AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User NoaQT , the webmaster of owo.si, joined AbuseIPDB in February 2026 and has reported 21,162 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇳🇱 77.239.124.152	1 hour ago	2026-10-19T08:38:12.727529+02:00 asdeby sshd-session[2821885]: pam_unix(sshd:auth): authentication f ... show more 2026-10-19T08:38:12.727529+02:00 asdeby sshd-session[2821885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.239.124.152 user=root 2026-10-19T08:38:14.786270+02:00 asdeby sshd-session[2821885]: Failed password for root from 77.239.124.152 port 35974 ssh2 2026-10-19T08:38:15.877316+02:00 asdeby sshd-session[2821885]: Connection closed by authenticating user root 77.239.124.152 port 35974 [preauth] ... show less	Brute-Force SSH
🇳🇱 64.225.79.124	1 hour ago	2026-10-19T06:31:43.060217+00:00 ingress-1 haproxy[275]: 64.225.79.124:34430 [19/Oct/2026:06:31:43.0 ... show more 2026-10-19T06:31:43.060217+00:00 ingress-1 haproxy[275]: 64.225.79.124:34430 [19/Oct/2026:06:31:43.060] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 108 - - PR-- 212/205/0/0/0 0/0 "HEAD /website/ HTTP/1.1" 2026-10-19T06:31:43.089696+00:00 ingress-1 haproxy[275]: 64.225.79.124:34430 [19/Oct/2026:06:31:43.089] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 108 - - PR-- 212/205/0/0/0 0/0 "HEAD /shop/ HTTP/1.1" 2026-10-19T06:31:43.119286+00:00 ingress-1 haproxy[275]: 64.225.79.124:34430 [19/Oct/2026:06:31:43.118] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 108 - - PR-- 212/205/0/0/0 0/0 "HEAD /home/ HTTP/1.1" 2026-10-19T06:31:43.148552+00:00 ingress-1 haproxy[275]: 64.225.79.124:34430 [19/Oct/2026:06:31:43.148] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 108 - - PR-- 212/205/0/0/0 0/0 "HEAD /us/ HTTP/1.1" 2026-10-19T06:31:43.178036+00:00 ingress-1 haproxy[275]: 64.225.79.124:34430 [19/Oct/2026:06:31:43.177] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 108 - - PR-- 211/204/0/0/0 0/0 "HEAD /wp/ HTTP/1 ... show less	DDoS Attack
🇧🇪 34.22.126.178	1 hour ago	2026-10-19T06:17:11.705104+00:00 ingress-1 haproxy[275]: 34.22.126.178:49772 [19/Oct/2026:06:17:11.7 ... show more 2026-10-19T06:17:11.705104+00:00 ingress-1 haproxy[275]: 34.22.126.178:49772 [19/Oct/2026:06:17:11.705] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 182/175/0/0/0 0/0 "GET https://warehouse.proteini.mentis.si/.env.dev HTTP/2.0" 2026-10-19T06:17:11.705121+00:00 ingress-1 haproxy[275]: 34.22.126.178:49772 [19/Oct/2026:06:17:11.705] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 182/175/0/0/0 0/0 "GET https://warehouse.proteini.mentis.si/.env.development HTTP/2.0" 2026-10-19T06:17:11.705137+00:00 ingress-1 haproxy[275]: 34.22.126.178:49772 [19/Oct/2026:06:17:11.705] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 182/175/0/0/0 0/0 "GET https://warehouse.proteini.mentis.si/.env.dist HTTP/2.0" 2026-10-19T06:17:11.705313+00:00 ingress-1 haproxy[275]: 34.22.126.178:49772 [19/Oct/2026:06:17:11.705] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 182/175/0/0/0 0/0 "GET https://warehouse.proteini.mentis.si/.env.docker HTTP/2.0" 2026-10-19T06:17:11.705451+0 ... show less	DDoS Attack
🇳🇱 77.239.124.152	2 hours ago	2026-10-19T07:37:16.256350+02:00 asdeby sshd-session[2784167]: Invalid user from 77.239.124.152 por ... show more 2026-10-19T07:37:16.256350+02:00 asdeby sshd-session[2784167]: Invalid user from 77.239.124.152 port 47164 2026-10-19T07:37:24.154665+02:00 asdeby sshd-session[2784167]: Connection closed by invalid user 77.239.124.152 port 47164 [preauth] 2026-10-19T07:38:10.153824+02:00 asdeby sshd-session[2784759]: Invalid user gy from 77.239.124.152 port 45446 ... show less	Brute-Force SSH
🇩🇪 64.89.160.73	2 hours ago	2026-10-19T05:34:32.237031+00:00 ingress-1 haproxy[275]: 64.89.160.73:50608 [19/Oct/2026:05:34:32.23 ... show more 2026-10-19T05:34:32.237031+00:00 ingress-1 haproxy[275]: 64.89.160.73:50608 [19/Oct/2026:05:34:32.236] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 147/140/0/0/0 0/0 "GET /.env.backup HTTP/1.1" 2026-10-19T05:34:32.321052+00:00 ingress-1 haproxy[275]: 64.89.160.73:57256 [19/Oct/2026:05:34:32.320] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 147/140/0/0/0 0/0 "GET /.env.backup HTTP/1.1" 2026-10-19T05:34:32.402892+00:00 ingress-1 haproxy[275]: 64.89.160.73:57258 [19/Oct/2026:05:34:32.402] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 147/140/0/0/0 0/0 "GET /.env.backup HTTP/1.1" 2026-10-19T05:34:32.490043+00:00 ingress-1 haproxy[275]: 64.89.160.73:57262 [19/Oct/2026:05:34:32.489] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 147/140/0/0/0 0/0 "GET /.env.backup HTTP/1.1" 2026-10-19T05:34:32.620088+00:00 ingress-1 haproxy[275]: 64.89.160.73:12146 [19/Oct/2026:05:34:32.619] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 147/140/0/0/0 0/0 "G ... show less	DDoS Attack
🇧🇪 104.199.36.53	2 hours ago	2026-10-19T05:18:39.604749+00:00 ingress-1 haproxy[275]: 104.199.36.53:37892 [19/Oct/2026:05:18:39.6 ... show more 2026-10-19T05:18:39.604749+00:00 ingress-1 haproxy[275]: 104.199.36.53:37892 [19/Oct/2026:05:18:39.604] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 143/136/0/0/0 0/0 "GET https://odoo17-dev.mentis.si/.env.dev HTTP/2.0" 2026-10-19T05:18:39.604789+00:00 ingress-1 haproxy[275]: 104.199.36.53:37892 [19/Oct/2026:05:18:39.604] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 143/136/0/0/0 0/0 "GET https://odoo17-dev.mentis.si/.env.development HTTP/2.0" 2026-10-19T05:18:39.604812+00:00 ingress-1 haproxy[275]: 104.199.36.53:37892 [19/Oct/2026:05:18:39.604] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 143/136/0/0/0 0/0 "GET https://odoo17-dev.mentis.si/.env.dist HTTP/2.0" 2026-10-19T05:18:39.604834+00:00 ingress-1 haproxy[275]: 104.199.36.53:37892 [19/Oct/2026:05:18:39.604] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 143/136/0/0/0 0/0 "GET https://odoo17-dev.mentis.si/.env.docker HTTP/2.0" 2026-10-19T05:18:39.604856+00:00 ingress-1 haproxy[275]: 104 ... show less	DDoS Attack
🇩🇪 164.90.218.152	3 hours ago	2026-10-19T04:48:55.276788+00:00 ingress-1 haproxy[275]: 164.90.218.152:58576 [19/Oct/2026:04:48:55. ... show more 2026-10-19T04:48:55.276788+00:00 ingress-1 haproxy[275]: 164.90.218.152:58576 [19/Oct/2026:04:48:55.275] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 108 - - PR-- 61/61/0/0/0 0/0 "HEAD /shop/ HTTP/1.1" 2026-10-19T04:48:55.317292+00:00 ingress-1 haproxy[275]: 164.90.218.152:58576 [19/Oct/2026:04:48:55.316] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 108 - - PR-- 61/61/0/0/0 0/0 "HEAD /news/ HTTP/1.1" 2026-10-19T04:48:55.357873+00:00 ingress-1 haproxy[275]: 164.90.218.152:58576 [19/Oct/2026:04:48:55.357] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 108 - - PR-- 61/61/0/0/0 0/0 "HEAD /wordpress/ HTTP/1.1" 2026-10-19T04:48:55.398361+00:00 ingress-1 haproxy[275]: 164.90.218.152:58576 [19/Oct/2026:04:48:55.397] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 108 - - PR-- 61/61/0/0/0 0/0 "HEAD /site/ HTTP/1.1" 2026-10-19T04:48:55.438912+00:00 ingress-1 haproxy[275]: 164.90.218.152:58576 [19/Oct/2026:04:48:55.438] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 108 - - PR-- 61/61/0/0/0 0/0 "HEAD /blog/ HTTP/ ... show less	DDoS Attack
🇧🇪 34.14.99.143	3 hours ago	2026-10-19T04:11:06.431423+00:00 ingress-1 haproxy[275]: 34.14.99.143:35314 [19/Oct/2026:04:11:06.43 ... show more 2026-10-19T04:11:06.431423+00:00 ingress-1 haproxy[275]: 34.14.99.143:35314 [19/Oct/2026:04:11:06.430] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 64/64/0/0/0 0/0 "GET https://optics-trade.mentis.si/.env.dev HTTP/2.0" 2026-10-19T04:11:06.431455+00:00 ingress-1 haproxy[275]: 34.14.99.143:35314 [19/Oct/2026:04:11:06.431] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 64/64/0/0/0 0/0 "GET https://optics-trade.mentis.si/.env.development HTTP/2.0" 2026-10-19T04:11:06.431887+00:00 ingress-1 haproxy[275]: 34.14.99.143:35314 [19/Oct/2026:04:11:06.431] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 64/64/0/0/0 0/0 "GET https://optics-trade.mentis.si/.env.dist HTTP/2.0" 2026-10-19T04:11:06.432327+00:00 ingress-1 haproxy[275]: 34.14.99.143:35314 [19/Oct/2026:04:11:06.431] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 64/64/0/0/0 0/0 "GET https://optics-trade.mentis.si/.env.docker HTTP/2.0" 2026-10-19T04:11:06.432999+00:00 ingress-1 haproxy[275]: 34.14.9 ... show less	DDoS Attack
🇧🇪 34.156.249.47	4 hours ago	2026-10-19T03:58:32.446210+00:00 ingress-1 haproxy[275]: 34.156.249.47:55420 [19/Oct/2026:03:58:32.4 ... show more 2026-10-19T03:58:32.446210+00:00 ingress-1 haproxy[275]: 34.156.249.47:55420 [19/Oct/2026:03:58:32.445] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 64/64/0/0/0 0/0 "GET https://proteini.mentis.si/.env.dev HTTP/2.0" 2026-10-19T03:58:32.451078+00:00 ingress-1 haproxy[275]: 34.156.249.47:55420 [19/Oct/2026:03:58:32.450] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 64/64/0/0/0 0/0 "GET https://proteini.mentis.si/.env.development HTTP/2.0" 2026-10-19T03:58:32.464513+00:00 ingress-1 haproxy[275]: 34.156.249.47:55420 [19/Oct/2026:03:58:32.464] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 64/64/0/0/0 0/0 "GET https://proteini.mentis.si/.env.dist HTTP/2.0" 2026-10-19T03:58:32.467983+00:00 ingress-1 haproxy[275]: 34.156.249.47:55420 [19/Oct/2026:03:58:32.467] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 64/64/0/0/0 0/0 "GET https://proteini.mentis.si/.env.docker HTTP/2.0" 2026-10-19T03:58:32.471531+00:00 ingress-1 haproxy[275]: 34.156.249.47:55420 ... show less	DDoS Attack
🇲🇽 187.141.7.247	4 hours ago	2026-10-19T03:33:56.901719+00:00 ingress-1 haproxy[275]: 187.141.7.247:37394 [19/Oct/2026:03:33:56.9 ... show more 2026-10-19T03:33:56.901719+00:00 ingress-1 haproxy[275]: 187.141.7.247:37394 [19/Oct/2026:03:33:56.900] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 54/54/0/0/0 0/0 "GET /phpMyAdmin-5.2.1/index.php?lang=en HTTP/1.1" 2026-10-19T03:33:57.124270+00:00 ingress-1 haproxy[275]: 187.141.7.247:37394 [19/Oct/2026:03:33:57.123] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 54/54/0/0/0 0/0 "GET /db/phpMyAdmin-4/index.php?lang=en HTTP/1.1" 2026-10-19T03:33:57.344542+00:00 ingress-1 haproxy[275]: 187.141.7.247:37394 [19/Oct/2026:03:33:57.344] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 54/54/0/0/0 0/0 "GET /administrator/web/index.php?lang=en HTTP/1.1" 2026-10-19T03:33:57.569571+00:00 ingress-1 haproxy[275]: 187.141.7.247:37394 [19/Oct/2026:03:33:57.568] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 54/54/0/0/0 0/0 "GET /phpMyAdmin-5/index.php?lang=en HTTP/1.1" 2026-10-19T03:33:57.792075+00:00 ingress-1 haproxy[275]: 187.141.7.247:37394 [19/Oct/2026:03:33: ... show less	DDoS Attack
🇧🇪 34.79.51.100	5 hours ago	2026-10-19T02:56:07.191673+00:00 ingress-1 haproxy[275]: 34.79.51.100:41306 [19/Oct/2026:02:56:07.19 ... show more 2026-10-19T02:56:07.191673+00:00 ingress-1 haproxy[275]: 34.79.51.100:41306 [19/Oct/2026:02:56:07.191] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 63/63/0/0/0 0/0 "GET https://mentis.si/.env.dev HTTP/2.0" 2026-10-19T02:56:07.191691+00:00 ingress-1 haproxy[275]: 34.79.51.100:41306 [19/Oct/2026:02:56:07.191] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 63/63/0/0/0 0/0 "GET https://mentis.si/.env.dist HTTP/2.0" 2026-10-19T02:56:07.191707+00:00 ingress-1 haproxy[275]: 34.79.51.100:41306 [19/Oct/2026:02:56:07.191] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 63/63/0/0/0 0/0 "GET https://mentis.si/.env.docker HTTP/2.0" 2026-10-19T02:56:07.191722+00:00 ingress-1 haproxy[275]: 34.79.51.100:41306 [19/Oct/2026:02:56:07.191] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 63/63/0/0/0 0/0 "GET https://mentis.si/.env.example HTTP/2.0" 2026-10-19T02:56:07.191736+00:00 ingress-1 haproxy[275]: 34.79.51.100:41306 [19/Oct/2026:02:56:07.191] https_in~ https_i ... show less	DDoS Attack
🇧🇪 35.195.192.203	5 hours ago	2026-10-19T04:43:59.887544+02:00 asdeby sshd-session[2676996]: Unable to negotiate with 35.195.192.2 ... show more 2026-10-19T04:43:59.887544+02:00 asdeby sshd-session[2676996]: Unable to negotiate with 35.195.192.203 port 2820: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] 2026-10-19T04:44:08.591010+02:00 asdeby sshd-session[2677099]: Invalid user hwsgj from 35.195.192.203 port 18294 2026-10-19T04:44:08.697228+02:00 asdeby sshd-session[2677099]: Connection closed by invalid user hwsgj 35.195.192.203 port 18294 [preauth] ... show less	Brute-Force SSH
🇧🇪 34.76.149.2	5 hours ago	2026-10-19T04:40:34.401635+02:00 asdeby sshd-session[2674850]: pam_unix(sshd:auth): authentication f ... show more 2026-10-19T04:40:34.401635+02:00 asdeby sshd-session[2674850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.76.149.2 2026-10-19T04:40:36.402663+02:00 asdeby sshd-session[2674850]: Failed password for invalid user admin from 34.76.149.2 port 57236 ssh2 2026-10-19T04:40:36.635102+02:00 asdeby sshd-session[2674850]: Connection closed by invalid user admin 34.76.149.2 port 57236 [preauth] ... show less	Brute-Force SSH
🇧🇪 34.52.150.124	5 hours ago	2026-10-19T02:32:02.166423+00:00 ingress-1 haproxy[275]: 34.52.150.124:56082 [19/Oct/2026:02:32:02.1 ... show more 2026-10-19T02:32:02.166423+00:00 ingress-1 haproxy[275]: 34.52.150.124:56082 [19/Oct/2026:02:32:02.166] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 67/67/0/0/0 0/0 "GET https://pekarna.mentis.si/.env.dev HTTP/2.0" 2026-10-19T02:32:02.166616+00:00 ingress-1 haproxy[275]: 34.52.150.124:56082 [19/Oct/2026:02:32:02.166] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 67/67/0/0/0 0/0 "GET https://pekarna.mentis.si/.env.development HTTP/2.0" 2026-10-19T02:32:02.166825+00:00 ingress-1 haproxy[275]: 34.52.150.124:56082 [19/Oct/2026:02:32:02.166] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 67/67/0/0/0 0/0 "GET https://pekarna.mentis.si/.env.dist HTTP/2.0" 2026-10-19T02:32:02.166844+00:00 ingress-1 haproxy[275]: 34.52.150.124:56082 [19/Oct/2026:02:32:02.166] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 67/67/0/0/0 0/0 "GET https://pekarna.mentis.si/.env.docker HTTP/2.0" 2026-10-19T02:32:02.167316+00:00 ingress-1 haproxy[275]: 34.52.150.124:56082 [19 ... show less	DDoS Attack
🇷🇴 2.57.121.112	5 hours ago	2026-10-19T04:29:32.330816+02:00 asdeby sshd-session[2667998]: pam_unix(sshd:auth): authentication f ... show more 2026-10-19T04:29:32.330816+02:00 asdeby sshd-session[2667998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.112 2026-10-19T04:29:33.906200+02:00 asdeby sshd-session[2667998]: Failed password for invalid user tanna from 2.57.121.112 port 3184 ssh2 2026-10-19T04:29:37.224498+02:00 asdeby sshd-session[2667998]: Failed password for invalid user tanna from 2.57.121.112 port 3184 ssh2 ... show less	Brute-Force SSH
🇦🇺 20.211.97.120	5 hours ago	2026-10-19T02:24:03.627068+00:00 ingress-1 haproxy[275]: 20.211.97.120:38022 [19/Oct/2026:02:24:03.6 ... show more 2026-10-19T02:24:03.627068+00:00 ingress-1 haproxy[275]: 20.211.97.120:38022 [19/Oct/2026:02:24:03.626] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 61/61/0/0/0 0/0 "GET /go.php HTTP/1.1" 2026-10-19T02:24:03.925516+00:00 ingress-1 haproxy[275]: 20.211.97.120:38022 [19/Oct/2026:02:24:03.924] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 61/61/0/0/0 0/0 "GET /1ac.php HTTP/1.1" ... show less	DDoS Attack
🇷🇴 2.57.121.25	6 hours ago	2026-10-19T03:53:31.839071+02:00 asdeby sshd-session[2645711]: Invalid user admin from 2.57.121.25 p ... show more 2026-10-19T03:53:31.839071+02:00 asdeby sshd-session[2645711]: Invalid user admin from 2.57.121.25 port 35600 2026-10-19T03:53:31.872415+02:00 asdeby sshd-session[2645711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.25 2026-10-19T03:53:34.148895+02:00 asdeby sshd-session[2645711]: Failed password for invalid user admin from 2.57.121.25 port 35600 ssh2 ... show less	Brute-Force SSH
🇷🇴 193.46.255.86	6 hours ago	2026-10-19T03:36:50.505826+02:00 asdeby sshd-session[2635407]: Invalid user probe from 193.46.255.86 ... show more 2026-10-19T03:36:50.505826+02:00 asdeby sshd-session[2635407]: Invalid user probe from 193.46.255.86 port 53380 2026-10-19T03:36:50.537988+02:00 asdeby sshd-session[2635407]: Failed none for invalid user probe from 193.46.255.86 port 53380 ssh2 ... show less	Brute-Force SSH
🇳🇱 45.148.10.9	7 hours ago	2026-10-19T00:43:04.168625+00:00 ingress-1 haproxy[275]: 45.148.10.9:53282 [19/Oct/2026:00:43:04.168 ... show more 2026-10-19T00:43:04.168625+00:00 ingress-1 haproxy[275]: 45.148.10.9:53282 [19/Oct/2026:00:43:04.168] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 98/98/0/0/0 0/0 "GET / HTTP/1.1" 2026-10-19T00:43:04.200415+00:00 ingress-1 haproxy[275]: 45.148.10.9:53282 [19/Oct/2026:00:43:04.199] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 98/98/0/0/0 0/0 "GET /blog/ HTTP/1.1" 2026-10-19T00:43:04.228403+00:00 ingress-1 haproxy[275]: 45.148.10.9:53282 [19/Oct/2026:00:43:04.227] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 98/98/0/0/0 0/0 "GET /wp/ HTTP/1.1" 2026-10-19T00:43:04.260450+00:00 ingress-1 haproxy[275]: 45.148.10.9:53282 [19/Oct/2026:00:43:04.260] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 98/98/0/0/0 0/0 "GET /wordpress/ HTTP/1.1" 2026-10-19T00:43:04.289132+00:00 ingress-1 haproxy[275]: 45.148.10.9:53282 [19/Oct/2026:00:43:04.288] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 98/98/0/0/0 0/0 "GET /site/ HTTP/1.1" ... show less	DDoS Attack
🇩🇪 109.160.32.163	7 hours ago	2026-10-19T02:16:05.792742+02:00 asdeby sshd-session[2585410]: Invalid user from 109.160.32.163 por ... show more 2026-10-19T02:16:05.792742+02:00 asdeby sshd-session[2585410]: Invalid user from 109.160.32.163 port 53800 2026-10-19T02:16:13.544906+02:00 asdeby sshd-session[2585410]: Connection closed by invalid user 109.160.32.163 port 53800 [preauth] 2026-10-19T02:17:24.838499+02:00 asdeby sshd-session[2586237]: Invalid user ansibleteam from 109.160.32.163 port 50830 ... show less	Brute-Force SSH
🇧🇪 34.140.132.132	8 hours ago	2026-10-18T23:51:09.352861+00:00 ingress-1 haproxy[275]: 34.140.132.132:60974 [18/Oct/2026:23:51:09. ... show more 2026-10-18T23:51:09.352861+00:00 ingress-1 haproxy[275]: 34.140.132.132:60974 [18/Oct/2026:23:51:09.352] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 107/107/0/0/0 0/0 "GET https://git.mentis.si/.env.backup HTTP/2.0" 2026-10-18T23:51:09.359468+00:00 ingress-1 haproxy[275]: 34.140.132.132:60974 [18/Oct/2026:23:51:09.358] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 107/107/0/0/0 0/0 "GET https://git.mentis.si/.env.bak HTTP/2.0" 2026-10-18T23:51:09.359696+00:00 ingress-1 haproxy[275]: 34.140.132.132:60974 [18/Oct/2026:23:51:09.359] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 107/107/0/0/0 0/0 "GET https://git.mentis.si/.env.dev HTTP/2.0" 2026-10-18T23:51:09.386073+00:00 ingress-1 haproxy[275]: 34.140.132.132:60974 [18/Oct/2026:23:51:09.385] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 107/107/0/0/0 0/0 "GET https://git.mentis.si/.env.development HTTP/2.0" 2026-10-18T23:51:09.392718+00:00 ingress-1 haproxy[275]: 34.140.132.132:60974 [18/Oct ... show less	DDoS Attack
🇧🇪 34.62.25.61	8 hours ago	2026-10-18T23:50:17.097607+00:00 ingress-1 haproxy[275]: 34.62.25.61:47818 [18/Oct/2026:23:50:17.096 ... show more 2026-10-18T23:50:17.097607+00:00 ingress-1 haproxy[275]: 34.62.25.61:47818 [18/Oct/2026:23:50:17.096] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 103/103/0/0/0 0/0 "GET https://dt.proteini.mentis.si/.env.dev HTTP/2.0" 2026-10-18T23:50:17.097628+00:00 ingress-1 haproxy[275]: 34.62.25.61:47818 [18/Oct/2026:23:50:17.097] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 103/103/0/0/0 0/0 "GET https://dt.proteini.mentis.si/.env.development HTTP/2.0" 2026-10-18T23:50:17.099904+00:00 ingress-1 haproxy[275]: 34.62.25.61:47818 [18/Oct/2026:23:50:17.099] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 103/103/0/0/0 0/0 "GET https://dt.proteini.mentis.si/.env.dist HTTP/2.0" 2026-10-18T23:50:17.100133+00:00 ingress-1 haproxy[275]: 34.62.25.61:47818 [18/Oct/2026:23:50:17.099] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 103/103/0/0/0 0/0 "GET https://dt.proteini.mentis.si/.env.docker HTTP/2.0" 2026-10-18T23:50:17.101262+00:00 ingress-1 haproxy[275]: 34.62.2 ... show less	DDoS Attack
🇵🇱 45.138.12.22	8 hours ago	2026-10-18T23:50:11.816154+00:00 ingress-1 haproxy[275]: 45.138.12.22:44054 [18/Oct/2026:23:50:11.81 ... show more 2026-10-18T23:50:11.816154+00:00 ingress-1 haproxy[275]: 45.138.12.22:44054 [18/Oct/2026:23:50:11.815] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 103/103/0/0/0 0/0 "GET https://135.181.126.143/.amazonq/mcp.json HTTP/2.0" 2026-10-18T23:50:11.981012+00:00 ingress-1 haproxy[275]: 45.138.12.22:44054 [18/Oct/2026:23:50:11.980] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 102/102/0/0/0 0/0 "GET https://135.181.126.143/aws-exports.js HTTP/2.0" 2026-10-18T23:50:11.981012+00:00 ingress-1 haproxy[275]: 45.138.12.22:44054 [18/Oct/2026:23:50:11.980] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 102/102/0/0/0 0/0 "GET https://135.181.126.143/aws-exports.js HTTP/2.0" 2026-10-18T23:50:12.603674+00:00 ingress-1 haproxy[275]: 45.138.12.22:44054 [18/Oct/2026:23:50:12.602] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 101/101/0/0/0 0/0 "GET https://135.181.126.143/.junie/mcp.json HTTP/2.0" ... show less	DDoS Attack
🇫🇷 185.177.72.75	8 hours ago	2026-10-18T23:37:22.323375+00:00 ingress-1 haproxy[275]: 185.177.72.75:40612 [18/Oct/2026:23:37:22.3 ... show more 2026-10-18T23:37:22.323375+00:00 ingress-1 haproxy[275]: 185.177.72.75:40612 [18/Oct/2026:23:37:22.322] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 88/88/0/0/0 0/0 "GET /content/.env HTTP/1.1" 2026-10-18T23:37:22.323630+00:00 ingress-1 haproxy[275]: 185.177.72.75:40632 [18/Oct/2026:23:37:22.322] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 88/88/0/0/0 0/0 "GET /cpanel/.env HTTP/1.1" 2026-10-18T23:37:22.421822+00:00 ingress-1 haproxy[275]: 185.177.72.75:40648 [18/Oct/2026:23:37:22.421] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 88/88/0/0/0 0/0 "GET /custom/.env HTTP/1.1" 2026-10-18T23:37:22.865233+00:00 ingress-1 haproxy[275]: 185.177.72.75:40756 [18/Oct/2026:23:37:22.864] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 95/95/0/0/0 0/0 "GET /global/.env HTTP/1.1" 2026-10-18T23:37:22.891208+00:00 ingress-1 haproxy[275]: 185.177.72.75:40744 [18/Oct/2026:23:37:22.890] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 95/95/0/0/0 0/0 "G ... show less	DDoS Attack
🇬🇧 209.97.183.43	8 hours ago	2026-10-19T01:34:45.779648+02:00 asdeby sshd-session[2559342]: pam_unix(sshd:auth): authentication f ... show more 2026-10-19T01:34:45.779648+02:00 asdeby sshd-session[2559342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.183.43 user=root 2026-10-19T01:34:47.592506+02:00 asdeby sshd-session[2559342]: Failed password for root from 209.97.183.43 port 52126 ssh2 2026-10-19T01:34:48.524402+02:00 asdeby sshd-session[2559342]: Connection closed by authenticating user root 209.97.183.43 port 52126 [preauth] ... show less	Brute-Force SSH