.223.250 - - [14/May/2026:10:41:23 +0000] "GET /exchange/autodiscover HTTP/1.1" 403 6279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
9 alerts in 60s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.116
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.238.116 - - [16/May/2026:07:59:51 +0000] "GET /dump.sql ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.238.116 - - [16/May/2026:07:59:51 +0000] "GET /dump.sql HTTP/1.1" 404 30824 "-" "HTTPie/3.2.2"
22 alerts in 27s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.53.241
17 May 2026
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.241 - - [14/May/2026:16:51:46 +0000] "GET /bo ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.241 - - [14/May/2026:16:51:46 +0000] "GET /boaform/admin/formLogin HTTP/1.1" 403 7731 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
5 alerts in 60s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.192
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.169.192 - - [15/May/2026:12:15:12 +0000] ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.169.192 - - [15/May/2026:12:15:12 +0000] "GET /.aws/credentials HTTP/1.1" 401 25573 "-" "Mozilla/5.0 zgrab/0.x"
30 alerts in 40s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.107
17 May 2026
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.169.107 - - [16/May/2026:02:11:35 +0000] ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.169.107 - - [16/May/2026:02:11:35 +0000] "GET /wp-json/wp/v2/users HTTP/1.1" 404 5263 "-" "curl/8.4.0"
6 alerts in 37s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.223.136
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.223.136 - - [15/May/2026:15:20:02 +0000] "GET /wp ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.223.136 - - [15/May/2026:15:20:02 +0000] "GET /wp-cron.php HTTP/1.1" 403 589 "-" "Go-http-client/2.0"
8 alerts in 17s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.234
17 May 2026
CrowdSec: crowdsecurity/http-wordpress-scan
2.26.122.234 - - [14/May/2026:12:42:44 +0000] "GET /boaf ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
2.26.122.234 - - [14/May/2026:12:42:44 +0000] "GET /boaform/admin/formLogin HTTP/1.1" 401 36406 "-" "Mozilla/5.0 zgrab/0.x"
19 alerts in 41s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.78
17 May 2026
CrowdSec: crowdsecurity/http-probing
95.85.251.78 - - [15/May/2026:01:24:07 +0000] "GET /invoker/JMX ...
show more
CrowdSec: crowdsecurity/http-probing
95.85.251.78 - - [15/May/2026:01:24:07 +0000] "GET /invoker/JMXInvokerServlet HTTP/1.1" 404 48687 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
8 alerts in 32s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
144.31.169.71
17 May 2026
CrowdSec: crowdsecurity/http-probing
144.31.169.71 - - [14/May/2026:00:25:49 +0000] "GET /phpmyadmin ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.169.71 - - [14/May/2026:00:25:49 +0000] "GET /phpmyadmin/ HTTP/1.1" 403 16177 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
11 alerts in 46s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
2.26.122.70
17 May 2026
CrowdSec: crowdsecurity/http-bad-user-agent
2.26.122.70 - - [14/May/2026:01:24:48 +0000] "GET /pma/ ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
2.26.122.70 - - [14/May/2026:01:24:48 +0000] "GET /pma/ HTTP/1.1" 403 15989 "-" "python-requests/2.32.3"
25 alerts in 34s | Action: ban 4h
show less
Web App Attack
๐ซ๐ฎ
95.85.251.195
17 May 2026
CrowdSec: crowdsecurity/http-crawl-non_statics
95.85.251.195 - - [16/May/2026:13:05:51 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
95.85.251.195 - - [16/May/2026:13:05:51 +0000] "GET /actuator/env HTTP/1.1" 404 46688 "-" "Go-http-client/1.1"
6 alerts in 28s | Action: ban 4h
show less
Web App Attack
๐ฉ๐ช
144.31.238.56
17 May 2026
CrowdSec: crowdsecurity/ssh-bf
42 auth failures in 101s
sshd[27305]: Failed password for backup from ...
show more
CrowdSec: crowdsecurity/ssh-bf
42 auth failures in 101s
sshd[27305]: Failed password for backup from 144.31.238.56 port 63254 ssh2
Action: ban 4h
show less
Brute-Force
SSH