🇵🇱
MatStef132
2026-11-06 23:12:54
UTC ·
(2 days ago)
MatShield L7: blocked on a protected site (sec-fetch-user-on-empty-dest)
DDoS Attack
🇷🇺
Mga Admin
2026-11-05 12:49:22
UTC ·
(4 days ago)
16.216.88.78 - - [05/Nov/2026:19:49:21 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs7219079 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs7219079" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Refl ...
show more
16.216.88.78 - - [05/Nov/2026:19:49:21 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs7219079 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs7219079" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇷🇺
Mga Admin
2026-11-04 02:17:13
UTC ·
(5 days ago)
16.216.88.78 - - [04/Nov/2026:09:17:12 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs60733836 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs60733836" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Re ...
show more
16.216.88.78 - - [04/Nov/2026:09:17:12 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs60733836 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs60733836" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-11-02 04:49:23
UTC ·
(1 week ago)
Persistent web bot repeatedly crawling dynamic phpBB endpoints\; banned by Fail2Ban"
...
Bad Web Bot
🇩🇪
FeG Deutschland
2026-10-26 21:16:00
UTC ·
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
kosada.com
2026-10-26 06:30:51
UTC ·
(2 weeks ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?amp%3Bamp%3Bf%5B0%5D=digest_key_terms%3A337&%3Bamp%3Bfield_key_terms%5B311%5D=311&%3Bf%5B0%5D=digest_key_terms%3A391&f%5B0%5D=digest_key_terms%3A515& ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?amp%3Bamp%3Bf%5B0%5D=digest_key_terms%3A337&%3Bamp%3Bfield_key_terms%5B311%5D=311&%3Bf%5B0%5D=digest_key_terms%3A391&f%5B0%5D=digest_key_terms%3A515&f%5B1%5D=digest_key_terms%3A516&field_article_edition%5B504%5D=504 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
Anonymous
2026-10-23 18:22:26
UTC ·
(2 weeks ago)
16.216.88.78 www.rolistore.com - [23/Oct/2026:04:43:55 -0600] "GET /backbone-one-mobile-gaming-controller?tag=mando HTTP/1.1" 200 751903 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot ...
show more
16.216.88.78 www.rolistore.com - [23/Oct/2026:04:43:55 -0600] "GET /backbone-one-mobile-gaming-controller?tag=mando HTTP/1.1" 200 751903 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36"\n16.216.88.78 www.irwindalecycles.com - [23/Oct/2026:07:22:35 -0600] "GET /cat-components-controls HTTP/1.1" 200 330324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36"\n16.216.88.78 www.rolistore.com - [23/Oct/2026:12:22:25 -0600] "GET /control-xbox-advanced-cyber-style?page=11&tag=tienda%20online HTTP/1.1" 200 747005 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36"
show less
Bad Web Bot
🇷🇺
Mga Admin
2026-10-23 08:44:48
UTC ·
(2 weeks ago)
16.216.88.78 - - [23/Oct/2026:15:44:47 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs5997893 HTTP/1.1" 400 34 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 S ...
show more
16.216.88.78 - - [23/Oct/2026:15:44:47 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs5997893 HTTP/1.1" 400 34 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇷🇺
Mga Admin
2026-10-22 00:29:21
UTC ·
(2 weeks ago)
16.216.88.78 - - [22/Oct/2026:07:29:20 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs2208744 HTTP/1.1" 400 34 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 S ...
show more
16.216.88.78 - - [22/Oct/2026:07:29:20 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs2208744 HTTP/1.1" 400 34 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-10-21 22:04:49
UTC ·
(2 weeks ago)
Persistent web bot repeatedly crawling dynamic phpBB endpoints\; banned by Fail2Ban"
...
Bad Web Bot
🇷🇺
Mga Admin
2026-10-20 21:18:44
UTC ·
(2 weeks ago)
16.216.88.78 - - [21/Oct/2026:04:18:43 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs146833276 HTTP/1.1" 400 34 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 ...
show more
16.216.88.78 - - [21/Oct/2026:04:18:43 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs146833276 HTTP/1.1" 400 34 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-09-26 19:45:33
UTC ·
(1 month ago)
"Packet Flood; Triggered WAF; Persistent 404 Attempts"
DDoS Attack
🇩🇪
netclix.gr
2026-09-22 15:04:41
UTC ·
(1 month ago)
(PERMBLOCK) 16.216.88.78 (US/United States/-) has had more than 2 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
Port Scan
🇺🇸
SX Communications
2026-09-22 13:56:18
UTC ·
(1 month ago)
HTTP application-layer DoS / botnet traffic from 16.216.88.78: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack
Bad Web Bot
Exploited Host
🇷🇺
genokrad
2026-09-22 02:57:52
UTC ·
(1 month ago)
Website scan TCP 80/443 "/robots.txt" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; R"
Port Scan
Web App Attack