Threats Blocked by CrowdSec

Live production view of automated threat detection and fleet-wide enforcement across beane.me.

Live · updated 12:10 PM EST

Reported to AbuseIPDB 31,007+ 107 today · last 109.160.32.146 AbuseIPDB profile →

Nodes reporting 5 Hermes, Iris, Nike, Triton, Zephyrus

Top troublemaker 20.217.184.185 7 scenarios in the latest bans

Recent bans

Time (EST)

IP address

Scenarios

Node

12:03

34.51.194.104

crowdsecurity/http-sensitive-files

Zephyrus

Scenario	Category	Hits	Last Seen
crowdsecurity/http-sensitive-files	other	1×	Nov 02, 12:03
suspicious-probe	reconnaissance	1×	Nov 02, 12:03

11:49

102.220.160.195

mgmt-path-probe

Hermes

11:31

89.106.1.23

suspicious-probe

Triton

11:25

115.191.34.239

cowrie-interaction

Nike

11:25

189.101.75.145

cowrie-interaction

Nike

11:23

36.255.220.145

cowrie-interaction

Nike

11:23

50.6.205.78

cowrie-interaction

Nike

11:22

50.6.5.14

cowrie-interaction

Nike

11:22

50.6.23.110

cowrie-interaction

Nike

11:22

222.208.64.40

cowrie-interaction

Nike

11:20

34.77.34.65

suspicious-probe

Triton

Scenario	Category	Hits	Last Seen
suspicious-probe	reconnaissance	1×	Nov 02, 11:20
mgmt-path-probe	reconnaissance	1×	Nov 02, 11:20
crowdsecurity/http-path-traversal-probing	other	1×	Nov 02, 11:20
crowdsecurity/http-bad-user-agent	other	1×	Nov 02, 11:20
crowdsecurity/http-probing	other	1×	Nov 02, 11:20
crowdsecurity/http-crawl-non_statics	other	1×	Nov 02, 11:20

11:20

58.229.253.119

cowrie-interaction

Nike

11:20

213.230.127.104

cowrie-interaction

Nike

11:20

14.103.126.104

cowrie-interaction

Nike

11:20

121.142.87.218

cowrie-interaction

Nike

11:20

20.217.184.185

webshell-high-confidence

Iris

Scenario	Category	Hits	Last Seen
webshell-high-confidence	post-exploitation	1×	Nov 02, 11:20
wp-sensitive-paths	web-exploitation	1×	Nov 02, 11:02
php-obscure-path-backdoor	web-exploitation	1×	Nov 02, 11:02
wordpress-probe	web-exploitation	1×	Nov 02, 11:02
wp-obscure-nested-php	web-exploitation	1×	Nov 02, 11:02
wp-nested-backdoor	web-exploitation	1×	Nov 02, 11:02
crowdsecurity/http-probing	other	1×	Nov 02, 11:02

11:20

192.169.232.223

cowrie-interaction

Nike

11:19

129.121.115.10

cowrie-interaction

Nike

11:18

103.30.195.219

cowrie-interaction

Nike

11:18

152.200.181.42

cowrie-interaction

Nike

11:18

40.74.68.248

cowrie-interaction

Nike

11:17

129.121.97.74

cowrie-interaction

Nike

11:17

213.55.171.188

cowrie-interaction

Nike

11:16

102.88.137.80

cowrie-interaction

Nike

11:16

182.40.195.233

cowrie-interaction

Nike

Public threat intelligence API

GET https://threats.beane.me/api

Machine-readable feed of recent CrowdSec decisions.
Updated automatically · Rate limited · No authentication required

View raw JSON →

Defense summary

Active detection via CrowdSec scenarios
Brute force protection via Fail2Ban
Real-time IP logging and manual subnet bans
Hardened environment deployed on NGINX