# alerts

created_at: 2023-08-06 23:49:25.822875339+00:00
updated_at: 2023-08-06 23:49:25.82287564+00:00
scenario: crowdsecurity/http-sensitive-files
started_at: 2023-08-06 23:49:16.667344391+00:00
stopped_at: 2023-08-06 23:49:25.647054643+00:00
source_ip: 193.56.29.103
source_range: 193.56.28.0/23
source_as_number: 210228
source_as_name: Web Hosted Group Ltd
source_country: PL
source_scope: Ip
source_value: 193.56.29.103
leak_speed: 5s
scenario_version: 0.2
scenario_hash: 3f20d74ee5b040db30743ed189537e8c43e04f8954bb5a02251a3495e7a2a555
uuid: f5d0e350-6dab-4536-9497-43b27ebaf8a0
message:
  Ip 193.56.29.103 performed 'crowdsecurity/http-sensitive-files' (6 events over 8.979710252s) at 2023-08-06 23:49:25.647053423 +0000 UTC


created_at: 2023-08-06 23:49:40.841558497+00:00
updated_at: 2023-08-06 23:49:40.841558746+00:00
scenario: crowdsecurity/http-probing
started_at: 2023-08-06 23:49:15.149931631+00:00
stopped_at: 2023-08-06 23:49:39.945590567+00:00
source_ip: 193.56.29.103
source_range: 193.56.28.0/23
source_as_number: 210228
source_as_name: Web Hosted Group Ltd
source_country: PL
source_scope: Ip
source_value: 193.56.29.103
leak_speed: 10s
scenario_version: 0.2
scenario_hash: c8bb45b4fb8834ea1dc5cff6439dd272c87d7ee5af4a51e77341ec6edc5d7a25
uuid: 73edf9d1-cc2d-4e52-8887-1ccef9b6b005
message:
  Ip 193.56.29.103 performed 'crowdsecurity/http-probing' (13 events over 24.795658936s) at 2023-08-06 23:49:39.945588383 +0000 UTC


# bouncers

created_at: 2023-08-09 12:01:04.055897128+00:00
updated_at: 2023-08-09 12:01:04.055897229+00:00
name: traefik-crowdsec-bouncer
ip_address: 172.31.254.252
type: Go-http-client
version: 1.1
until: 2023-07-04 07:55:45.162521266+00:00
last_pull: 2023-08-09 12:01:04.055893691+00:00
auth_type: api-key
api_key:
  fe5161575d08a7b5bcedb02826512532652609bb0a177801f2d251c30bbc446c2f0c1fe53c9cf8eb5d73bed23f42b28865b4a4d5ab7d06d5f423c593ed304fd4


# events

created_at: 2023-08-06 23:49:25.814771635+00:00
updated_at: 2023-08-06 23:49:25.814772009+00:00
time: 2023-08-06 23:49:18+00:00
serialized:
  [{"key":"ASNNumber","value":"210228"},{"key":"ASNOrg","value":"Web Hosted Group Ltd"},{"key":"IsInEU","value":"true"},{"key":"IsoCode","value":"PL"},{"key":"SourceRange","value":"193.56.28.0/23"},{"key":"datasource_path","value":"/var/log/traefik/access.log"},{"key":"datasource_type","value":"file"},{"key":"http_args_len","value":"0"},{"key":"http_path","value":"/asterisk.prothmann.com/.env"},{"key":"http_status","value":"403"},{"key":"http_user_agent","value":"-"},{"key":"http_verb","value":"GET"},{"key":"log_type","value":"http_access-log"},{"key":"service","value":"http"},{"key":"source_ip","value":"193.56.29.103"},{"key":"timestamp","value":"2023-08-06T23:49:18Z"},{"key":"traefik_router_name","value":"web-to-websecure@internal"},{"key":"user","value":"-"}]


created_at: 2023-08-06 23:49:25.814772855+00:00
updated_at: 2023-08-06 23:49:25.814773074+00:00
time: 2023-08-06 23:49:18+00:00
serialized:
  [{"key":"ASNNumber","value":"210228"},{"key":"ASNOrg","value":"Web Hosted Group Ltd"},{"key":"IsInEU","value":"true"},{"key":"IsoCode","value":"PL"},{"key":"SourceRange","value":"193.56.28.0/23"},{"key":"datasource_path","value":"/var/log/traefik/access.log"},{"key":"datasource_type","value":"file"},{"key":"http_args_len","value":"0"},{"key":"http_path","value":"/vendor/.env"},{"key":"http_status","value":"403"},{"key":"http_user_agent","value":"-"},{"key":"http_verb","value":"GET"},{"key":"log_type","value":"http_access-log"},{"key":"service","value":"http"},{"key":"source_ip","value":"193.56.29.103"},{"key":"timestamp","value":"2023-08-06T23:49:18Z"},{"key":"traefik_router_name","value":"web-to-websecure@internal"},{"key":"user","value":"-"}]


created_at: 2023-08-06 23:49:25.814773369+00:00
updated_at: 2023-08-06 23:49:25.814773547+00:00
time: 2023-08-06 23:49:21+00:00
serialized:
  [{"key":"ASNNumber","value":"210228"},{"key":"ASNOrg","value":"Web Hosted Group Ltd"},{"key":"IsInEU","value":"true"},{"key":"IsoCode","value":"PL"},{"key":"SourceRange","value":"193.56.28.0/23"},{"key":"datasource_path","value":"/var/log/traefik/access.log"},{"key":"datasource_type","value":"file"},{"key":"http_args_len","value":"0"},{"key":"http_path","value":"/admin/.env"},{"key":"http_status","value":"403"},{"key":"http_user_agent","value":"-"},{"key":"http_verb","value":"GET"},{"key":"log_type","value":"http_access-log"},{"key":"service","value":"http"},{"key":"source_ip","value":"193.56.29.103"},{"key":"timestamp","value":"2023-08-06T23:49:21Z"},{"key":"traefik_router_name","value":"web-to-websecure@internal"},{"key":"user","value":"-"}]


created_at: 2023-08-06 23:49:25.81477384+00:00
updated_at: 2023-08-06 23:49:25.814774024+00:00
time: 2023-08-06 23:49:23+00:00
serialized:
  [{"key":"ASNNumber","value":"210228"},{"key":"ASNOrg","value":"Web Hosted Group Ltd"},{"key":"IsInEU","value":"true"},{"key":"IsoCode","value":"PL"},{"key":"SourceRange","value":"193.56.28.0/23"},{"key":"datasource_path","value":"/var/log/traefik/access.log"},{"key":"datasource_type","value":"file"},{"key":"http_args_len","value":"0"},{"key":"http_path","value":"/blog/.env"},{"key":"http_status","value":"403"},{"key":"http_user_agent","value":"-"},{"key":"http_verb","value":"GET"},{"key":"log_type","value":"http_access-log"},{"key":"service","value":"http"},{"key":"source_ip","value":"193.56.29.103"},{"key":"timestamp","value":"2023-08-06T23:49:23Z"},{"key":"traefik_router_name","value":"web-to-websecure@internal"},{"key":"user","value":"-"}]


created_at: 2023-08-06 23:49:25.814774535+00:00
updated_at: 2023-08-06 23:49:25.814774712+00:00
time: 2023-08-06 23:49:25+00:00
serialized:
  [{"key":"ASNNumber","value":"210228"},{"key":"ASNOrg","value":"Web Hosted Group Ltd"},{"key":"IsInEU","value":"true"},{"key":"IsoCode","value":"PL"},{"key":"SourceRange","value":"193.56.28.0/23"},{"key":"datasource_path","value":"/var/log/traefik/access.log"},{"key":"datasource_type","value":"file"},{"key":"http_args_len","value":"0"},{"key":"http_path","value":"/laravel/.env"},{"key":"http_status","value":"403"},{"key":"http_user_agent","value":"-"},{"key":"http_verb","value":"GET"},{"key":"log_type","value":"http_access-log"},{"key":"service","value":"http"},{"key":"source_ip","value":"193.56.29.103"},{"key":"timestamp","value":"2023-08-06T23:49:25Z"},{"key":"traefik_router_name","value":"web-to-websecure@internal"},{"key":"user","value":"-"}]


created_at: 2023-08-06 23:49:40.814812177+00:00
updated_at: 2023-08-06 23:49:40.814812358+00:00
time: 2023-08-06 23:49:28+00:00
serialized:
  [{"key":"ASNNumber","value":"210228"},{"key":"ASNOrg","value":"Web Hosted Group Ltd"},{"key":"IsInEU","value":"true"},{"key":"IsoCode","value":"PL"},{"key":"SourceRange","value":"193.56.28.0/23"},{"key":"datasource_path","value":"/var/log/traefik/access.log"},{"key":"datasource_type","value":"file"},{"key":"http_args_len","value":"0"},{"key":"http_path","value":"/dev/.env"},{"key":"http_status","value":"403"},{"key":"http_user_agent","value":"-"},{"key":"http_verb","value":"GET"},{"key":"log_type","value":"http_access-log"},{"key":"service","value":"http"},{"key":"source_ip","value":"193.56.29.103"},{"key":"timestamp","value":"2023-08-06T23:49:28Z"},{"key":"traefik_router_name","value":"web-to-websecure@internal"},{"key":"user","value":"-"}]


created_at: 2023-08-06 23:49:40.814812648+00:00
updated_at: 2023-08-06 23:49:40.814812829+00:00
time: 2023-08-06 23:49:31+00:00
serialized:
  [{"key":"ASNNumber","value":"210228"},{"key":"ASNOrg","value":"Web Hosted Group Ltd"},{"key":"IsInEU","value":"true"},{"key":"IsoCode","value":"PL"},{"key":"SourceRange","value":"193.56.28.0/23"},{"key":"datasource_path","value":"/var/log/traefik/access.log"},{"key":"datasource_type","value":"file"},{"key":"http_args_len","value":"0"},{"key":"http_path","value":"/test/.env"},{"key":"http_status","value":"403"},{"key":"http_user_agent","value":"-"},{"key":"http_verb","value":"GET"},{"key":"log_type","value":"http_access-log"},{"key":"service","value":"http"},{"key":"source_ip","value":"193.56.29.103"},{"key":"timestamp","value":"2023-08-06T23:49:31Z"},{"key":"traefik_router_name","value":"web-to-websecure@internal"},{"key":"user","value":"-"}]


created_at: 2023-08-06 23:49:40.814813122+00:00
updated_at: 2023-08-06 23:49:40.81481339+00:00
time: 2023-08-06 23:49:33+00:00
serialized:
  [{"key":"ASNNumber","value":"210228"},{"key":"ASNOrg","value":"Web Hosted Group Ltd"},{"key":"IsInEU","value":"true"},{"key":"IsoCode","value":"PL"},{"key":"SourceRange","value":"193.56.28.0/23"},{"key":"datasource_path","value":"/var/log/traefik/access.log"},{"key":"datasource_type","value":"file"},{"key":"http_args_len","value":"0"},{"key":"http_path","value":"/portal/.env"},{"key":"http_status","value":"403"},{"key":"http_user_agent","value":"-"},{"key":"http_verb","value":"GET"},{"key":"log_type","value":"http_access-log"},{"key":"service","value":"http"},{"key":"source_ip","value":"193.56.29.103"},{"key":"timestamp","value":"2023-08-06T23:49:33Z"},{"key":"traefik_router_name","value":"web-to-websecure@internal"},{"key":"user","value":"-"}]


created_at: 2023-08-06 23:49:40.814813705+00:00
updated_at: 2023-08-06 23:49:40.814813901+00:00
time: 2023-08-06 23:49:35+00:00
serialized:
  [{"key":"ASNNumber","value":"210228"},{"key":"ASNOrg","value":"Web Hosted Group Ltd"},{"key":"IsInEU","value":"true"},{"key":"IsoCode","value":"PL"},{"key":"SourceRange","value":"193.56.28.0/23"},{"key":"datasource_path","value":"/var/log/traefik/access.log"},{"key":"datasource_type","value":"file"},{"key":"http_args_len","value":"0"},{"key":"http_path","value":"/project/.env"},{"key":"http_status","value":"403"},{"key":"http_user_agent","value":"-"},{"key":"http_verb","value":"GET"},{"key":"log_type","value":"http_access-log"},{"key":"service","value":"http"},{"key":"source_ip","value":"193.56.29.103"},{"key":"timestamp","value":"2023-08-06T23:49:35Z"},{"key":"traefik_router_name","value":"web-to-websecure@internal"},{"key":"user","value":"-"}]


created_at: 2023-08-06 23:49:40.814814276+00:00
updated_at: 2023-08-06 23:49:40.814814455+00:00
time: 2023-08-06 23:49:37+00:00
serialized:
  [{"key":"ASNNumber","value":"210228"},{"key":"ASNOrg","value":"Web Hosted Group Ltd"},{"key":"IsInEU","value":"true"},{"key":"IsoCode","value":"PL"},{"key":"SourceRange","value":"193.56.28.0/23"},{"key":"datasource_path","value":"/var/log/traefik/access.log"},{"key":"datasource_type","value":"file"},{"key":"http_args_len","value":"0"},{"key":"http_path","value":"/assets/.env"},{"key":"http_status","value":"403"},{"key":"http_user_agent","value":"-"},{"key":"http_verb","value":"GET"},{"key":"log_type","value":"http_access-log"},{"key":"service","value":"http"},{"key":"source_ip","value":"193.56.29.103"},{"key":"timestamp","value":"2023-08-06T23:49:37Z"},{"key":"traefik_router_name","value":"web-to-websecure@internal"},{"key":"user","value":"-"}]


created_at: 2023-08-06 23:49:40.814814743+00:00
updated_at: 2023-08-06 23:49:40.814814923+00:00
time: 2023-08-06 23:49:39+00:00
serialized:
  [{"key":"ASNNumber","value":"210228"},{"key":"ASNOrg","value":"Web Hosted Group Ltd"},{"key":"IsInEU","value":"true"},{"key":"IsoCode","value":"PL"},{"key":"SourceRange","value":"193.56.28.0/23"},{"key":"datasource_path","value":"/var/log/traefik/access.log"},{"key":"datasource_type","value":"file"},{"key":"http_args_len","value":"0"},{"key":"http_path","value":"/shop/.env"},{"key":"http_status","value":"403"},{"key":"http_user_agent","value":"-"},{"key":"http_verb","value":"GET"},{"key":"log_type","value":"http_access-log"},{"key":"service","value":"http"},{"key":"source_ip","value":"193.56.29.103"},{"key":"timestamp","value":"2023-08-06T23:49:39Z"},{"key":"traefik_router_name","value":"web-to-websecure@internal"},{"key":"user","value":"-"}]


# machines

created_at: 2023-08-09 12:01:09.247939846+00:00
updated_at: 2023-08-09 12:01:09.247940166+00:00
last_push: 2023-08-09 12:01:09.247940277+00:00
last_heartbeat: 2023-08-09 12:01:09.247939121+00:00
machine_id: localhost
password: $2a$10$2M3PKqT3iUAelDZ89s6gsenKCZrHjF1BsstabKLCelE49aSnwlldS
ip_address: 127.0.0.1
version: v1.5.2-4fbc3402fba932c8bd34b671527dcf7909d264c0
auth_type: password
scenarios:
  crowdsecurity/http-bad-user-agent,crowdsecurity/spring4shell_cve-2022-22965,ltsich/http-w00tw00t,crowdsecurity/http-sensitive-files,crowdsecurity/http-generic-bf,crowdsecurity/http-xss-probing,crowdsecurity/postfix-spam,crowdsecurity/CVE-2022-41697,crowdsecurity/grafana-cve-2021-43798,crowdsecurity/CVE-2022-35914,crowdsecurity/nginx-req-limit-exceeded,crowdsecurity/http-probing,crowdsecurity/CVE-2022-37042,crowdsecurity/CVE-2022-42889,crowdsecurity/CVE-2022-44877,crowdsecurity/dovecot-spam,crowdsecurity/http-backdoors-attempts,crowdsecurity/http-cve-2021-42013,crowdsecurity/jira_cve-2021-26086,crowdsecurity/apache_log4j2_cve-2021-44228,crowdsecurity/http-crawl-non_statics,crowdsecurity/CVE-2022-41082,crowdsecurity/CVE-2022-26134,crowdsecurity/CVE-2019-18935,crowdsecurity/http-sqli-probing,crowdsecurity/pulse-secure-sslvpn-cve-2019-11510,crowdsecurity/thinkphp-cve-2018-20062,crowdsecurity/vmware-cve-2022-22954,crowdsecurity/http-cve-2021-41773,crowdsecurity/netgear_rce,crowdsecurity/vmware-vcenter-vmsa-2021-0027,crowdsecurity/fortinet-cve-2018-13379,crowdsecurity/f5-big-ip-cve-2020-5902,crowdsecurity/http-open-proxy,crowdsecurity/http-path-traversal-probing,crowdsecurity/CVE-2022-40684,crowdsecurity/CVE-2022-46169


