Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated re ...
show moreDistributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated requests to expensive Git repository endpoints (commit/diff/blame/archive views), ~1 request per IP, spoofed browser UA, rejected with HTTP 429. Residential-proxy botnet campaign, 2026-06-13/14 UTC.
show less
[fail2ban Auto Report] {"time":"2026-05-23T17:45:03.229058577-04:00","level":"INFO","source":{"funct ...
show more[fail2ban Auto Report] {"time":"2026-05-23T17:45:03.229058577-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(*Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309},"msg":"explicit deny","subsystem":"anubis","host":"tent.canine.tools","method":"GET","path":"/discover.php","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36","accept_language":"en-US,en;q=0.9","priority":"","x-forwarded-for":"14.191.137.24","x-real-ip":"14.191.137.24","host":"tent.canine.tools","check_result":{"name":"bot/aggressive-chinese-asns","rule":"DENY","weight":0}}
...
show less
[fail2ban Auto Report] {"time":"2026-05-18T02:39:34.129192548-04:00","level":"INFO","source":{"funct ...
show more[fail2ban Auto Report] {"time":"2026-05-18T02:39:34.129192548-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(*Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309},"msg":"explicit deny","subsystem":"anubis","host":"searxng.canine.tools","method":"GET","path":"/search","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36","accept_language":"en-US,en;q=0.9","priority":"u=0, i","x-forwarded-for":"14.191.137.24","x-real-ip":"14.191.137.24","host":"searxng.canine.tools","check_result":{"name":"bot/aggressive-chinese-asns","rule":"DENY","weight":0}}
...
show less
Dec 19 13:18:07 SRC=14.191.137.24 PROTO=TCP SPT=31383 DPT=445 SYN
Dec 19 13:18:36 SRC=14.191.137.24 ...
show moreDec 19 13:18:07 SRC=14.191.137.24 PROTO=TCP SPT=31383 DPT=445 SYN
Dec 19 13:18:36 SRC=14.191.137.24 PROTO=TCP SPT=31383 DPT=445
Dec 19 13:18:36 SRC=14.191.137.24 PROTO=TCP SPT=31383 DPT=445
...
show less
Port Scan
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩