This IP address has been reported a total of
24
times from
19 distinct
sources.
118.179.54.225 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Russian Federation
with 3
reports;
Germany
with 2
reports;
France
with 2
reports.
The most common categories in these recent reports were:
DDoS Attack
3
times;
Bad Web Bot
3
times;
Exploited Host
2
times;
Port Scan
2
times;
Web App Attack
2
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
nfdump top talker: 118.179.54.225 | first seen 2026-10-09 11:36:10.880 | duration 00:00:00.173 | flo ...
show morenfdump top talker: 118.179.54.225 | first seen 2026-10-09 11:36:10.880 | duration 00:00:00.173 | flows=6 | packets=256773 | bytes=188.5 M | pps=1481 | bps=8.7 M | bpp=734 | proto=any
show less
DDoS Attack
Port Scan
Exploited Host
Anonymous
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ...
show moreLarge-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Offpeak: Sessionless Catalog Access Blocked: /wishlist/index/add/product/10306/form_key/y2CQFPwpo84UuQ5b/ | UA: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 5.2; Trident/5.0) | (Magento Site)
show less
nfdump top talker: 118.179.54.225 | first seen 2026-10-08 13:19:49.120 | duration 00:00:00.264 | flo ...
show morenfdump top talker: 118.179.54.225 | first seen 2026-10-08 13:19:49.120 | duration 00:00:00.264 | flows=17 | packets=1.3 M | bytes=917.8 M | pps=4729 | bps=27.7 M | bpp=732 | proto=any
show less
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (X11; Linux ...
show moreNot following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
show less
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being ...
show moreBnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being a burning bag of dog poop.
118.179.54.225 443 - [26/Jul/2026:23:58:22 +0000] "GET [redacted] HTTP/1.1" 503 6176 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
show less
Bad Web Bot
Exploited Host
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show moreDistributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
2026-06-27T11:11:47 118.179.54.225 GET /Photos/Vacation/2017-06-28%20New%20Orleans/raw/IMG_3573.CR2 ...
show more2026-06-27T11:11:47 118.179.54.225 GET /Photos/Vacation/2017-06-28%20New%20Orleans/raw/IMG_3573.CR2 Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36
...
show less
