Confirmed source of repeated and high-risk malicious activity targeting web applications.
Observe ...
show moreConfirmed source of repeated and high-risk malicious activity targeting web applications.
Observed behavior includes high-volume automated requests, multiple confirmed SQL injection attempts, and targeted exploitation of application endpoints.
The activity triggered repeated critical Fail2Ban detections (Category: SQL injection / intrusion) and demonstrates clear hostile intent.
Due to persistence and severity, the IP address has been permanently blocked at firewall and WAF level and classified as malicious.
show less
Confirmed source of repeated and high-risk malicious activity targeting web applications.
Observe ...
show moreConfirmed source of repeated and high-risk malicious activity targeting web applications.
Observed behavior includes high-volume automated requests, multiple confirmed SQL injection attempts, and targeted exploitation of application endpoints.
The activity triggered repeated critical Fail2Ban detections (Category: SQL injection / intrusion) and demonstrates clear hostile intent.
Due to persistence and severity, the IP address has been permanently blocked at firewall and WAF level and classified as malicious.
show less
Confirmed source of repeated and high-risk malicious activity targeting web applications.
Observe ...
show moreConfirmed source of repeated and high-risk malicious activity targeting web applications.
Observed behavior includes high-volume automated requests, multiple confirmed SQL injection attempts, and targeted exploitation of application endpoints.
The activity triggered repeated critical Fail2Ban detections (Category: SQL injection / intrusion) and demonstrates clear hostile intent.
Due to persistence and severity, the IP address has been permanently blocked at firewall and WAF level and classified as malicious.
show less
Confirmed source of repeated and high-risk malicious activity targeting web applications.
Observe ...
show moreConfirmed source of repeated and high-risk malicious activity targeting web applications.
Observed behavior includes high-volume automated requests, multiple confirmed SQL injection attempts, and targeted exploitation of application endpoints.
The activity triggered repeated critical Fail2Ban detections (Category: SQL injection / intrusion) and demonstrates clear hostile intent.
Due to persistence and severity, the IP address has been permanently blocked at firewall and WAF level and classified as malicious.
show less
Confirmed source of repeated and high-risk malicious activity targeting web applications.
Observe ...
show moreConfirmed source of repeated and high-risk malicious activity targeting web applications.
Observed behavior includes high-volume automated requests, multiple confirmed SQL injection attempts, and targeted exploitation of application endpoints.
The activity triggered repeated critical Fail2Ban detections (Category: SQL injection / intrusion) and demonstrates clear hostile intent.
Due to persistence and severity, the IP address has been permanently blocked at firewall and WAF level and classified as malicious.
show less
Confirmed source of repeated and high-risk malicious activity targeting web applications.
Observe ...
show moreConfirmed source of repeated and high-risk malicious activity targeting web applications.
Observed behavior includes high-volume automated requests, multiple confirmed SQL injection attempts, and targeted exploitation of application endpoints.
The activity triggered repeated critical Fail2Ban detections (Category: SQL injection / intrusion) and demonstrates clear hostile intent.
Due to persistence and severity, the IP address has been permanently blocked at firewall and WAF level and classified as malicious.
show less
Confirmed source of repeated and high-risk malicious activity targeting web applications.
Observe ...
show moreConfirmed source of repeated and high-risk malicious activity targeting web applications.
Observed behavior includes high-volume automated requests, multiple confirmed SQL injection attempts, and targeted exploitation of application endpoints.
The activity triggered repeated critical Fail2Ban detections (Category: SQL injection / intrusion) and demonstrates clear hostile intent.
Due to persistence and severity, the IP address has been permanently blocked at firewall and WAF level and classified as malicious.
show less
Confirmed source of repeated and high-risk malicious activity targeting web applications.
Observe ...
show moreConfirmed source of repeated and high-risk malicious activity targeting web applications.
Observed behavior includes high-volume automated requests, multiple confirmed SQL injection attempts, and targeted exploitation of application endpoints.
The activity triggered repeated critical Fail2Ban detections (Category: SQL injection / intrusion) and demonstrates clear hostile intent.
Due to persistence and severity, the IP address has been permanently blocked at firewall and WAF level and classified as malicious.
show less
The IP address 195.201.110.49 has been permanently blacklisted due to confirmed, repeated, and high- ...
show moreThe IP address 195.201.110.49 has been permanently blacklisted due to confirmed, repeated, and high-risk attack activity.
All administrators are advised to immediately block this IP address at the firewall level and report it to all relevant threat intelligence and blacklist networks.
Verified malicious activity includes:
High-volume automated query spam
Multiple confirmed SQL injection attempts
Targeted web application exploitation attempts
Repeated critical Fail2Ban triggers
(Category: SQL injection / intrusion)
Security recommendation:
Enforce permanent deny rules, propagate blocks across all connected systems, and submit the IP address to global threat intelligence and blacklist services (e.g. Spamhaus, AbuseIPDB, security blocklists, SOCs).
show less
The IP address 157.66.56.161 has been permanently blacklisted due to confirmed, repeated and high-ri ...
show moreThe IP address 157.66.56.161 has been permanently blacklisted due to confirmed, repeated and high-risk attack attempts. All administrators are advised to block this IP at firewall level immediately and report it to all relevant threat-intel and blacklist networks. Verified malicious activity includes: High-volume automated query spam Multiple confirmed SQL Injection attacks Targeted web application exploitation attempts Repeated Fail2Ban critical triggers (Category: SQL injection / intrusion) Security Recommendation: Enforce permanent deny rules, propagate to all connected systems, and submit to global blacklists (Spamhaus, AbuseIPDB, blocklists, SOCs).
show less
The IP address 170.106.143.6 has been permanently blacklisted due to confirmed, repeated and high-ri ...
show moreThe IP address 170.106.143.6 has been permanently blacklisted due to confirmed, repeated and high-risk attack attempts.
All administrators are advised to block this IP at firewall level immediately and report it to all relevant threat-intel and blacklist networks.
Verified malicious activity includes:
High-volume automated query spam
Multiple confirmed SQL Injection attacks
Targeted web application exploitation attempts
Repeated Fail2Ban critical triggers (Category: SQL injection / intrusion)
Security Recommendation:
Enforce permanent deny rules, propagate to all connected systems, and submit to global blacklists (Spamhaus, AbuseIPDB, blocklists, SOCs).
show less
The IP address 77.65.103.81 has been permanently blacklisted due to confirmed, repeated and high-ris ...
show moreThe IP address 77.65.103.81 has been permanently blacklisted due to confirmed, repeated and high-risk attack attempts.
All administrators are advised to block this IP at firewall level immediately and report it to all relevant threat-intel and blacklist networks.
Verified malicious activity includes:
High-volume automated query spam
Multiple confirmed SQL Injection attacks
Targeted web application exploitation attempts
Repeated Fail2Ban critical triggers (Category: SQL injection / intrusion)
Security Recommendation:
Enforce permanent deny rules, propagate to all connected systems, and submit to global blacklists (Spamhaus, AbuseIPDB, blocklists, SOCs).
show less
The IP address 193.32.126.234 has been permanently blacklisted due to confirmed, repeated and high-r ...
show moreThe IP address 193.32.126.234 has been permanently blacklisted due to confirmed, repeated and high-risk attack attempts.
All administrators are advised to block this IP at firewall level immediately and report it to all relevant threat-intel and blacklist networks.
Verified malicious activity includes:
High-volume automated query spam
Multiple confirmed SQL Injection attacks
Targeted web application exploitation attempts
Repeated Fail2Ban critical triggers (Category: SQL injection / intrusion)
Security Recommendation:
Enforce permanent deny rules, propagate to all connected systems, and submit to global blacklists (Spamhaus, AbuseIPDB, blocklists, SOCs).
show less
The IP address 31.57.219.97 has been permanently blacklisted due to confirmed, repeated and high-ris ...
show moreThe IP address 31.57.219.97 has been permanently blacklisted due to confirmed, repeated and high-risk attack attempts.
All administrators are advised to block this IP at firewall level immediately and report it to all relevant threat-intel and blacklist networks.
Verified malicious activity includes:
High-volume automated query spam
Multiple confirmed SQL Injection attacks
Targeted web application exploitation attempts
Repeated Fail2Ban critical triggers (Category: SQL injection / intrusion)
Security Recommendation:
Enforce permanent deny rules, propagate to all connected systems, and submit to global blacklists (Spamhaus, AbuseIPDB, blocklists, SOCs).
show less
Alert: IP 84.200.17.100 has been permanently blocked due to repeated security threats. Detected acti ...
show moreAlert: IP 84.200.17.100 has been permanently blocked due to repeated security threats. Detected activities include:
High-volume query spamming
Multiple SQL Injection attempts
Web application attack attempts
Repeated Fail2Ban triggers – Caboom: SQL injection
This behavior indicates automated scripts or a botnet targeting vulnerabilities. Blocking and reporting to blacklists is strongly recommended.
show less
Adres IP 149.50.110.68 został zablokowany na naszym serwerze z powodu powtarzających się i agresywny ...
show moreAdres IP 149.50.110.68 został zablokowany na naszym serwerze z powodu powtarzających się i agresywnych prób naruszenia bezpieczeństwa. Ruch pochodzący z tego IP charakteryzował się:
intensywnym spamowaniem zapytań,
wielokrotnymi próbami SQL Injection,
próbami ataku na aplikację webową (web app attack),
wielokrotnymi blokadami generowanymi przez Fail2Ban – Caboom: SQL injection.
Zachowanie tego adresu jednoznacznie wskazuje na działalność zautomatyzowanych skryptów lub botnetu nastawionego na wyszukiwanie podatności w aplikacjach. W trosce o bezpieczeństwo infrastruktury adres został trwale zablokowany i rekomendujemy jego zgłaszanie na czarne listy oraz blokowanie na wszystkich poziomach zabezpieczeń.
show less
Please block the IP address 103.65.236.169 and report it to blacklist providers.
This IP has been r ...
show morePlease block the IP address 103.65.236.169 and report it to blacklist providers.
This IP has been repeatedly involved in malicious activity, including:
HTTP attacks
SQL Injection attempts
Probing for vulnerabilities
Other forms of hostile traffic targeting websites
For the security of your systems and servers, we strongly recommend immediate blocking of this IP and adding it to your intrusion prevention lists.
Stay safe and keep monitoring your logs for suspicious activity.
show less
[client 40.84.52.106:7027] ModSecurity: Warning. Pattern match "system\\\\.php" at REQUEST_LINE. [fi ...
show more[client 40.84.52.106:7027] ModSecurity: Warning. Pattern match "system\\\\.php" at REQUEST_LINE. [file "/opt/iq/httpd/conf/mod_security/iq/enabled/90_local.conf"] [line "128"] [id "130"] [msg "system.php"] [tag "WEB_ATTACK/RFI"]
show less
If you've been targeted by an attack from IP address 172.166.167.177, it's important to take steps t ...
show moreIf you've been targeted by an attack from IP address 172.166.167.177, it's important to take steps to protect yourself and others. We recommend reporting this IP address to the blacklists available on the Internet. By doing so, you will not only secure your systems but also help in creating a safer digital environment for everyone. Together, we can more effectively combat undesirable activities online. Let's act together for the common good!
show less
If you've been targeted by an attack from IP address 91.103.250.233, it's important to take steps to ...
show moreIf you've been targeted by an attack from IP address 91.103.250.233, it's important to take steps to protect yourself and others. We recommend reporting this IP address to the blacklists available on the Internet. By doing so, you will not only secure your systems but also help in creating a safer digital environment for everyone. Together, we can more effectively combat undesirable activities online. Let's act together for the common good!
show less