🇩🇪
netclix.gr
2026-08-31 10:57:21
(23 hours ago)
(PERMBLOCK) 68.67.112.88 (US/United States/youbot-68-67-112-88.search.you.com) has had more than 2 t ...
show more
(PERMBLOCK) 68.67.112.88 (US/United States/youbot-68-67-112-88.search.you.com) has had more than 2 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
🇺🇸
SX Communications
2026-08-31 07:14:50
(1 day ago)
Blocked abusive HTTP application-layer DoS / botnet traffic from 68.67.112.88: traffic from this add ...
show more
Blocked abusive HTTP application-layer DoS / botnet traffic from 68.67.112.88: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-08-31 06:43:41
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 68.67.112.88 (youbot-68-67-112-88.search.you.co ...
show more
(mod_security) mod_security (id:210730) triggered by 68.67.112.88 (youbot-68-67-112-88.search.you.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 02:43:34.285026 2026] [security2:error] [pid 16975:tid 16975] [client 68.67.112.88:54360] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||persnicketyinc.com|F|2"] [data ".persnicketyinc.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "persnicketyinc.com"] [uri "/persnicketyinc.com/ask-etiquette-masters-divorced-parents-wedding-invitations/www.persnicketyinc.com"] [unique_id "apUilk2cyVHybduuPjSW1gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
netclix.gr
2026-08-30 21:50:53
(1 day ago)
(bot_qv) Bot Scraping QuickView 68.67.112.88 (US/United States/youbot-68-67-112-88.search.you.com): ...
show more
(bot_qv) Bot Scraping QuickView 68.67.112.88 (US/United States/youbot-68-67-112-88.search.you.com): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 68.67.112.88 - - [31/Aug/2026:00:50:52 +0300] "GET /index.php?dispatch=products.quick_view&product_id=16362&prev_url=index.php%3Fdispatch%3Dcategories.view%26category_id%3D83&n_items=17761%2C17762%2C18471%2C18489%2C18496%2C18770%2C18819%2C18493%2C18084%2C44%2C16832%2C16362%2C18081%2C18401%2C18402%2C18404%2C18765%2C18764%2C18763%2C18760%2C18762%2C18816%2C18731%2C18828%2C18818%2C18815%2C18827%2C18826%2C16591%2C18338%2C16210%2C16983%2C16590%2C18703%2C18087%2C18083%2C18079%2C18768 HTTP/2.0" 302 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; YouBot/1.0; +https://docs.you.com/youbot; env:prod) Chrome/142.0.0.0 Safari/537.36"
show less
Port Scan
🇩🇪
netclix.gr
2026-08-30 09:50:25
(2 days ago)
(bot_qv) Bot Scraping QuickView 68.67.112.88 (US/United States/youbot-68-67-112-88.search.you.com): ...
show more
(bot_qv) Bot Scraping QuickView 68.67.112.88 (US/United States/youbot-68-67-112-88.search.you.com): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 68.67.112.88 - - [30/Aug/2026:12:50:17 +0300] "GET /index.php?dispatch=products.quick_view&product_id=18830&prev_url=index.php%3Fitems_per_page%3D48%26dispatch%3Dcategories.view%26category_id%3D32&n_items=18829%2C18830 HTTP/2.0" 302 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; YouBot/1.0; +https://docs.you.com/youbot; env:prod) Chrome/142.0.0.0 Safari/537.36"
show less
Port Scan
🇺🇸
TPI-Abuse
2026-08-29 02:45:47
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 68.67.112.88 (youbot-68-67-112-88.search.you.co ...
show more
(mod_security) mod_security (id:210730) triggered by 68.67.112.88 (youbot-68-67-112-88.search.you.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 22:45:42.927766 2026] [security2:error] [pid 6097:tid 6097] [client 68.67.112.88:20943] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||scoutinsignia.com|F|2"] [data ".coffeecup.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scoutinsignia.com"] [uri "/settummanque.net/www.coffeecup.com"] [unique_id "apJH1s7nHdb2ZjgLRX9tRAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
SX Communications
2026-08-29 01:26:54
(3 days ago)
Blocked abusive HTTP application-layer DoS / botnet traffic from 68.67.112.88: traffic from this add ...
show more
Blocked abusive HTTP application-layer DoS / botnet traffic from 68.67.112.88: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
2026-08-28 16:28:02
(3 days ago)
Web application attack detected.
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 12:34:07
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 68.67.112.88 (youbot-68-67-112-88.search.you.co ...
show more
(mod_security) mod_security (id:210730) triggered by 68.67.112.88 (youbot-68-67-112-88.search.you.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 08:34:00.840154 2026] [security2:error] [pid 29206:tid 29206] [client 68.67.112.88:63932] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||nccb.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nccb.org"] [uri "/theunion.com"] [unique_id "apGAODIqLVFk66c9CtX9vgAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-28 03:14:30
(4 days ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇩🇪
BlueWire Hosting
2026-08-28 02:37:52
(4 days ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇨🇦
Anytech
2026-08-27 21:51:22
(4 days ago)
Blocked by ConnMonitor: Bad Bot
Bad Web Bot
Spoofing
🇮🇹
A000Z
2026-07-29 20:30:06
(1 month ago)
Fail2Ban: 68.67.112.88 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ...
show more
Fail2Ban: 68.67.112.88 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; YouBot/1.0; +https://docs.you.com/youbot; env:prod) Chrome/142.0.0.0 Safari/537.36
show less
Bad Web Bot
🇳🇱
BlueWire Hosting
2026-05-06 09:34:14
(3 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
2026-05-06 04:06:29
(3 months ago)
Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=4
Hacking