🇩🇪
nyuuzyou
2026-11-06 11:06:02
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-06T11:06:02Z.
Bad Web Bot
2026-11-06 02:07:12
UTC ·
(1 week ago)
Search protection: noref on best-sales: 2 filter groups with no referrer of the shop (counts from 2) / reCAPTCHA challenge timed out
Bad Web Bot
🇵🇹
PT
2026-11-04 12:18:12
UTC ·
(1 week ago)
web app attack (botnet)
DDoS Attack
Web App Attack
2026-11-04 12:15:04
UTC ·
(1 week ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Offpeak: Sessionless Catalog Access Blocked: /brands/shopby/manufacturer-rcf-sony-supermicro-lsi-ask_proxima-plantronics-projectiondesign-xyz/product_vc_mcu-do_4_abonentov.html | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇩🇪
nyuuzyou
2026-11-03 10:50:03
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-03T10:50:03Z.
Bad Web Bot
🇩🇪
LRob
2026-10-31 11:49:01
UTC ·
(2 weeks ago)
Proxynvader botnet: shop search flood (L7 DDoS) | path: /18-velo-route | query: q=Stock+magasin-Cycling+Montpellier/Famille-Addict-Orca-Pulsium-Speedster-Speester/Taille-XXL&order=product.price.desc&resultsPe | src_port: 48767 | ua: Mozilla/5.0 (Maci ...
show more
Proxynvader botnet: shop search flood (L7 DDoS) | path: /18-velo-route | query: q=Stock+magasin-Cycling+Montpellier/Famille-Addict-Orca-Pulsium-Speedster-Speester/Taille-XXL&order=product.price.desc&resultsPe | src_port: 48767 | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
show less
DDoS Attack
Web App Attack
🇸🇬
mypatricks
2026-10-27 01:13:11
UTC ·
(2 weeks ago)
98.96.63.203 | Port: 12222 | DNS: 98-96-63-203.dyn.tachusfiber.net 2026-10-27T09:13:10+08:00 America/Chicago | DYN Data Center/Web Hosting/Transit Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome ...
show more
98.96.63.203 | Port: 12222 | DNS: 98-96-63-203.dyn.tachusfiber.net 2026-10-27T09:13:10+08:00 America/Chicago | DYN Data Center/Web Hosting/Transit Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /?1792830136&aeefafefdffae=1059 | Ref: - | Country: US/United States/-08:00 IP City: Conroe Windows a50dd61b39fa6b19-DFW/Dallas, TX, United States 1 hits/0 secs Browser 2
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇸🇬
mypatricks
2026-10-26 05:03:01
UTC ·
(2 weeks ago)
98.96.63.203 | Port: 11699 | DNS: 98-96-63-203.dyn.tachusfiber.net 2026-10-26T13:03:00+08:00 America/Chicago | DYN Data Center/Web Hosting/Transit Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome ...
show more
98.96.63.203 | Port: 11699 | DNS: 98-96-63-203.dyn.tachusfiber.net 2026-10-26T13:03:00+08:00 America/Chicago | DYN Data Center/Web Hosting/Transit Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /?ec8eda8facdcd8c98=653&1753834191 | Ref: - | Country: US/United States/-08:00 IP City: Conroe Windows a506e9617f564f01-DFW/Dallas, TX, United States 1 hits/0 secs Browser 2
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇪🇸
librebit
2026-10-25 04:17:59
UTC ·
(3 weeks ago)
RDWeb scan
Web App Attack
2026-10-14 19:29:03
UTC ·
(1 month ago)
Search protection: facets on category: 31 values in one group (limit 5) / reCAPTCHA challenge timed out
Bad Web Bot
2026-10-12 05:11:37
UTC ·
(1 month ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
Exploited Host
Bad Web Bot
🇸🇬
mypatricks
2026-10-11 23:48:03
UTC ·
(1 month ago)
98.96.63.203 | Port: 9349 | DNS: 98-96-63-203.dyn.tachusfiber.net 2026-10-12T07:48:02+08:00 America/Chicago | DYN Data Center/Web Hosting/Transit Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ ...
show more
98.96.63.203 | Port: 9349 | DNS: 98-96-63-203.dyn.tachusfiber.net 2026-10-12T07:48:02+08:00 America/Chicago | DYN Data Center/Web Hosting/Transit Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /?1791342912&information_id=26&ms-my&route=information/information/agree | Ref: - | Country: US/United States/-08:00 IP City: Conroe Windows a491c0c308eb1427-DFW/Dallas, TX, United States 1 hits/0 secs Browser 4
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇩🇪
edgeshield
2026-09-26 11:01:13
UTC ·
(1 month ago)
Automated web request flooding / DDoS (EdgeShield WAF).
DDoS Attack
🇩🇪
edgeshield
2026-09-11 17:32:15
UTC ·
(2 months ago)
Automated web request flooding / proxy abuse (EdgeShield WAF).
Open Proxy
DDoS Attack
🇩🇪
nyuuzyou
2026-09-10 23:06:11
UTC ·
(2 months ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-10T23:06:11Z.
Bad Web Bot
