Threat Intel

CrowdSec bans across the beane.me fleet over the past 30 days: where they came from and what they tried.

Stale Β· data 19h 30m old

Bans (30 days) 7,943 2,330 IPs Β· 78 countries
Daily average 245 ↑ 2% vs the week before
Top source πŸ‡ΊπŸ‡Έ US 2,607 bans Β· 33% of all

What Changed

Threat Map

Each circle is a location; size and colour show its ban count.

Top Countries

  1. US 2,607
  2. NL 946
  3. BE 707
  4. BG 446
  5. DE 382
  6. FR 331
  7. SG 330
  8. JP 325

Bans by source country. Unknown locations are left out.

Scenarios Hit

  1. suspicious-probe 969
  2. http-probing 763
  3. wp-sensitive-paths 608
  4. mgmt-path-probe 594
  5. http-sensitive-files 466
  6. http-crawl-non_statics 404
  7. http-bad-user-agent 403
  8. cowrie-interaction 360
  9. wordpress-probe 313
  10. webshell-high-confidence 298
  11. Other (33 more) 1,578

Distinct IPs per CrowdSec scenario; an IP that triggered several counts in each.