HTTP Probing & Attacks
Attacks by Scenario
Top Attacker IPs
| IP | Count |
|---|---|
| 45.148.10.51 | 18 |
| 185.177.72.5 | 18 |
| 45.148.10.62 | 9 |
| 8.234.167.5 | 8 |
| 35.221.218.89 | 8 |
| 34.176.210.110 | 6 |
| 35.240.208.196 | 6 |
| 34.185.214.226 | 6 |
| 208.84.101.224 | 5 |
| 34.39.225.72 | 5 |
Recent HTTP Alerts
| Time | IP | Scenario | Target Path |
|---|---|---|---|
| 2026-06-18 21:17:03 | 64.23.218.208 | crowdsecurity/http-technology-probing |
/info.php
|
| 2026-06-18 21:16:58 | 64.23.218.208 | crowdsecurity/http-probing |
/server
/server-status
/about
/login.action
/___proxy_subdomain_whm/login
/___proxy_subdomain_cpanel
/v2/_catalog
/.DS_Store
/.env
/ecp/Current/exporttool/microsoft.exchange.ediscov...
/.git/config
|
| 2026-06-18 19:47:52 | 45.148.10.15 | crowdsecurity/http-sensitive-files |
/.env
/.git/config
/.env.local
/.env.development
/.env.staging
|
| 2026-06-18 16:38:06 | 158.158.104.28 | crowdsecurity/http-probing |
/wp-content/plugins/hellopress/wp_filemanager.php
/this_is_a_new_hello_world.php
/bhm.php
/sf.php
/wp-block.php
/wp-ver.php
/f222.php
/cilng.php
/rithin.php
/dass.php
/haz.php
|
| 2026-06-18 11:59:30 | 34.178.67.151 | crowdsecurity/http-probing |
//wp-includes/ID3/license.txt
//feed/
//xmlrpc.php?rsd
//blog/wp-includes/wlwmanifest.xml
//web/wp-includes/wlwmanifest.xml
//wordpress/wp-includes/wlwmanifest.xml
//wp/wp-includes/wlwmanifest.xml
//2020/wp-includes/wlwmanifest.xml
//2019/wp-includes/wlwmanifest.xml
//2021/wp-includes/wlwmanifest.xml
//shop/wp-includes/wlwmanifest.xml
|
| 2026-06-18 11:59:30 | 34.178.67.151 | crowdsecurity/http-probing |
//wp-includes/ID3/license.txt
//feed/
//xmlrpc.php?rsd
//blog/wp-includes/wlwmanifest.xml
//web/wp-includes/wlwmanifest.xml
//wordpress/wp-includes/wlwmanifest.xml
//wp/wp-includes/wlwmanifest.xml
//2020/wp-includes/wlwmanifest.xml
//2019/wp-includes/wlwmanifest.xml
//2021/wp-includes/wlwmanifest.xml
//shop/wp-includes/wlwmanifest.xml
|
| 2026-06-18 09:07:49 | 45.148.10.62 | crowdsecurity/http-sensitive-files |
/.env
/.env.bak
/.env.save
/.env.local
/backend/.env
|
| 2026-06-18 07:04:47 | 64.226.65.160 | crowdsecurity/http-technology-probing |
/info.php
|
| 2026-06-18 07:04:40 | 64.226.65.160 | crowdsecurity/http-probing |
/server
/server-status
/about
/login.action
/___proxy_subdomain_whm/login
/___proxy_subdomain_cpanel
/v2/_catalog
/.DS_Store
/.env
/ecp/Current/exporttool/microsoft.exchange.ediscov...
/.git/config
|
| 2026-06-18 01:11:47 | 74.248.112.30 | crowdsecurity/http-probing |
/wp-content/plugins/hellopress/wp_filemanager.php
/this_is_a_new_hello_world.php
/bhm.php
/sf.php
/wp-block.php
/wp-ver.php
/f222.php
/cilng.php
/rithin.php
/dass.php
/haz.php
|
| 2026-06-18 00:39:21 | 20.12.202.181 | crowdsecurity/http-probing |
/wp-content/plugins/hellopress/wp_filemanager.php
/this_is_a_new_hello_world.php
/1.php
/dropdown.php
//wp-content/languages/index.php
/666.php
/wen.php
/zfe.php
/city-ajax.php
/pp.php
/crgio.php
|
| 2026-06-17 19:50:41 | 66.132.172.185 | crowdsecurity/http-bad-user-agent |
/
/images/favicon/favicon-32x32.png
|
| 2026-06-17 18:11:49 | 159.89.12.166 | crowdsecurity/http-probing |
/console/
/server
/server-status
/about
/login.action
/___proxy_subdomain_whm/login
/___proxy_subdomain_cpanel
/v2/_catalog
/.DS_Store
/.env
/ecp/Current/exporttool/microsoft.exchange.ediscov...
|
| 2026-06-17 18:03:24 | 45.148.10.62 | crowdsecurity/http-admin-interface-probing |
/admin-panel/.env
/admin/.env
/phpinfo.php
|
| 2026-06-17 18:03:24 | 45.148.10.62 | crowdsecurity/http-probing |
/.env
/%22/static/js/app.js%22
/.env.bak
/.env.save
/.env.local
/backend/.env
/admin-panel/.env
/credentials
/test.php
/.env.staging
/.env.backup
|
| 2026-06-17 18:03:20 | 45.148.10.62 | crowdsecurity/http-sensitive-files |
/.env
/.env.bak
/.env.save
/.env.local
/backend/.env
|
| 2026-06-17 18:01:37 | 20.12.202.181 | crowdsecurity/http-crawl-non_statics |
/77.php
/x402.php
/themes.php
/test1.php
/tires.php
/bthil.php
|
| 2026-06-17 18:01:33 | 20.12.202.181 | crowdsecurity/http-probing |
/wp-content/plugins/hellopress/wp_filemanager.php
/this_is_a_new_hello_world.php
/classgoto24.php
/cu.php
/4PJcpMFsD8B.php
/206.php
/flox.php
/ng.php
/100.php
/error_log.php
/ms-edit.php
|
| 2026-06-17 17:35:50 | 20.104.75.74 | crowdsecurity/http-crawl-non_statics |
/mac.php
/25d653587fdfd1.php
/wefile.php
/modules/mod_simplefileuploadv1.3/elements/fileman...
/wp-admin/css/colour.php
/2P.php
|
| 2026-06-17 14:26:58 | 45.88.138.45 | crowdsecurity/http-crawl-non_statics |
/proxy-99.html
/proxy-13.html
/proxy-102.html
/proxy-16.html
/proxy-47.html
/proxy-76.html
|
| 2026-06-17 14:26:55 | 45.88.138.45 | crowdsecurity/http-sensitive-files |
/web/.env
/configuration.php.bak
/public/.env
/src/.env
/core/.env
|
| 2026-06-17 14:03:23 | 45.148.10.15 | crowdsecurity/http-probing |
/.env.backup
/.env.old
/.env.bak
/config/.env
/app/.env
/src/.env
/backend/.env
/api/.env
/config.php
/settings.php
/wp-config.php
|
| 2026-06-17 12:45:24 | 85.11.167.49 | crowdsecurity/http-sensitive-files |
/.aws/credentials
/.env
/.env.local
/.env.backup
/config/.env
|
| 2026-06-17 12:45:23 | 85.11.167.49 | crowdsecurity/http-probing |
/phpinfo
/phpinfo.php
/test.php
/_profiler/phpinfo
/info.php
/php.php
/php_info.php
/i.php
/pi.php
/admin/phpinfo.php
/pinfo.php
|
| 2026-06-17 12:45:22 | 85.11.167.49 | crowdsecurity/http-technology-probing |
/info.php
|
| 2026-06-17 12:45:22 | 85.11.167.49 | crowdsecurity/http-admin-interface-probing |
/phpinfo
/phpinfo.php
/_profiler/phpinfo
|
| 2026-06-17 12:25:32 | 3.35.227.109 | crowdsecurity/http-probing |
/.git/config
/.env
/.env.local
/.env.production
/.env.staging
/.env.development
/.env.test
/.env.remote
/.env.bak
/.env.backup
/.env.save
|
| 2026-06-17 12:25:31 | 3.35.227.109 | crowdsecurity/http-sensitive-files |
/.git/config
/.env
/.env.local
/.env.staging
/.env.development
|
| 2026-06-17 10:03:05 | 13.235.91.124 | crowdsecurity/http-probing |
/.git/config
/.env
/.env.local
/.env.production
/.env.staging
/.env.development
/.env.test
/.env.remote
/.env.bak
/.env.backup
/.env.save
|
| 2026-06-17 10:03:04 | 13.235.91.124 | crowdsecurity/http-sensitive-files |
/.git/config
/.env
/.env.local
/.env.staging
/.env.development
|
| 2026-06-17 07:43:38 | 13.60.104.218 | crowdsecurity/http-sensitive-files |
/.git/config
/.env
/.env.local
/.env.staging
/.env.development
|
| 2026-06-17 07:18:46 | 45.148.10.62 | crowdsecurity/http-sensitive-files |
/.env
/.env.bak
/.env.save
/.env.local
/backend/.env
|
| 2026-06-16 20:20:08 | 52.238.213.109 | crowdsecurity/http-crawl-non_statics |
/ract.php
/luuf.php
/la.php
/xx.php
//mal.php
//bnn_.php
|
| 2026-06-16 20:20:04 | 52.238.213.109 | crowdsecurity/http-probing |
/wp-content/plugins/hellopress/wp_filemanager.php
/this_is_a_new_hello_world.php
/wp-rss.php
/1.php
/dropdown.php
//wp-content/languages/index.php
/666.php
/wen.php
/zfe.php
/city-ajax.php
/pp.php
|
| 2026-06-16 20:12:38 | 66.132.195.71 | crowdsecurity/http-bad-user-agent |
/
/login
|
| 2026-06-16 19:46:02 | 108.62.161.27 | crowdsecurity/http-sensitive-files |
/.env.development
/backend/.env
/.env
/.git/config
/.git/HEAD
|
| 2026-06-16 19:37:49 | 66.132.172.205 | crowdsecurity/http-bad-user-agent |
/
/favicon.ico
|
| 2026-06-16 19:30:51 | 66.132.172.220 | crowdsecurity/http-bad-user-agent |
/
/favicon.ico
|
| 2026-06-16 18:30:52 | 66.132.172.103 | crowdsecurity/http-bad-user-agent |
/
/logo/logo.png
|
| 2026-06-16 17:43:45 | 35.77.107.16 | crowdsecurity/http-sensitive-files |
/.git/config
/.env
/.env.local
/.env.staging
/.env.development
|
| 2026-06-16 17:22:58 | 213.209.159.223 | crowdsecurity/http-sensitive-files |
/.env
/api/.env
/backend/.env
/admin/.env
/laravel/.env
|
| 2026-06-16 15:41:26 | 132.196.99.64 | crowdsecurity/http-crawl-non_statics |
/son.php
/doc.php
/zo.php
/xper1.php
/tiny.php
/s1.php
|
| 2026-06-16 15:35:45 | 88.89.67.235 | crowdsecurity/http-bad-user-agent |
/robots.txt
/robots.txt
|
| 2026-06-16 14:21:31 | 146.70.40.70 | crowdsecurity/http-probing |
/login/wp-includes/wlwmanifest.xml
/login/xmlrpc.php?rsd
/login/blog/wp-includes/wlwmanifest.xml
/login/web/wp-includes/wlwmanifest.xml
/login/wordpress/wp-includes/wlwmanifest.xml
/login/website/wp-includes/wlwmanifest.xml
/login/wp/wp-includes/wlwmanifest.xml
/login/news/wp-includes/wlwmanifest.xml
/login/2018/wp-includes/wlwmanifest.xml
/login/2019/wp-includes/wlwmanifest.xml
/login/shop/wp-includes/wlwmanifest.xml
|
| 2026-06-16 14:21:31 | 146.70.40.70 | crowdsecurity/http-probing |
/login/wp-includes/wlwmanifest.xml
/login/xmlrpc.php?rsd
/login/blog/wp-includes/wlwmanifest.xml
/login/web/wp-includes/wlwmanifest.xml
/login/wordpress/wp-includes/wlwmanifest.xml
/login/website/wp-includes/wlwmanifest.xml
/login/wp/wp-includes/wlwmanifest.xml
/login/news/wp-includes/wlwmanifest.xml
/login/2018/wp-includes/wlwmanifest.xml
/login/2019/wp-includes/wlwmanifest.xml
/login/shop/wp-includes/wlwmanifest.xml
|
| 2026-06-16 13:43:24 | 143.244.57.82 | crowdsecurity/http-probing |
/wp-includes/wlwmanifest.xml
/xmlrpc.php?rsd
/blog/wp-includes/wlwmanifest.xml
/web/wp-includes/wlwmanifest.xml
/wordpress/wp-includes/wlwmanifest.xml
/website/wp-includes/wlwmanifest.xml
/wp/wp-includes/wlwmanifest.xml
/news/wp-includes/wlwmanifest.xml
/2018/wp-includes/wlwmanifest.xml
/2019/wp-includes/wlwmanifest.xml
/shop/wp-includes/wlwmanifest.xml
|
| 2026-06-16 12:08:35 | 66.132.172.201 | crowdsecurity/http-bad-user-agent |
/
/logo/logo.png
|
| 2026-06-16 10:50:32 | 208.84.101.224 | crowdsecurity/http-bad-user-agent |
/app/.env
/application.properties
|
| 2026-06-16 10:50:32 | 208.84.101.224 | crowdsecurity/http-probing |
/secrets.json
/.env
/.aws/credentials
/.env.local
/api/.env
/.env.production
/app/.env
/admin/.env
/google-services.json
/backend/.env
/.env.example
|
| 2026-06-16 10:50:31 | 208.84.101.224 | crowdsecurity/http-sensitive-files |
/secrets.json
/.env
/.aws/credentials
/.env.local
/api/.env
|