| 2026-04-25 15:51 |
85.204.70.112 |
+3
|
Iris |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| wordpress-probe |
web-exploitation |
1 |
2026-04-25 15:51 |
| wp-sensitive-paths |
web-exploitation |
1 |
2026-04-25 15:51 |
| crowdsecurity/http-probing |
other |
1 |
2026-04-25 15:51 |
|
| 2026-04-25 15:48 |
51.68.236.73 |
crowdsecurity/http-bad-user-agent |
Iris |
Fleet |
| 2026-04-25 15:02 |
13.53.168.173 |
+3
|
Zephyrus |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| suspicious-probe |
reconnaissance |
1 |
2026-04-25 15:02 |
| crowdsecurity/http-probing |
other |
1 |
2026-04-25 15:02 |
| crowdsecurity/http-sensitive-files |
other |
1 |
2026-04-25 15:02 |
|
| 2026-04-25 14:48 |
206.1.31.15 |
+6
|
Iris |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| suspicious-probe |
reconnaissance |
1 |
2026-04-25 14:48 |
| webshell-high-confidence |
post-exploitation |
1 |
2026-04-25 14:48 |
| mgmt-path-probe |
reconnaissance |
1 |
2026-04-25 14:48 |
| wp-sensitive-paths |
web-exploitation |
1 |
2026-04-25 14:48 |
| crowdsecurity/http-sensitive-files |
other |
1 |
2026-04-25 14:48 |
| crowdsecurity/http-probing |
other |
1 |
2026-04-25 14:48 |
|
| 2026-04-25 13:15 |
44.204.157.223 |
crowdsecurity/http-cve-probing |
Argus |
Fleet |
| 2026-04-25 13:14 |
20.203.174.117 |
+6
|
Iris |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| crowdsecurity/http-backdoors-attempts |
other |
1 |
2026-04-25 13:14 |
| webshell-high-confidence |
post-exploitation |
1 |
2026-04-25 13:14 |
| wp-sensitive-paths |
web-exploitation |
1 |
2026-04-25 13:14 |
| wordpress-probe |
web-exploitation |
1 |
2026-04-25 13:14 |
| crowdsecurity/http-wordpress-scan |
web-exploitation |
1 |
2026-04-25 13:14 |
| crowdsecurity/http-probing |
other |
1 |
2026-04-25 13:14 |
|
| 2026-04-25 12:21 |
20.100.184.200 |
+3
|
Triton |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| webshell-high-confidence |
post-exploitation |
1 |
2026-04-25 12:21 |
| webshell-probe |
post-exploitation |
1 |
2026-04-25 12:21 |
| wp-sensitive-paths |
web-exploitation |
1 |
2026-04-25 12:21 |
|
| 2026-04-25 12:07 |
112.82.218.162 |
crowdsecurity/http-bad-user-agent |
Iris |
Fleet |
| 2026-04-25 11:33 |
2a02:4780:75:26dd::1 |
suspicious-probe |
Triton |
Fleet |
| 2026-04-25 11:06 |
158.94.211.203 |
+4
|
Iris |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| crowdsecurity/http-admin-interface-probing |
reconnaissance |
1 |
2026-04-25 11:06 |
| suspicious-probe |
reconnaissance |
1 |
2026-04-25 11:06 |
| crowdsecurity/http-probing |
other |
1 |
2026-04-25 11:06 |
| mgmt-path-probe |
reconnaissance |
1 |
2026-04-25 11:06 |
|
| 2026-04-25 10:24 |
20.215.66.169 |
+4
|
Hermes |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| wp-sensitive-paths |
web-exploitation |
1 |
2026-04-25 10:24 |
| webshell-high-confidence |
post-exploitation |
1 |
2026-04-25 10:24 |
| wordpress-probe |
web-exploitation |
1 |
2026-04-25 10:24 |
| wp-obscure-nested-php |
web-exploitation |
1 |
2026-04-25 10:24 |
|
| 2026-04-25 08:58 |
158.158.73.199 |
+2
|
Triton |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| webshell-high-confidence |
post-exploitation |
1 |
2026-04-25 08:58 |
| webshell-probe |
post-exploitation |
1 |
2026-04-25 08:58 |
|
| 2026-04-25 07:59 |
146.70.194.238 |
+2
|
Zephyrus |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| wp-sensitive-paths |
web-exploitation |
1 |
2026-04-25 07:59 |
| wordpress-probe |
web-exploitation |
1 |
2026-04-25 07:59 |
|
| 2026-04-25 07:49 |
167.94.146.58 |
crowdsecurity/http-bad-user-agent |
Zephyrus |
Fleet |
| 2026-04-25 07:42 |
93.123.109.164 |
+9
|
Iris |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| mgmt-path-probe |
reconnaissance |
1 |
2026-04-25 07:42 |
| webshell-high-confidence |
post-exploitation |
1 |
2026-04-25 07:42 |
| suspicious-probe |
reconnaissance |
1 |
2026-04-25 07:42 |
| crowdsecurity/http-admin-interface-probing |
reconnaissance |
1 |
2026-04-25 07:42 |
| wp-sensitive-paths |
web-exploitation |
1 |
2026-04-25 07:42 |
| wordpress-probe |
web-exploitation |
1 |
2026-04-25 07:42 |
| crowdsecurity/http-crawl-non_statics |
other |
1 |
2026-04-25 07:42 |
| crowdsecurity/http-probing |
other |
1 |
2026-04-25 07:42 |
| crowdsecurity/http-sensitive-files |
other |
1 |
2026-04-25 07:42 |
|
| 2026-04-25 07:41 |
199.45.155.65 |
crowdsecurity/http-bad-user-agent |
Zephyrus |
Fleet |
| 2026-04-25 06:36 |
18.145.135.193 |
+2
|
Zephyrus |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| suspicious-probe |
reconnaissance |
1 |
2026-04-25 06:36 |
| crowdsecurity/http-sensitive-files |
other |
1 |
2026-04-25 06:36 |
|
| 2026-04-25 06:03 |
51.68.111.215 |
crowdsecurity/http-bad-user-agent |
Triton |
Fleet |
| 2026-04-25 05:58 |
45.148.10.120 |
suspicious-probe |
Argus |
Fleet |
| 2026-04-25 05:37 |
51.68.111.203 |
crowdsecurity/http-bad-user-agent |
Triton |
Fleet |
| 2026-04-25 05:34 |
38.133.213.104 |
+13
|
Triton |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| suspicious-probe |
reconnaissance |
1 |
2026-04-25 05:34 |
| mgmt-path-probe |
reconnaissance |
1 |
2026-04-25 05:34 |
| webshell-high-confidence |
post-exploitation |
1 |
2026-04-25 05:34 |
| wordpress-probe |
web-exploitation |
1 |
2026-04-25 05:34 |
| wp-sensitive-paths |
web-exploitation |
1 |
2026-04-25 05:34 |
| php-obscure-path-backdoor |
web-exploitation |
1 |
2026-04-25 05:34 |
| webshell-probe |
post-exploitation |
1 |
2026-04-25 05:34 |
| php-backdoor-generic |
web-exploitation |
1 |
2026-04-25 05:34 |
| wp-nested-backdoor |
web-exploitation |
1 |
2026-04-25 05:34 |
| wp-obscure-nested-php |
web-exploitation |
1 |
2026-04-25 05:34 |
| crowdsecurity/http-crawl-non_statics |
other |
1 |
2026-04-25 05:34 |
| crowdsecurity/nginx-req-limit-exceeded |
other |
1 |
2026-04-25 05:34 |
| crowdsecurity/http-probing |
other |
1 |
2026-04-25 05:34 |
|
| 2026-04-25 05:21 |
15.164.181.249 |
+3
|
Argus |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| suspicious-probe |
reconnaissance |
1 |
2026-04-25 05:21 |
| crowdsecurity/http-probing |
other |
1 |
2026-04-25 05:07 |
| crowdsecurity/http-sensitive-files |
other |
1 |
2026-04-25 05:07 |
|
| 2026-04-25 05:08 |
13.48.203.104 |
+3
|
Argus |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| suspicious-probe |
reconnaissance |
1 |
2026-04-25 05:08 |
| crowdsecurity/http-probing |
other |
1 |
2026-04-25 05:08 |
| crowdsecurity/http-sensitive-files |
other |
1 |
2026-04-25 05:08 |
|
| 2026-04-25 05:05 |
93.123.109.166 |
+9
|
Iris |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| mgmt-path-probe |
reconnaissance |
1 |
2026-04-25 05:05 |
| suspicious-probe |
reconnaissance |
1 |
2026-04-25 05:05 |
| wp-sensitive-paths |
web-exploitation |
1 |
2026-04-25 05:05 |
| wordpress-probe |
web-exploitation |
1 |
2026-04-25 05:05 |
| crowdsecurity/http-admin-interface-probing |
reconnaissance |
1 |
2026-04-25 05:05 |
| webshell-high-confidence |
post-exploitation |
1 |
2026-04-25 05:05 |
| crowdsecurity/http-crawl-non_statics |
other |
1 |
2026-04-25 05:05 |
| crowdsecurity/http-sensitive-files |
other |
1 |
2026-04-25 05:05 |
| crowdsecurity/http-probing |
other |
1 |
2026-04-25 05:05 |
|
| 2026-04-25 05:04 |
97.107.140.120 |
+3
|
Iris |
Fleet |
| Scenario |
Category |
Hits |
Last Seen |
| mgmt-path-probe |
reconnaissance |
1 |
2026-04-25 05:04 |
| crowdsecurity/http-admin-interface-probing |
reconnaissance |
1 |
2026-04-25 05:04 |
| crowdsecurity/http-probing |
other |
1 |
2026-04-25 05:04 |
|