Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 3 requests from 2026-11-09T19:30:17+00:00 to 2026-11-11T02:19:27+00:00, e.g. 'GET /en/ylt,asv/matt/23/20 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) ...
show moreHTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 3 requests from 2026-11-09T19:30:17+00:00 to 2026-11-11T02:19:27+00:00, e.g. 'GET /en/ylt,asv/matt/23/20 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36'. Forged browser headers; spoofed user agent (did not identify itself as a bot); robots.txt ignored (a disallowed URL requested).
show less
Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A315&f%5B1%5D=digest_key_terms%3A317&f%5B2%5D=digest_key_terms%3A517&f%5B3%5D=digest_key_terms%3A543&f%5B4%5D=digest_publication ...
show moreRepeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A315&f%5B1%5D=digest_key_terms%3A317&f%5B2%5D=digest_key_terms%3A517&f%5B3%5D=digest_key_terms%3A543&f%5B4%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B358%5D=358 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0")
show less
DDoS Attack
Bad Web Bot
Anonymous
denied traffic to a honeypot network. destination port 15677.
Firewall: Within 2026-08-02 22:30:50 - 2026-08-03 00:20:54 CEST(+0200) identified: unallowed access from 216.98.211.119 on port 7731(udp:7731) (1 trial)
Fail2ban: Within 2026-08-02 22:30:50 - 2026-08-03 00:20:55 CEST(+0200) banned: 4 times by fail2ba ...
show moreFirewall: Within 2026-08-02 22:30:50 - 2026-08-03 00:20:54 CEST(+0200) identified: unallowed access from 216.98.211.119 on port 7731(udp:7731) (1 trial)
Fail2ban: Within 2026-08-02 22:30:50 - 2026-08-03 00:20:55 CEST(+0200) banned: 4 times by fail2ban[firewall]; 4 times by fail2ban[recidive]
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=216.98.211.119; proto=UDP; source_port=61722; targ ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=216.98.211.119; proto=UDP; source_port=61722; target_port=20523
show less
denied traffic to a non-approved destination port. destination port 25516.
Port Scan
Anonymous
Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Attack Signature Blocked: /wishlist/index ...
show moreLarge-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Attack Signature Blocked: /wishlist/index/add/product/11013/form_key/woiigS8a55Ym90Lz/ | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_0) AppleWebKit/536.0 (KHTML, like Gecko) Chrome/46.0.805.0 Safari/536.0 | (Magento Site)
show less
