Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events at 2026-10-29T09:46:00Z (UTC). Sample requests: GET /dump.sql -> 401; GET /backup.sql -> 401; GET /database.sql -> 401; GET /database_backup.sql -> 401; GET /_vti_pvt/service.pwd -> 401
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-sensitive-files. 5 matching log events at 2026-10-29T09:46:00Z (UTC). Sample requests: GET /dump.sql -> 200; GET /zzcanary-425696aad67998bc.sql -> 200; GET /backup.sql -> 200; GET /database.sql -> 200; GET /database_backup.sql -> 200
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-sensitive-files. 11 matching log events at 2026-10-29T12:40:02Z (UTC). Sample requests: GET / -> 403; GET /storage/logs/laravel.log -> 403; GET /_vti_pvt/service.pwd -> 403; GET /user_secrets.yml -> 403; GET /.ssh/id_rsa -> 403; GET /.env.production -> 403; GET /server.key -> 403; GET /database.sql -> 403; GET /.vscode/sftp.json -> 403; GET /.npmrc -> 403; GET /secrets.json -> 403; GET /_vti_pvt/service.pwd; GET /user_secrets.yml; GET /secrets.json
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 12 matching log events between 2026-10-30T00:21:55Z and 00:22:12Z (UTC). Sample requests: GET /wp-json/wp/v2/users?per_page=100&_fields=id,slug&per_page=100&page=1 -> 404; GET /wp-json/wp/v2/posts?per_page=20&_embed=author&_fields=_embedded -> 404; GET /wp-json/wp/v2/users?per_page=50&_embed&_fields=id,slug,name -> 404; GET /wp-json/wp/v2/media?per_page=50&_fields=author -> 404; GET /index.php/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 -> 404; GET /wp/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 -> 404; GET /wp-json/login-register-forms/v1/lost-password?username=admin -> 404; GET /wp-json/peprodev/v1/reset-password?username=admin -> 404; GET /wp-json/crm-memberships/v1/reset?username=admin -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-open-proxy. 2 matching log events between 2026-10-29T16:57:42Z and 2026-10-30T03:35:11Z (UTC). Sample requests: CONNECT / -> 405
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: CVE-2017-9841, http-cve-2021-41773, http-cve-2021-42013, http-probing, thinkphp-cve-2018-20062. 12 matching log events between 2026-10-29T12:59:53Z and 13:00:11Z (UTC). Sample requests: GET /index.php?s=/index/x5Cthinkx5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello -> 404; POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh -> 400; POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh -> 400; POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input -> 404; POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input -> 404; POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input -> 404; POST /test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 13 matching log events between 2026-10-30T02:13:04Z and 02:13:28Z (UTC). Sample requests: GET /wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug&page=1 -> 404; GET /wp-json/wp/v2/users?per_page=50&_embed&_fields=id,slug,name -> 404; GET /wp-json/wp/v2/media?per_page=50&_fields=author -> 404; GET /index.php/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 -> 404; GET /wp/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 -> 404; GET /wp-json/buddypress/v1/members?_fields=user_login&per_page=100&page=1 -> 404; GET /wp-json/buddyboss/v1/members?_fields=user_login&per_page=100&page=1 -> 404; GET /wp-json/login-register-forms/v1/lost-password?username=admin -> 404; GET /wp-json/peprodev/v1/reset-password?username=admin -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 11 matching log events at 2026-10-29T21:25:37Z (UTC). Sample requests: GET //wp-includes/wlwmanifest.xml -> 404; GET //xmlrpc.php?rsd -> 404; GET //blog/wp-includes/wlwmanifest.xml -> 404; GET //web/wp-includes/wlwmanifest.xml -> 404; GET //wordpress/wp-includes/wlwmanifest.xml -> 404; GET //website/wp-includes/wlwmanifest.xml -> 404; GET //wp/wp-includes/wlwmanifest.xml -> 404; GET //news/wp-includes/wlwmanifest.xml -> 404; GET //2020/wp-includes/wlwmanifest.xml -> 404; GET //2019/wp-includes/wlwmanifest.xml -> 404; GET //shop/wp-includes/wlwmanifest.xml -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-technology-probing. 1 matching log event at 2026-10-30T04:20:59Z (UTC). Sample requests: GET /druid/index.html -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: jira_cve-2021-26086. 1 matching log event at 2026-10-29T23:10:29Z (UTC). Sample requests: GET /s/138313e2934323e2832313e27353/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties -> 200
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 12 matching log events between 2026-10-30T02:51:59Z and 02:52:18Z (UTC). Sample requests: GET /wp-json/wp/v2/users?per_page=50&_embed&_fields=id,slug,name -> 404; GET /wp-json/buddypress/v1/members?_fields=user_login&per_page=100&page=1 -> 404; GET /wp-json/buddyboss/v1/members?_fields=user_login&per_page=100&page=1 -> 404; GET /wp-json/wp/v2/users?per_page=100&_fields=slug -> 404; GET /wp-json/authorsy/v1/authors -> 404; GET /wp-json/decent-comments/v1/authors -> 404; GET /wp-json/profilepress/v1/users -> 404; GET /wp-json/peprodev/v1/users -> 404; GET /wp-json/crm-memberships/v1/users -> 404; GET /wp-json/dokan/v1/wholesale/customers -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing, http-technology-probing, jira_cve-2021-26086. 12 matching log events between 2026-10-29T19:17:22Z and 19:17:38Z (UTC). Sample requests: GET /.DS_Store -> 404; GET /.env -> 404; GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application -> 404; POST /api -> 404; POST /api/graphql -> 404; POST /api/gql -> 404; GET /s/138313e2934323e2832313e27353/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties -> 404; GET /config.json -> 404; GET /info.php -> 404; GET /.well-known/security.txt -> 404; GET /trace.axd -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 12 matching log events between 2026-10-29T22:29:19Z and 22:29:33Z (UTC). Sample requests: GET /wp-json/wp/v2/users?per_page=100&_fields=id,slug&per_page=100&page=1 -> 404; GET /wp-json/wp/v2/users?per_page=50&_embed&_fields=id,slug,name -> 404; GET /wp-json/wp/v2/media?per_page=50&_fields=author -> 404; GET /index.php/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 -> 404; GET /wp/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 -> 404; GET /wp-json/buddypress/v1/members?_fields=user_login&per_page=100&page=1 -> 404; GET /wp-json/buddyboss/v1/members?_fields=user_login&per_page=100&page=1 -> 404; GET /wp-json/login-register-forms/v1/lost-password?username=admin -> 404; GET /wp-json/peprodev/v1/reset-password?username=admin -> 404; GET /wp-json/crm-memberships/v1/reset?username=admin -> 404; GET /wp-json/kirki/v1/forgot-password?username=admin -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 13 matching log events between 2026-10-30T02:51:58Z and 02:52:19Z (UTC). Sample requests: GET /wp-json/wp/v2/posts?per_page=20&_embed=author&_fields=_embedded -> 404; GET /wp-json/wp/v2/media?per_page=50&_fields=author -> 404; GET /index.php/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 -> 404; GET /wp/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 -> 404; GET /wp-json/login-register-forms/v1/lost-password?username=admin -> 404; GET /wp-json/peprodev/v1/reset-password?username=admin -> 404; GET /wp-json/crm-memberships/v1/reset?username=admin -> 404; GET /wp-json/kirki/v1/forgot-password?username=admin -> 404; GET /wp-json/wc/v3/customers?_fields=username,email&per_page=100&page=1 -> 404; GET /wp-json/wc/v2/customers?_fields=username,email&per_page=100&page=1 -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 13 matching log events between 2026-10-30T00:53:32Z and 00:53:58Z (UTC). Sample requests: GET /wp-json/buddyboss/v1/members?_fields=user_login&per_page=100&page=1 -> 404; GET /wp-json/authorsy/v1/authors -> 404; GET /wp-json/decent-comments/v1/authors -> 404; GET /wp-json/profilepress/v1/users -> 404; GET /wp-json/peprodev/v1/users -> 404; GET /wp-json/crm-memberships/v1/users -> 404; GET /wp-json/dokan/v1/wholesale/customers -> 404; GET /wp-json/buddypress/v1/members -> 404; GET /wp-json/ultimate-member/v1/users -> 404; GET /wp-json/ldlms/v2/users -> 404; GET /wp-json/wc/v3/customers -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-technology-probing, jira_cve-2021-26086. 2 matching log events between 2026-10-29T19:17:35Z and 19:17:38Z (UTC). Sample requests: GET /info.php -> 404; GET /s/138313e2934323e2832313e27353/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 11 matching log events between 2026-10-29T17:23:06Z and 17:23:14Z (UTC). Sample requests: GET /wp-json/wp/v2/users?_jsonp=callback&per_page=100&_fields=id,slug&page=1 -> 404; GET /wp-json/wp/v2/users?per_page=100&_fields=id,slug&per_page=100&page=1 -> 404; GET /wp-json/wp/v2/posts?per_page=20&_embed=author&_fields=_embedded -> 404; GET /wp-json/wp/v2/users?per_page=50&_embed&_fields=id,slug,name -> 404; GET /index.php/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 -> 404; GET /wp/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 -> 404; GET /wp-json/buddypress/v1/members?_fields=user_login&per_page=100&page=1 -> 404; GET /wp-json/buddyboss/v1/members?_fields=user_login&per_page=100&page=1 -> 404; GET /wp-json/login-register-forms/v1/lost-password?username=admin -> 404; GET /wp-json/peprodev/v1/reset-password?username=admin -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: CVE-2017-9841, http-cve-2021-41773, http-cve-2021-42013, http-probing, thinkphp-cve-2018-20062. 12 matching log events between 2026-10-28T05:07:55Z and 05:08:07Z (UTC). Sample requests: GET /index.php?s=/index/x5Cthinkx5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello -> 404; POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh -> 400; POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh -> 400; POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input -> 404; POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input -> 404; POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input -> 404; POST /test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-cve-probing. 1 matching log event at 2026-10-29T02:34:34Z (UTC). Sample requests: GET /developmentserver/metadatauploader -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-open-proxy. 1 matching log event at 2026-10-28T12:19:52Z (UTC). Sample requests: CONNECT speed.cloudflare.com:443 -> 405
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-open-proxy. 1 matching log event at 2026-10-28T05:47:26Z (UTC). Sample requests: CONNECT internetdb.shodan.io:443 -> 405
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-cve-probing, netgear_rce. 1 matching log event at 2026-10-28T11:16:31Z (UTC).
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-admin-interface-probing, http-probing, http-sensitive-files, http-wordpress-scan. 18 matching log events between 2026-10-28T11:56:39Z and 11:56:52Z (UTC). Sample requests: GET /wp-load.php -> 404; GET /wp-settings.php -> 404; GET /wp-blog-header.php -> 404; GET /wp-includes/version.php -> 404; GET /admin/.git/config -> 404; GET /wp-admin/ -> 404; GET /administrator/ -> 404; GET /.git/config -> 404; GET /.svn/wc.db -> 404; GET /.env -> 404; GET / -> 404; GET /.git-credentials -> 404; GET /.env.local -> 404; GET /.env.production -> 404; GET /.env.backup -> 404; GET /.env.old -> 404; GET /.env.bak -> 404; GET /.env.save -> 404
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: CVE-2017-9841, http-probing, http-sensitive-files, http-technology-probing. 127 matching log events between 2026-10-28T14:54:51Z and 15:17:59Z (UTC). Sample requests: GET /package.json -> 403; GET /.env.backup -> 403; GET /.env.bak -> 403; GET /.env.old -> 403; GET /.env.save -> 403; GET /.env.development -> 403; GET /.env.staging -> 403; GET /.env.docker -> 403; GET /.env.test -> 403; GET /.env.production.local -> 403; GET /.env.development.local -> 403; GET /Dockerfile -> 404; GET /sign-in -> 404; GET /package.json -> 404; GET /.env.backup -> 404; GET /.env.bak -> 404; GET /.env.old -> 404; GET /.env.save -> 404; GET /.env.development -> 404; GET /.env.staging -> 404; GET /.env.docker -> 404; GET /.env.test -> 404; GET /serviceAccountKey.json -> 404; GET /firebase.json -> 404; GET /credentials.json -> 404; GET /google-credentials.json -> 404; GET /swagger.json -> 404; GET /openapi.json -> 404
show less
Port ScanHackingWeb App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.