Total reports
7 from
7 distinct
reporters
First reported
July 15th 2022
Most recent report
6 hours ago
Last 60 days
Top reporter locations
🇨🇭
Switzerland
1
🇩🇪
Germany
1
🇺🇸
United States of America
1
Most common categories
Bad Web Bot
2
DDoS Attack
2
Exploited Host
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
LRob
2026-11-11 10:11:43
UTC ·
(6 hours ago)
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/raw/commit/a8b31df35cf4a6365f9c55d3d033708f7af8b6af/internal/api/me_detect_test.go | src_port: 36936 | ua: Mozilla/5.0 (Windo ...
show more
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/raw/commit/a8b31df35cf4a6365f9c55d3d033708f7af8b6af/internal/api/me_detect_test.go | src_port: 36936 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36
show less
DDoS Attack
Bad Web Bot
🇺🇸
justbible
2026-11-09 12:08:24
UTC ·
(2 days ago)
HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 24 requests from 2026-11-09T12:08:24+00:00 to 2026-11-11T10:41:28+00:00, e.g. 'GET /en/kjv,original,web,lsv,esv/lev/1 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; ...
show more
HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 24 requests from 2026-11-09T12:08:24+00:00 to 2026-11-11T10:41:28+00:00, e.g. 'GET /en/kjv,original,web,lsv,esv/lev/1 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36'. Forged browser headers; spoofed user agent (did not identify itself as a bot); robots.txt ignored (a disallowed URL requested).
show less
Bad Web Bot
🇨🇭
ALPHANET
2026-11-03 10:30:05
UTC ·
(1 week ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
🇫🇷
bigorre.org
2026-04-06 17:05:58
UTC ·
(7 months ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
2025-11-17 13:48:11
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
🇺🇸
TPI-Abuse
2025-09-23 08:15:38
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 113.172.254.160 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 23 04:15:30.101268 2025] [security2:error] [pid 17877:tid 17877] [client 113.172 ...
show more
(mod_security) mod_security (id:210730) triggered by 113.172.254.160 (static.vnpt.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 23 04:15:30.101268 2025] [security2:error] [pid 17877:tid 17877] [client 113.172.254.160:53988] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vangentholding.com|F|2"] [data ".yolasite.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vangentholding.com"] [uri "/tag/du-hoc-han-quoc-ika/cohoiduhoc.yolasite.com"] [unique_id "aNJXItA9QsiiQYtwZeKkAgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2022-07-15 03:37:10
UTC ·
(4 years ago)
Attempts to login to mail server with wrong username and/or password
Brute-Force
