🇩🇪
LRob
2026-10-30 04:46:25
UTC ·
(2 weeks ago)
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6400.44 Safari/537.36
Bad Web Bot
🇳🇱
Mangelot Hosting
2026-10-26 19:08:37
UTC ·
(2 weeks ago)
165.99.216.233 (BD/Bangladesh/user-gw.sylhet.neefitsylhet.com), 10 distributed imapd attacks on account [REDACTED] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 26 20:02:51 dovecot[761]: imap-login: Login aborte ...
show more
165.99.216.233 (BD/Bangladesh/user-gw.sylhet.neefitsylhet.com), 10 distributed imapd attacks on account [REDACTED] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 26 20:02:51 dovecot[761]: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=102.219.27.100, lip=0.0.0.x, TLS, session=<bJ60+cJePNxm2xtk>
Oct 26 20:02:27 dovecot[761]: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 8 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=189.51.42.14, lip=0.0.0.x, TLS: Connection closed, session=<3Cj398JeGx29MyoO>
Oct 26 20:02:17 dovecot[761]: imap-login:
show less
DDoS Attack
🇫🇷
bigorre.org
2026-10-24 11:11:07
UTC ·
(2 weeks ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-22 07:05:26
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 165.99.216.233 (user-gw.sylhet.neefitsylhet.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 03:05:19.171654 2026] [security2:error] [pid 8111:tid 8111] [ ...
show more
(mod_security) mod_security (id:225170) triggered by 165.99.216.233 (user-gw.sylhet.neefitsylhet.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 03:05:19.171654 2026] [security2:error] [pid 8111:tid 8111] [client 165.99.216.233:48862] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rootsofwellnessayurveda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rootsofwellnessayurveda.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "atm1rytU1NNuCBLargBmvgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-10-20 20:41:56
UTC ·
(3 weeks ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B2%5D=58&topics%5B3%5D=53&topics%5B4%5D=48&topics%5B5%5D=61 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/6 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B2%5D=58&topics%5B3%5D=53&topics%5B4%5D=48&topics%5B5%5D=61 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15")
show less
DDoS Attack
Bad Web Bot
🇲🇹
Malta
2026-10-18 19:53:38
UTC ·
(3 weeks ago)
165.99.216.233 - - [18/Oct/2026:21:53:38 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
Brute-force password attempt
Hacking
Web App Attack
Brute-Force
🇲🇽
octageeks.com
2026-10-14 04:27:12
UTC ·
(4 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
2026-10-13 16:34:55
UTC ·
(1 month ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇺🇸
kosada.com
2026-10-09 01:55:52
UTC ·
(1 month ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B3%5D=29&topics%5B4%5D=33&topics%5B5%5D=41&topics%5B6%5D=69 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B3%5D=29&topics%5B4%5D=33&topics%5B5%5D=41&topics%5B6%5D=69 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇫🇷
bigorre.org
2026-10-08 15:50:37
UTC ·
(1 month ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇫🇷
security.rdmc.fr
2026-09-22 14:40:03
UTC ·
(1 month ago)
IP in Malicious Database
Web App Attack
🇺🇸
鬼影233
2026-09-18 11:18:40
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-18 04:35:36
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 165.99.216.233 (user-gw.sylhet.neefitsylhet.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 00:35:33.365748 2026] [security2:error] [pid 17788:tid 17788] ...
show more
(mod_security) mod_security (id:210350) triggered by 165.99.216.233 (user-gw.sylhet.neefitsylhet.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 00:35:33.365748 2026] [security2:error] [pid 17788:tid 17788] [client 165.99.216.233:42336] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||publicmailservice.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "publicmailservice.com"] [uri "/"] [unique_id "aqy_lQg5o8IETTJngJFtEwAAABM"], referer: https://seostatschecker.online/dir/backlinks-for-traffic-168650
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-04 11:16:59
UTC ·
(2 months ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇫🇷
Tilellit.PRO
2026-09-04 04:05:09
UTC ·
(2 months ago)
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
