HTTP Probing & Attacks
Attacks by Scenario
Top Attacker IPs
| IP | Count |
|---|---|
| 45.148.10.21 | 12 |
| 45.148.10.62 | 5 |
| 91.92.42.182 | 5 |
| 8.235.12.69 | 4 |
| 8.228.15.6 | 4 |
| 103.146.202.144 | 4 |
| 54.93.93.123 | 4 |
| 34.22.45.122 | 3 |
| 103.215.237.75 | 3 |
| 45.148.10.15 | 3 |
Recent HTTP Alerts
| Time | IP | Scenario | Target Path |
|---|---|---|---|
| 2026-06-26 02:42:50 | 34.176.73.164 | crowdsecurity/http-admin-interface-probing |
/admin/api/.env
/admin/.env.backup
/admin/.env
|
| 2026-06-26 02:42:48 | 34.176.73.164 | crowdsecurity/http-probing |
/app/.env.local
/staging/.env
/dev/.env
/.env
/frontend/.env.staging
/src/.env.backup
/app/backend/.env
/.env.dist
/src/.env.production
/v1/.env
/env.bak
|
| 2026-06-26 02:42:48 | 34.176.73.164 | crowdsecurity/http-sensitive-files |
/app/.env.local
/staging/.env
/dev/.env
/.env
/frontend/.env.staging
|
| 2026-06-26 01:40:09 | 8.235.12.69 | crowdsecurity/http-crawl-non_statics |
/.env.production.local
/.env.development.local
/.env.template
/env.bak
/api/sendgrid.env
/.env.txt
|
| 2026-06-26 01:40:09 | 8.235.12.69 | crowdsecurity/http-admin-interface-probing |
/admin/api/.env
/admin/.env
/admin/.env.local
|
| 2026-06-26 01:40:09 | 8.235.12.69 | crowdsecurity/http-probing |
/api/.env.local
/api/.env.backup
/api/.env.prod
/production/.env
/api/v3/.env
/backend/.env.staging
/api/.env.staging
/api/v1/.env
/api/.env.dev
/api/v2/.env
/api/.env.bak
|
| 2026-06-26 01:40:09 | 8.235.12.69 | crowdsecurity/http-sensitive-files |
/api/.env.local
/api/.env.backup
/api/.env.prod
/production/.env
/api/v3/.env
|
| 2026-06-26 01:17:11 | 34.84.135.175 | crowdsecurity/http-probing |
/.git/config
/backend/.git/config
/app/.git/config
/src/.git/config
/frontend/.git/config
/v1/.git/config
/v2/.git/config
/v3/.git/config
/web/.git/config
/api/.git/config
/www/.git/config
|
| 2026-06-26 01:17:11 | 34.84.135.175 | crowdsecurity/http-sensitive-files |
/.git/config
/backend/.git/config
/app/.git/config
/src/.git/config
/frontend/.git/config
|
| 2026-06-26 01:09:54 | 163.7.11.69 | crowdsecurity/http-sensitive-files |
/.git/config
/.env.local
/.env
/.env.development
/.env.test
|
| 2026-06-25 03:40:14 | 195.63.22.95 | crowdsecurity/http-probing |
/sitemap-index.xml
/.dev.vars
/.env.local
/.git/HEAD
/.env
/.aws/credentials
/.env.production
/.git/config
/.env.backup
/secrets.json
/wp-config.php
|
| 2026-06-25 03:40:13 | 195.63.22.95 | crowdsecurity/http-sensitive-files |
/.git/HEAD
/.env
/.aws/credentials
/.git/config
/.env.backup
|
| 2026-06-25 00:31:22 | 199.45.154.114 | crowdsecurity/http-bad-user-agent |
/
/favicon.ico
|
| 2026-06-25 00:16:41 | 44.249.47.152 | crowdsecurity/http-crawl-non_statics |
/.envrc.sample
/.env.testing.example
/.env.local.example
/env_variables.py
/env-list.txt
/.env.sh
|
| 2026-06-25 00:16:39 | 44.249.47.152 | crowdsecurity/http-sensitive-files |
/.git/config
/.env
/.env.local
/.env.staging
/.env.development
|
| 2026-06-24 23:17:51 | 3.6.40.133 | crowdsecurity/http-sensitive-files |
/.git/config
/.env
/.env.local
/.env.staging
/.env.development
|
| 2026-06-24 22:20:41 | 199.45.154.144 | crowdsecurity/http-bad-user-agent |
/
/images/favicon/apple-touch-icon.png
|
| 2026-06-24 13:22:35 | 157.245.36.108 | crowdsecurity/http-technology-probing |
/info.php
|
| 2026-06-24 13:22:27 | 157.245.36.108 | crowdsecurity/http-probing |
/server
/server-status
/about
/login.action
/___proxy_subdomain_whm/login
/___proxy_subdomain_cpanel
/v2/_catalog
/.DS_Store
/.env
/ecp/Current/exporttool/microsoft.exchange.ediscov...
/.git/config
|
| 2026-06-24 09:28:23 | 34.18.222.242 | crowdsecurity/http-probing |
/.git/config
/
/.env
/.env.local
/.env.production
/.env.staging
/.env.development
/.env.test
/.env.remote
/.env.bak
/.env.backup
|
| 2026-06-24 09:28:22 | 34.18.222.242 | crowdsecurity/http-sensitive-files |
/.git/config
/.env
/.env.local
/.env.staging
/.env.development
|
| 2026-06-24 05:23:19 | 85.11.167.49 | crowdsecurity/http-sensitive-files |
/.aws/credentials
/.env
/.env.local
/.env.backup
/config/.env
|
| 2026-06-23 22:50:44 | 85.204.70.118 | crowdsecurity/http-probing |
//wp-includes/wlwmanifest.xml
//xmlrpc.php?rsd
//blog/wp-includes/wlwmanifest.xml
//web/wp-includes/wlwmanifest.xml
//wordpress/wp-includes/wlwmanifest.xml
//website/wp-includes/wlwmanifest.xml
//wp/wp-includes/wlwmanifest.xml
//news/wp-includes/wlwmanifest.xml
//2018/wp-includes/wlwmanifest.xml
//2019/wp-includes/wlwmanifest.xml
//shop/wp-includes/wlwmanifest.xml
|
| 2026-06-23 20:04:04 | 15.237.58.225 | crowdsecurity/http-sensitive-files |
/.git/config
/.env
/.env.local
/.env.staging
/.env.development
|
| 2026-06-23 17:29:07 | 57.180.39.32 | crowdsecurity/http-crawl-non_statics |
/create_env.py
/_.env.dev
/_.env.prod
/.env.aws
/.env-dev
/set_env.sh
|
| 2026-06-23 17:28:59 | 57.180.39.32 | crowdsecurity/http-sensitive-files |
/.git/config
/.env
/.env.local
/.env.staging
/.env.development
|
| 2026-06-23 07:09:14 | 34.18.197.233 | crowdsecurity/http-probing |
/login
/.git/config
/
/.env
/.env.local
/.env.production
/.env.staging
/.env.development
/.env.test
/.env.remote
/.env.bak
|
| 2026-06-23 07:09:13 | 34.18.197.233 | crowdsecurity/http-sensitive-files |
/.git/config
/.env
/.env.local
/.env.staging
/.env.development
|
| 2026-06-23 01:49:56 | 45.148.10.15 | crowdsecurity/http-probing |
/asdkjh2k3h4_nonexistent_path
/.env
/info.php
/logout
/api/login
/framework/.env
/core/.env
/.env.prod
/.git/config
/api/logout
/debug
|
| 2026-06-23 01:49:46 | 45.148.10.15 | crowdsecurity/http-sensitive-files |
/.env
/framework/.env
/core/.env
/.env.prod
/.git/config
|
| 2026-06-23 01:49:46 | 45.148.10.15 | crowdsecurity/http-technology-probing |
/info.php
|
| 2026-06-22 19:57:40 | 31.76.30.23 | crowdsecurity/http-sensitive-files |
/.git/HEAD
/.git/config
/.env.backup
/.env
/.env.local
|
| 2026-06-22 19:57:40 | 31.76.30.23 | crowdsecurity/http-probing |
/_rNd9xZ7kL3
/robots.txt
/sitemap.xml
/sitemap_index.xml
/sitemap-index.xml
/.env.production
/.git/HEAD
/config.json
/.git/config
/.env.backup
/.env
|
| 2026-06-22 10:26:50 | 34.61.226.153 | crowdsecurity/http-probing |
//wp-includes/ID3/license.txt
//feed/
//xmlrpc.php?rsd
//blog/wp-includes/wlwmanifest.xml
//web/wp-includes/wlwmanifest.xml
//wordpress/wp-includes/wlwmanifest.xml
//wp/wp-includes/wlwmanifest.xml
//2020/wp-includes/wlwmanifest.xml
//2019/wp-includes/wlwmanifest.xml
//2021/wp-includes/wlwmanifest.xml
//shop/wp-includes/wlwmanifest.xml
|
| 2026-06-22 04:37:50 | 34.52.170.27 | crowdsecurity/http-probing |
//wp-includes/ID3/license.txt
//feed/
//xmlrpc.php?rsd
//blog/wp-includes/wlwmanifest.xml
//web/wp-includes/wlwmanifest.xml
//wordpress/wp-includes/wlwmanifest.xml
//wp/wp-includes/wlwmanifest.xml
//2020/wp-includes/wlwmanifest.xml
//2019/wp-includes/wlwmanifest.xml
//2021/wp-includes/wlwmanifest.xml
//shop/wp-includes/wlwmanifest.xml
|
| 2026-06-21 12:05:51 | 34.82.182.218 | crowdsecurity/http-probing |
//wp-includes/ID3/license.txt
//feed/
//xmlrpc.php?rsd
//blog/wp-includes/wlwmanifest.xml
//web/wp-includes/wlwmanifest.xml
//wordpress/wp-includes/wlwmanifest.xml
//wp/wp-includes/wlwmanifest.xml
//2020/wp-includes/wlwmanifest.xml
//2019/wp-includes/wlwmanifest.xml
//2021/wp-includes/wlwmanifest.xml
//shop/wp-includes/wlwmanifest.xml
|
| 2026-06-20 06:30:46 | 66.132.172.101 | crowdsecurity/http-bad-user-agent |
/
/signin
|
| 2026-06-19 19:57:00 | 66.132.195.42 | crowdsecurity/http-bad-user-agent |
/
/login
|
| 2026-06-19 14:31:07 | 45.148.10.62 | crowdsecurity/http-sensitive-files |
/.env
/.env.bak
/.env.save
/.env.local
/backend/.env
|
| 2026-06-19 07:54:54 | 45.148.10.62 | crowdsecurity/http-sensitive-files |
/.env
/.env.bak
/.env.save
/.env.local
/backend/.env
|
| 2026-06-19 03:36:54 | 45.148.10.62 | crowdsecurity/http-sensitive-files |
/.env
/.env.bak
/.env.save
/.env.local
/backend/.env
|
| 2026-06-19 02:06:17 | 63.177.247.230 | crowdsecurity/http-bad-user-agent |
/
/
|
| 2026-06-18 11:33:21 | 91.92.42.182 | crowdsecurity/http-technology-probing |
/phpinfo/info.php
|
| 2026-06-18 11:33:21 | 91.92.42.182 | crowdsecurity/http-probing |
/settings.php
/.gitconfig
/web.config
/db.php
/database.php
/application.yml
/composer.json
/functions.php
/test.php
/server_info.php
/config/parameters.yml
|
| 2026-06-18 11:29:14 | 91.92.42.182 | crowdsecurity/http-technology-probing |
/info.php
|
| 2026-06-18 07:59:32 | 103.215.237.20 | crowdsecurity/http-crawl-non_statics |
/dashboard/tags/teejkw8nryvqnfs6iazzs1mb?_rsc=2zni...
/dashboard/tags/nvn8vtjkqi5f9nv8au5frqwe?_rsc=2zni...
/dashboard/tags/ybyc0jnbsnl3pmd3dts9pyci?_rsc=2zni...
/dashboard/preview/rn3psfuzi4clax84yyyvsfct?_rsc=2...
/dashboard/tags/kqcwnz5q08c1q4vn4g7woe1i?_rsc=2zni...
/dashboard/tags/vfhgskc5rdy0kjsb898gk9cn?_rsc=2zni...
|
| 2026-06-18 02:24:41 | 91.92.42.182 | crowdsecurity/http-probing |
/.env.bak
/db.php
/database.php
/web.config
/settings.php
/functions.php
/.aws/credentials
/settings.py
/pinfo.php
/server_info.php
/test.php
|
| 2026-06-18 02:21:31 | 91.92.42.182 | crowdsecurity/http-technology-probing |
/info.php
|
| 2026-06-17 20:20:46 | 199.45.154.122 | crowdsecurity/http-bad-user-agent |
/
/favicon.ico
|
| 2026-06-17 14:29:37 | 199.45.154.142 | crowdsecurity/http-bad-user-agent |
/
/
|