🇩🇪
NoaQT
2026-04-05 22:05:54
(2 months ago)
212.108.115.59 - - [05/Apr/2026:16:36:00 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube ...
show more
212.108.115.59 - - [05/Apr/2026:16:36:00 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
212.108.115.59 - - [05/Apr/2026:16:41:08 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.twitter.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
212.108.115.59 - - [05/Apr/2026:16:42:39 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.bing.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
212.108.115.59 - - [05/Apr/2026:16:42:58 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.secure.net/news" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
212.108.115.59 - - [05/Apr/2026:16:45:52 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10
...
show less
DDoS Attack
🇩🇪
NoaQT
2026-04-05 14:45:57
(2 months ago)
212.108.115.59 - - [05/Apr/2026:16:36:00 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube ...
show more
212.108.115.59 - - [05/Apr/2026:16:36:00 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
212.108.115.59 - - [05/Apr/2026:16:41:08 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.twitter.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
212.108.115.59 - - [05/Apr/2026:16:41:08 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.twitter.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
212.108.115.59 - - [05/Apr/2026:16:42:39 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.bing.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
212.108.115.59 - - [05/Apr/2026:16:42:39 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.bing.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/
...
show less
DDoS Attack
🇮🇹
IRT@Unisi
2026-03-30 19:43:24
(2 months ago)
anomaly:tcp_dst_session,1001>threshold1000,repeats24014timessincelastlog
DDoS Attack
🇵🇱
cheatmaster.store
2026-02-25 23:15:08
(3 months ago)
Automated report: This IP address has been identified as an active public open proxy.
Classification ...
show more
Automated report: This IP address has been identified as an active public open proxy.
Classification: Open Proxy | Spoofing | VPN/Anonymizer | Bad Web Bot.
Country: Syria
Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic.
Reported by automated threat intelligence pipeline. Do not whitelist without manual verification.
show less
Web Spam
Port Scan
Web App Attack
🇮🇳
liveaspankaj
2026-02-14 10:56:26
(4 months ago)
DDoS attack: 227 requests in 5m (GET / or repair.php).
DDoS Attack
🇧🇪
cmbplf
2026-01-26 04:50:04
(4 months ago)
762 limiting connections by zone (9m59s)
DDoS Attack
🇫🇷
vtchost.com
2026-01-22 09:10:35
(4 months ago)
jummy, honey! --\> ignored robots.txt --\> crawler botnet
...
Bad Web Bot
Exploited Host
🇪🇸
10dencehispahard SL
2026-01-21 07:31:58
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇸🇬
Fn4ticHz
2026-01-11 05:52:48
(5 months ago)
repeated ddos targeted archive.dstat.id -- ZeroGuard
DDoS Attack
🇩🇪
Packets-Decreaser.NET
2026-01-02 15:50:50
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇱🇻
garmtech.com
2025-12-26 15:33:20
(5 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-33.212.108.115.59.web-spamm ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-33.212.108.115.59.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇨🇭
Modules
2025-12-25 20:01:37
(5 months ago)
Open proxy http://212.108.115.59:8080 (RT:9657ms,Loc:Syria,ASN:AS202561)
Open Proxy
🇮🇹
VHosting
2025-12-23 11:08:28
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
🇧🇷
hostseries
2025-12-23 10:58:26
(5 months ago)
Trigger: LF_DISTATTACK
Brute-Force