🇨🇦
Anytech
2026-08-28 06:07:58
(2 weeks ago)
Blocked by Conn-Monitor: http-bad-user-agent
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-13 10:10:18
(1 month ago)
(mod_security) mod_security (id:243420) triggered by 65.55.210.174 (msnbot-65-55-210-174.search.msn. ...
show more
(mod_security) mod_security (id:243420) triggered by 65.55.210.174 (msnbot-65-55-210-174.search.msn.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 06:10:14.584414 2026] [security2:error] [pid 116025:tid 116025] [client 65.55.210.174:21252] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Accept-Encoding" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||www.hodlmoser.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.hodlmoser.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "an2YA0gQD97mMJb1_TBxhAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-06-15 00:58:30
(3 months ago)
(mod_security) mod_security (id:11000010) triggered by 65.55.210.174: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:11000010) triggered by 65.55.210.174: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 03:58:28.294297 2026] [security2:error] [pid 921889:tid 922031] [remote 65.55.210.174:60551] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/uploads/elementor/google-fonts/css/kalnia.css"] [unique_id "ai9ONCykT1eM1OfD7bs7wgABSxQ"], referer: https://ftiaxtomonosou.gr/%CE%BD%CF%84%CE%BF%CF%85%CE%BB%CE%AC%CF%80%CE%B1/
show less
Port Scan
🇦🇺
paulshipley.com.au
2026-05-21 08:44:36
(3 months ago)
[Thu May 21 18:44:36.014717 2026] [security2:error] [pid 548589] [client 65.55.210.174:31430] [clien ...
show more
[Thu May 21 18:44:36.014717 2026] [security2:error] [pid 548589] [client 65.55.210.174:31430] [client 65.55.210.174] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "winesbydesign.com.au"] [uri "/"] [unique_id "ag7F9LfO_LWSTKuZDmeuoAAAAAg"]
...
show less
Web App Attack
🇫🇮
inlink.ltd
2026-05-19 15:43:40
(3 months ago)
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 65.55.210.174 was not I ...
show more
WAF PoW failure, possible botnet behavior, IP mismatch, POST request made by 65.55.210.174 was not IP who made PoW GET request earlier
show less
DDoS Attack
Exploited Host
🇺🇸
RLDD
2026-05-18 21:30:12
(3 months ago)
WP probing -nov
Web App Attack
2026-05-14 03:04:00
(4 months ago)
65.55.210.174 - - [14/May/2026:03:03:58 +0000] "GET /workbox-1d305bb8.js HTTP/2.0" 444 0 "https://ta ...
show more
65.55.210.174 - - [14/May/2026:03:03:58 +0000] "GET /workbox-1d305bb8.js HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
65.55.210.174 - - [14/May/2026:03:03:58 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
65.55.210.174 - - [14/May/2026:03:03:59 +0000] "GET /svg/moon-phase-6.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-04-17 02:03:50
(4 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇦🇺
Anytech
2026-04-06 01:45:40
(5 months ago)
Blocked by Conn-Monitor: Automated bot activity
Web App Attack
🇦🇺
Anytech
2026-04-03 04:24:17
(5 months ago)
Blocked by Conn-Monitor: Automated bot activity
Web App Attack
🇩🇪
HandyTreff.de
2026-03-29 11:42:08
(5 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -34.128 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -34.128 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bin
show less
Web App Attack
Bad Web Bot
🇷🇺
russian-kurort.ru
2026-02-07 22:31:00
(7 months ago)
SYN flood
DDoS Attack
Hacking
🇩🇪
KI-Netzwerk
2025-12-05 09:01:56
(9 months ago)
Bad Calls: Webpage scraping, Web App Attack
Bad Web Bot
Exploited Host
Web App Attack
🇦🇺
MAGIC
2025-11-19 01:10:11
(9 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇮🇹
Progetto1
2025-10-26 18:55:03
(10 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack