I see a connection out for htxp://194-177-22-167.flops.ru -fake google bot!

What is this. Re: http://toolbar.netcraft.com/site_report?url=http://194-177-22-167.flops.ru (website risk status 10 red out of 10) - main domain: http://toolbar.netcraft.com/site_report?url=https://flops.ru

Comes from -kim.ns.cloudflare.com - -dns@cloudflare.com 205.164.14.88 ASN 18779 EGIHosting US, California San Jose. 80 tcp open http Tengine/1.4.2 -http-title -yousee.com redirecting to hxp://pd.ok365.com/?dm=yousee.com&acc=66b2b08c-abf6-c943-9622-364582892330&poprequest=1 suspicious liuliang.ok365 dot com 0n nServer as -http://user_centralnic.

Thanks to doctorlector’s WOT report here: https://www.mywot.com/en/scorecard/flops.ru?utm_source=addon&utm_content=rw-viewsc

We now know it is a fake google bot reference: Referrer: http://virenkiller.org
HTTP Server: Tengine 1.4.2 (Outdated)
PHP Version: 5.3.10 (Outdated)
Should be listed here: http://blocklistpro.com/fake-googlebots/
OK website-folks and savy IT - do not forget to block this and likewise properly:
http://www.thesempost.com/blocking-googlebot-with-bad-bot-scripts-wordfence/ article author = Jennifer Slegg

So our WordPress specialists should take extra care and good notice as these real-Google-Bot disabling bots are up 61% lately.

polonus (volunteer website security analyst and website error-hunter)

There are more similar fake googlebots: http://blocklistpro.com/fake-googlebots/46.105.101.44-fake-googlebot.html
and http://blocklistpro.com/fake-googlebots/46.105.101.44-fake-googlebot.html
Website risk sttaus 10 red out of 10: http://toolbar.netcraft.com/site_report?url=http://46.105.101.44
Gateway Time Out and errors: https://urlquery.net/report.php?id=1444131444788
but it is a ProFTPD or KnFTPD website. No ftp.ellipsa.com site report can be seen.
See: http://dnscheck.sidn.nl/?time=1444131873&id=1831395&view=basic&test=standard
See bad web rep: https://www.mywot.com/en/scorecard/dns12.ovh.net?utm_source=addon&utm_content=rw-viewsc
https://www.robtex.net/#!dns=ns382734.ovh.net & http://ipkun.com/ip/46.105.101.109

polonus