|
🇩🇪
144.31.223.181
|
|
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.223.181 - - [14/May/2026:00:46:55 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.223.181 - - [14/May/2026:00:46:55 +0000] "GET /cmd HTTP/1.1" 404 38360 "-" "curl/8.7.1"
27 alerts in 11s | Action: ban 4h
show less
|
Web App Attack
|
|
🇩🇪
144.31.223.125
|
|
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.223.125 - - [15/May/2026:04:43:08 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.223.125 - - [15/May/2026:04:43:08 +0000] "GET /telescope/requests HTTP/1.1" 403 16279 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
16 alerts in 7s | Action: ban 4h
show less
|
Web App Attack
|
|
🇩🇪
31.76.244.165
|
|
CrowdSec: crowdsecurity/http-wordpress-scan
31.76.244.165 - - [14/May/2026:19:58:59 +0000] "GET /php ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
31.76.244.165 - - [14/May/2026:19:58:59 +0000] "GET /phpinfo.php HTTP/1.1" 404 23863 "-" "libwww-perl/6.72"
15 alerts in 51s | Action: ban 4h
show less
|
Web App Attack
|
|
🇩🇪
144.31.148.240
|
|
CrowdSec: crowdsecurity/http-probing
144.31.148.240 - - [15/May/2026:23:21:08 +0000] "GET /user/logi ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.148.240 - - [15/May/2026:23:21:08 +0000] "GET /user/login HTTP/1.1" 401 10733 "-" "libwww-perl/6.72"
17 alerts in 58s | Action: ban 4h
show less
|
Web App Attack
|
|
🇩🇪
144.31.148.50
|
|
CrowdSec: crowdsecurity/http-sensitive-files
144.31.148.50 - - [15/May/2026:01:17:36 +0000] "GET /wp ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.148.50 - - [15/May/2026:01:17:36 +0000] "GET /wp-config.php~ HTTP/1.1" 403 14215 "-" "curl/8.4.0"
8 alerts in 6s | Action: ban 4h
show less
|
Web App Attack
|
|
🇫🇮
144.31.53.227
|
|
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.53.227 - - [14/May/2026:06:53:01 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.53.227 - - [14/May/2026:06:53:01 +0000] "GET /manager/status HTTP/1.1" 401 27062 "-" "Mozilla/5.0 zgrab/0.x"
25 alerts in 50s | Action: ban 4h
show less
|
Web App Attack
|
|
🇩🇪
144.31.148.16
|
|
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.148.16 - - [16/May/2026:12:18:49 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.148.16 - - [16/May/2026:12:18:49 +0000] "GET /wp-admin/ HTTP/1.1" 401 3535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
7 alerts in 53s | Action: ban 4h
show less
|
Web App Attack
|
|
🇫🇮
144.31.169.27
|
|
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.169.27 - - [16/May/2026:02:05:34 +0000] "GET /log ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.169.27 - - [16/May/2026:02:05:34 +0000] "GET /login.action HTTP/1.1" 404 25727 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"
16 alerts in 13s | Action: ban 4h
show less
|
Web App Attack
|
|
🇩🇪
144.31.148.130
|
|
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.148.130 - - [15/May/2026:19:56:35 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.148.130 - - [15/May/2026:19:56:35 +0000] "GET /api/graphql HTTP/1.1" 403 40473 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv)"
11 alerts in 36s | Action: ban 4h
show less
|
Web App Attack
|
|
🇫🇮
2.26.122.208
|
|
CrowdSec: crowdsecurity/http-probing
2.26.122.208 - - [16/May/2026:20:45:52 +0000] "GET /debug/pprof ...
show more
CrowdSec: crowdsecurity/http-probing
2.26.122.208 - - [16/May/2026:20:45:52 +0000] "GET /debug/pprof/ HTTP/1.1" 404 15506 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
17 alerts in 20s | Action: ban 4h
show less
|
Web App Attack
|
|
🇫🇮
144.31.53.141
|
|
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.141 - - [16/May/2026:16:23:03 +0000] "GET /sw ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
144.31.53.141 - - [16/May/2026:16:23:03 +0000] "GET /swagger.json HTTP/1.1" 404 29037 "-" "Wget/1.21.4"
22 alerts in 43s | Action: ban 4h
show less
|
Web App Attack
|
|
🇩🇪
144.31.223.120
|
|
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.223.120 - - [16/May/2026:08:17:36 +0000] "GET /sw ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.223.120 - - [16/May/2026:08:17:36 +0000] "GET /swagger.json HTTP/1.1" 401 11982 "-" "curl/8.4.0"
9 alerts in 19s | Action: ban 4h
show less
|
Web App Attack
|
|
🇫🇮
144.31.169.198
|
|
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.169.198 - - [14/May/2026:18:41:22 +0000] "GET /.w ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.169.198 - - [14/May/2026:18:41:22 +0000] "GET /.well-known/openid-configuration HTTP/1.1" 404 47558 "-" "Mozilla/5.0 zgrab/0.x"
6 alerts in 23s | Action: ban 4h
show less
|
Web App Attack
|
|
🇩🇪
144.31.238.84
|
|
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.238.84 - - [15/May/2026:14:55:10 +0000] " ...
show more
CrowdSec: crowdsecurity/http-path-traversal-probing
144.31.238.84 - - [15/May/2026:14:55:10 +0000] "GET /owa/auth/logon.aspx HTTP/1.1" 403 20305 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
13 alerts in 32s | Action: ban 4h
show less
|
Web App Attack
|
|
🇩🇪
144.31.238.35
|
|
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.238.35 - - [15/May/2026:19:13:39 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
144.31.238.35 - - [15/May/2026:19:13:39 +0000] "GET /wp-login.php HTTP/1.1" 401 48276 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)"
28 alerts in 27s | Action: ban 4h
show less
|
Web App Attack
|
|
🇫🇮
95.85.251.146
|
|
CrowdSec: crowdsecurity/http-sensitive-files
95.85.251.146 - - [14/May/2026:22:33:24 +0000] "GET /du ...
show more
CrowdSec: crowdsecurity/http-sensitive-files
95.85.251.146 - - [14/May/2026:22:33:24 +0000] "GET /dump.sql HTTP/1.1" 404 3549 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
16 alerts in 53s | Action: ban 4h
show less
|
Web App Attack
|
|
🇩🇪
144.31.148.143
|
|
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.148.143 - - [14/May/2026:17:58:19 +0000] "GET /ex ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan
144.31.148.143 - - [14/May/2026:17:58:19 +0000] "GET /exchange/autodiscover HTTP/1.1" 404 5013 "-" "okhttp/4.12.0"
25 alerts in 7s | Action: ban 4h
show less
|
Web App Attack
|
|
🇩🇪
144.31.148.162
|
|
CrowdSec: crowdsecurity/http-probing
144.31.148.162 - - [15/May/2026:21:38:06 +0000] "GET /config.ph ...
show more
CrowdSec: crowdsecurity/http-probing
144.31.148.162 - - [15/May/2026:21:38:06 +0000] "GET /config.php HTTP/1.1" 401 20950 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
23 alerts in 48s | Action: ban 4h
show less
|
Web App Attack
|
|
🇫🇮
95.85.251.227
|
|
CrowdSec: crowdsecurity/http-backdoors-attempts
95.85.251.227 - - [14/May/2026:16:40:12 +0000] "GET ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts
95.85.251.227 - - [14/May/2026:16:40:12 +0000] "GET /.git/HEAD HTTP/1.1" 403 3871 "-" "libwww-perl/6.72"
7 alerts in 24s | Action: ban 4h
show less
|
Web App Attack
|
|
🇫🇮
2.26.122.30
|
|
CrowdSec: crowdsecurity/http-crawl-non_statics
2.26.122.30 - - [14/May/2026:17:13:25 +0000] "GET /.e ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
2.26.122.30 - - [14/May/2026:17:13:25 +0000] "GET /.env HTTP/1.1" 404 44797 "-" "Go-http-client/2.0"
27 alerts in 18s | Action: ban 4h
show less
|
Web App Attack
|
|
🇩🇪
31.76.244.44
|
|
CrowdSec: crowdsecurity/http-crawl-non_statics
31.76.244.44 - - [15/May/2026:06:16:45 +0000] "GET /e ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
31.76.244.44 - - [15/May/2026:06:16:45 +0000] "GET /eval HTTP/1.1" 404 41974 "-" "Wget/1.21.4"
29 alerts in 10s | Action: ban 4h
show less
|
Web App Attack
|
|
🇩🇪
144.31.238.157
|
|
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.238.157 - - [15/May/2026:05:24:16 +0000] "GET /pm ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent
144.31.238.157 - - [15/May/2026:05:24:16 +0000] "GET /pma/ HTTP/1.1" 403 33259 "-" "node-fetch/3.3.2"
17 alerts in 5s | Action: ban 4h
show less
|
Web App Attack
|