192.144.91.75

Fail2Ban: 192.144.91.75 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36

PrestaShop faceted search filter flooding attempt

L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /18-velo-route | query: q=Stock+magasin-Cycling+Cavaillon-Cycling+H%C3%A ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /18-velo-route | query: q=Stock+magasin-Cycling+Cavaillon-Cycling+H%C3%A9nin%5C-Beaumont-Cycling+Montpellier/Taille-XXS-L-XL-XXL/Famille-Addict+RC-Metri | 2026-09-12 13:35 UTC show less

"Packet Flood; Triggered WAF; Persistent 404 Attempts"

Fail2Ban: 192.144.91.75 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36

"Packet Flood; Triggered WAF; Persistent 404 Attempts"

Unidentified crawling: not a self-announced bot in user-agent

Web bot: denial-of-service flood

(apache-useragents) Failed apache-useragents trigger with match [redacted] from 192.144.91.75 (no-rdns.dzcrd.net)

SmallGuard.fr/Prestashop Massive 403

Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) ... show more Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) flooded the backend via proxy/hosting networks. ~36,700 source IPs, ~1 request per IP, identical TLS fingerprint (TLS1.3 0x1301) and one spoofed Chrome UA = single automated tool. show less

Malicious activity detected

Web bot: DDoS

tcp/443 (8 or more attempts)

Botnet-generated fake user-agent with impossible version. UA="Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.2718.1530 Mobile Safar"