๐ธ๐ฌ
mypatricks
2026-07-10 05:03:27
(1 day ago)
140.143.187.16 | Port: 12231 | DNS: 140.143.187.16 2026-07-10T13:03:26+08:00 Asia/Shanghai | IPs Spa ...
show more
140.143.187.16 | Port: 12231 | DNS: 140.143.187.16 2026-07-10T13:03:26+08:00 Asia/Shanghai | IPs Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /%e6%98%9f%e5%ba%a7%e4%b8%80%e5%91%a8/?b22fd00af2fbaea2e&1782789568 | Ref: https://xxxxxx/%e6%98%9f%e5%ba%a7%e4%b8%80%e5%91%a8/?b22fd00af2fbaea2e=&1782789568= | Country: CN/China/+08:00 IP City: Beijing Windows a18d05990f230be1-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 2
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
๐จ๐ฆ
polycoda
2026-06-27 11:18:39
(2 weeks ago)
๐ฅถ Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
๐ธ๐ฌ
mypatricks
2026-06-16 11:11:07
(3 weeks ago)
140.143.187.16 | Port: 12482 | DNS: 140.143.187.16 2026-06-16T19:11:06+08:00 Asia/Shanghai | IPs Spa ...
show more
140.143.187.16 | Port: 12482 | DNS: 140.143.187.16 2026-06-16T19:11:06+08:00 Asia/Shanghai | IPs Spam list | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /%e5%af%92%e5%bf%83/?fcb9ba2adbaef29292c&1781253005 | Ref: https://xxxxxx/%e5%af%92%e5%bf%83/?fcb9ba2adbaef29292c=&1781253005= | Country: CN/China/+08:00 IP City: Beijing macOS a0c95f309a0c7875-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 2
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
๐ธ๐ฌ
mypatricks
2026-06-13 19:23:04
(4 weeks ago)
140.143.187.16 | Port: 12066 | DNS: 140.143.187.16 2026-06-14T03:23:03+08:00 Asia/Shanghai | IPs Spa ...
show more
140.143.187.16 | Port: 12066 | DNS: 140.143.187.16 2026-06-14T03:23:03+08:00 Asia/Shanghai | IPs Spam list | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /page/2/?92dafcdfecedbda90=1107&1769333158 | Ref: https://xxxxxx/page/2/?92dafcdfecedbda90=1107&1769333158= | Country: CN/China/+08:00 IP City: Beijing macOS a0b377acdbb2fb9c-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 2
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
๐ธ๐ฌ
mypatricks
2026-06-13 16:55:24
(4 weeks ago)
140.143.187.16 | Port: 13367 | DNS: 140.143.187.16 2026-06-14T00:55:24+08:00 Asia/Shanghai | IPs Spa ...
show more
140.143.187.16 | Port: 13367 | DNS: 140.143.187.16 2026-06-14T00:55:24+08:00 Asia/Shanghai | IPs Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /zh/%e5%88%9d%e5%ad%a6%e8%80%85%e6%8c%87%e5%8d%97/%e5%93%aa%e7%a7%8d%e9%a3%9f%e7%94%a8%e8%89%b2%e7%b4%a0%e6%9b%b4%e9%80%82%e5%90%88gumpaste/?acc1ceefeffb1e123c&1775105194 | Ref: https://xxxxxx/zh/%e5%88%9d%e5%ad%a6%e8%80%85%e6%8c%87%e5%8d%97/%e5%93%aa%e7%a7%8d%e9%a3%9f%e7%94%a8%e8%89%b2%e7%b4%a0%e6%9b%b4%e9%80%82%e5%90%88gumpaste/?acc1ceefeffb1e123c=&1775105194= | Country: CN/China/+08:00 IP City: Beijing Windows a0b29f624927d251-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 2
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
๐ฆ๐บ
afleventoffice.com.au
2026-06-11 10:19:21
(1 month ago)
GET /events.cgi/taps/suites.htm?match=RD00_87&incr=0 HTTP/1.1
Web App Attack
๐ฆ๐บ
MAGIC
2026-05-24 01:11:40
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ธ๐ฌ
mypatricks
2026-05-16 14:30:04
(1 month ago)
140.143.187.16 | Port: 10857 | DNS: 140.143.187.16 2026-05-16T22:30:03+08:00 Asia/Singapore | IPs Sp ...
show more
140.143.187.16 | Port: 10857 | DNS: 140.143.187.16 2026-05-16T22:30:03+08:00 Asia/Singapore | IPs Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /cake-for-him/856-lynnlynn-bomba-firefighter/?sort=p.price&order=ASC&limit=75 | Ref: - | Country: CN/China/+08:00 Windows 9fcb13f91e58f5b4-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 4
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
Anonymous
2026-05-05 09:13:39
(2 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
show less
Exploited Host
Bad Web Bot
๐จ๐ฆ
polycoda
2026-04-27 11:03:25
(2 months ago)
๐ Probes for tons of inexistent files and/or PHP scripts
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-26 14:10:43
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 140.143.187.16 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 140.143.187.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 10:10:38.402877 2026] [security2:error] [pid 9915:tid 9915] [client 140.143.187.16:60544] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||williamfitzsimmons.com|F|2"] [data ".crescentphx.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "williamfitzsimmons.com"] [uri "/news/0410-william-fitzsimmons-spring-tour-update/www.crescentphx.com"] [unique_id "ae4c3rb2rwPA3V1R1TwfOgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ฌ
mypatricks
2026-04-21 01:12:42
(2 months ago)
140.143.187.16 | Port: 9564 | DNS: 140.143.187.16 2026-04-21T09:12:41+08:00 Asia/Shanghai | IPs Spam ...
show more
140.143.187.16 | Port: 9564 | DNS: 140.143.187.16 2026-04-21T09:12:41+08:00 Asia/Shanghai | IPs Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /%e5%af%92%e5%bf%83/?b09990be2fde0ab2caaf&1776143801 | Ref: https://xxxxxx/%e5%af%92%e5%bf%83/?b09990be2fde0ab2caaf=&1776143801= | Country: CN/China/+08:00 IP City: Beijing Windows 9ef8859a0a59773f-AMS/Amsterdam, Netherlands 1 hits/0 secs Browser 2
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host