🇨🇦
Anytech
2026-08-27 20:29:07
(9 hours ago)
Blocked by Conn-Monitor: http-bad-user-agent
Web App Attack
Bad Web Bot
🇺🇸
LotPhantom
2026-08-06 15:54:27
(3 weeks ago)
65.55.210.221 - - [06/Aug/2026:15:53:49 +0000] "GET /hubs/online?id=pdQXcIjJxCd8kPGLFr3lwQ HTTP/1.1" ...
show more
65.55.210.221 - - [06/Aug/2026:15:53:49 +0000] "GET /hubs/online?id=pdQXcIjJxCd8kPGLFr3lwQ HTTP/1.1" 404 37 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇫🇮
YF
2026-06-26 10:01:10
(2 months ago)
WordPress content enumeration
Web App Attack
🇬🇷
setupgr
2026-06-20 19:59:59
(2 months ago)
(mod_security) mod_security (id:11000010) triggered by 65.55.210.221 (US/United States/Washington/Qu ...
show more
(mod_security) mod_security (id:11000010) triggered by 65.55.210.221 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 20 22:59:54.973734 2026] [security2:error] [pid 579778:tid 579796] [remote 65.55.210.221:12104] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/cache/min/1/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css"] [unique_id "ajbxOnz2f_B-MiyFXhs13wAAkBE"], referer: https://ftiaxtomonosou.gr/%CE%BF%CE%B9%CE%BA%CE%BF%CE%B4%CE%BF%CE%BC%CE%B9%CE%BA%CE%AE-%CE%BE%CF%85%CE%BB%CE%B5%CE%AF%CE%B1/
show less
Port Scan
🇬🇷
setupgr
2026-06-18 00:52:39
(2 months ago)
(mod_security) mod_security (id:11000010) triggered by 65.55.210.221 (US/United States/Washington/Qu ...
show more
(mod_security) mod_security (id:11000010) triggered by 65.55.210.221 (US/United States/Washington/Quincy/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 18 03:52:36.869402 2026] [security2:error] [pid 2210294:tid 2210309] [remote 65.55.210.221:62912] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "bingbot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: bingbot - in asteriassantorini.com"] [severity "CRITICAL"] [hostname "asteriassantorini.com"] [uri "/wp-content/plugins/bookly-addon-pro/frontend/modules/customer_profile/resources/css/customer-profile.css"] [unique_id "ajNBVLhY-m9nTIYxKGRcsAABiAE"], referer: https://asteriassantorini.com/
show less
Port Scan
2026-05-16 04:02:15
(3 months ago)
65.55.210.221 - - [16/May/2026:04:02:12 +0000] "GET /workbox-835c8c05.js HTTP/2.0" 444 0 "https://ta ...
show more
65.55.210.221 - - [16/May/2026:04:02:12 +0000] "GET /workbox-835c8c05.js HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
65.55.210.221 - - [16/May/2026:04:02:13 +0000] "GET /svg/moon-phase-7.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
65.55.210.221 - - [16/May/2026:04:02:13 +0000] "GET /svg/moon-phase-6.svg HTTP/2.0" 444 0 "https://taiwan.suann.net/sw.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.7680.165 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
vtchost.com
2026-05-05 11:38:23
(3 months ago)
requested honeypot page - ignored robots.txt - scraping botnet or virus
...
Bad Web Bot
Exploited Host
🇦🇺
Anytech
2026-04-06 04:30:29
(4 months ago)
Blocked by Conn-Monitor: Automated bot activity
Web App Attack
🇦🇺
Anytech
2026-04-02 22:49:39
(4 months ago)
Blocked by Conn-Monitor: Automated bot activity
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-01-27 00:12:51
(7 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇷🇪
hodi.host
2026-01-22 20:42:21
(7 months ago)
(CT) IP 65.55.210.221 (US/United States/msnbot-65-55-210-221.search.msn.com) found to have 2 connect ...
show more
(CT) IP 65.55.210.221 (US/United States/msnbot-65-55-210-221.search.msn.com) found to have 2 connections; Ports: *; Direction: inout; Trigger: CT_LIMIT; Logs: tcp: 65.55.210.221:59648 -> 192.168.161.12:443 (ESTABLISHED)
tcp: 65.55.210.221:59652 -> 192.168.161.12:443 (TIME_WAIT)
show less
Port Scan
🇦🇺
MAGIC
2025-12-29 02:15:53
(7 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
FeG Deutschland
2025-11-18 17:40:07
(9 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-11-02 20:53:44
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 65.55.210.221 (msnbot-65-55-210-221.search.msn. ...
show more
(mod_security) mod_security (id:225170) triggered by 65.55.210.221 (msnbot-65-55-210-221.search.msn.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 02 15:53:41.141021 2025] [security2:error] [pid 21812:tid 21812] [client 65.55.210.221:54982] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||laecovillage.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "laecovillage.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aQfE1SxS8xHoi3D5XEoBYAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2025-10-28 15:28:19
(9 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack