Automated bot registration attack on sst.nyc (NYC DOB safety training platform). Single IP created 1 ...
show moreAutomated bot registration attack on sst.nyc (NYC DOB safety training platform). Single IP created 172 fake WooCommerce accounts over 13 hours (03:31-17:02 UTC, 2026-03-06) via the /my-account/ registration form. Identical user agent across all accounts: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/133.0.0.0. Zero purchases, zero legitimate activity. Primary goal appears to be email list validation via bounce harvesting — using our mail server to identify deliverable addresses from breach dumps. Email list was international (US, DE, UK, BR, CA, IT, BE) indicating stitched dark web credential database. Burst-and-pause cadence (avg 287s, min 0s, max 1402s) indicates purpose-built evasion tooling. IP has been spam-active since at least January 2026 per CleanTalk (502 reports). GalaxyGate LLC rented VPS.
show less
Bad Web BotWeb App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.