Total reports
6 from
6 distinct
reporters
First reported
December 30th 2020
Most recent report
11 hours ago
Last 60 days
Top reporter locations
🇩🇪
Germany
1
Most common categories
DDoS Attack
1
Bad Web Bot
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
LRob
2026-11-11 08:42:38
UTC ·
(11 hours ago)
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/blame/commit/92268e738f2257188f087c96b454d024a37817af/shipped/parsers/http-secret-file.yaml | src_port: 43256 | ua: Mozilla/5 ...
show more
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/blame/commit/92268e738f2257188f087c96b454d024a37817af/shipped/parsers/http-secret-file.yaml | src_port: 43256 | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-26 15:24:45
UTC ·
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 150.107.241.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 10:24:38.706519 2026] [security2:error] [pid 16819:tid 16819] [client 150.107.241.9:7391] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 150.107.241.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 10:24:38.706519 2026] [security2:error] [pid 16819:tid 16819] [client 150.107.241.9:7391] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||oakvillenaturopathicclinic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "oakvillenaturopathicclinic.com"] [uri "/"] [unique_id "aaBltiNW-rEWKbqlaavpfAAAABM"], referer: https://oakvillenaturopathicclinic.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-02-24 16:25:00
UTC ·
(8 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇪🇸
Global Cyber Police
2025-07-27 17:47:42
UTC ·
(1 year ago)
Malicious bot activity detected: Hitting honeypot page (200 OK with 258/259 bytes sent).
Port Scan
Brute-Force
Web App Attack
🇺🇦
MakselPr
2022-11-12 16:52:50
UTC ·
(3 years ago)
Nov 12 23:52:46 mail postfix/smtps/smtpd[344857]: warning: unknown[150.107.241.9]: SASL PLAIN authentication failed:
Nov 12 23:52:52 mail postfix/smtps/smtpd[344857]: warning: unknown[150.107.241.9]: SASL LOGIN authentication failed: VXNlcm5hbWU6
.. ...
show more
Nov 12 23:52:46 mail postfix/smtps/smtpd[344857]: warning: unknown[150.107.241.9]: SASL PLAIN authentication failed:
Nov 12 23:52:52 mail postfix/smtps/smtpd[344857]: warning: unknown[150.107.241.9]: SASL LOGIN authentication failed: VXNlcm5hbWU6
...
show less
Brute-Force
🇫🇷
security.rdmc.fr
2020-12-30 02:45:39
UTC ·
(5 years ago)
Automatic report - Port Scan Attack
Port Scan
