169.224.15.140

Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/155.0.8059.37 Mobile/15E148 Safari/604.1

HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 2 requests from 2026-11-09T19:59:15+00:00 to 2026-11-11T05:50:41+00:00, e.g. 'GET /en/bbe,ylt,lsv/hag/1/11 HTTP/2.0' with User-Agent 'Mozilla/5.0 (X11; Linux x86_64; rv:155.0 ... show more HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 2 requests from 2026-11-09T19:59:15+00:00 to 2026-11-11T05:50:41+00:00, e.g. 'GET /en/bbe,ylt,lsv/hag/1/11 HTTP/2.0' with User-Agent 'Mozilla/5.0 (X11; Linux x86_64; rv:155.0) Gecko/20100101 Firefox/155.0'. Forged browser headers; spoofed user agent (did not identify itself as a bot); robots.txt ignored (a disallowed URL requested). show less

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36

Botnet or web spider not respecting robots.txt

Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:8888/udp in AS203136 (LLC Ordunet), Georgia, on 2026-09-15 from 14:17 local time (+04:00). This source sustained more than 800 packets/sec toward a single UDP port, against about 2 ... show more Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:8888/udp in AS203136 (LLC Ordunet), Georgia, on 2026-09-15 from 14:17 local time (+04:00). This source sustained more than 800 packets/sec toward a single UDP port, against about 200 packets/sec for a legitimate player of that server. It was one of 8847 sources in 2396 networks and 160 countries recorded inside a single 25-minute window - the server's entire real audience is about a hundred players. Detected on a MikroTik RouterOS router in the raw/prerouting chain (dst-limit 800,200,src-address/10s); the timestamp is when this source crossed the threshold. Not a scan and not brute force - a packet flood, so the host is most likely compromised. Evidence: [email protected]. show less

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36

Web bot: DDoS

Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan) employed by Angara Technologies Group | Attack Signature Blocked: /wishlist/index/ ... show more Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan) employed by Angara Technologies Group | Attack Signature Blocked: /wishlist/index/add/product/369/form_key/G81ATVWn9dXjzsmb/ | UA: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 11.0; Trident/4.0) | (Magento Site) show less

Autoban IP(2): 169.224.15.140 - Hostname: Earthlink Telecommunications Equipment Trading \u0026 Services DMCC - City: Baghdad - Region: Baghdad - Country: Iraq - Location: 33.3364,44.4004 - Organization: Earthlink Telecommunications Equipment Trading ... show more Autoban IP(2): 169.224.15.140 - Hostname: Earthlink Telecommunications Equipment Trading \u0026 Services DMCC - City: Baghdad - Region: Baghdad - Country: Iraq - Location: 33.3364,44.4004 - Organization: Earthlink Telecommunications Equipment Trading \u0026 Services DMCC - failed attempts. show less

Web bot: denial-of-service flood

Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -49.7 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0

Web App Attack

IRC SPAM/Flood

scanning http requests from known botnet