Total reports
8 from
7 distinct
reporters
First reported
June 28th 2026
Most recent report
4 hours ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
4
🇩🇪
Germany
1
🇬🇧
United Kingdom of Great Britain and Northern Ireland
1
Most common categories
Bad Web Bot
5
Web App Attack
3
Brute-Force
1
DDoS Attack
1
Hacking
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
LRob
2026-11-11 17:06:00
UTC ·
(4 hours ago)
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/src/commit/f0f668f5a5b9ce77f13ee57e86206e5e97638501/shipped/parsers/ssh-root-fail.yaml | src_port: 13300 | ua: Mozilla/5.0 (W ...
show more
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/src/commit/f0f668f5a5b9ce77f13ee57e86206e5e97638501/shipped/parsers/ssh-root-fail.yaml | src_port: 13300 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36
show less
DDoS Attack
Bad Web Bot
🇺🇸
ersei.net
2026-11-10 02:29:54
UTC ·
(1 day ago)
Web app exploiting
Web App Attack
2026-11-03 15:15:03
UTC ·
(1 week ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Magento Session ID Parameter Blocked: /brands/ruckus/accessories.html?___SID=eb3bd6181ef86ed6e3f929efc6468579U | UA: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; de-de) AppleWebKit/124 (KHTML, like Gecko) Safari/125.1 | (Magento Site)
show less
Hacking
Bad Web Bot
2026-10-19 02:33:46
UTC ·
(3 weeks ago)
Honeypot: http-public probing for vulnerable paths
Web App Attack
🇺🇸
鬼影233
2026-09-29 13:38:36
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-25 05:09:41
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-19 03:08:57
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 157.100.191.201 (host-157-100-191-201.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 23:08:49.683599 2026] [security2:error] [pid 12836:tid 1283 ...
show more
(mod_security) mod_security (id:210350) triggered by 157.100.191.201 (host-157-100-191-201.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 23:08:49.683599 2026] [security2:error] [pid 12836:tid 12836] [client 157.100.191.201:55876] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fromthecellarnyc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fromthecellarnyc.com"] [uri "/pinup_lilmissmarvel.php"] [unique_id "aq38wXJU6On41wqmGYt8qgAAAAU"], referer: https://fromthecellarnyc.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
pltcldvlpr
2026-06-28 22:26:26
UTC ·
(4 months ago)
Bogus Useragent: 157.100.191.201 - - [29/Jun/2026:00:26:25 +0200] "GET /protocol?id=hb_18_32&offset=1000&seq=1099 HTTP/1.1" 444 0 "-" "Opera/9.71.(X11; Linux x86_64; lv-LV) Presto/2.9.186 Version/11.00" asn=27947 org="Telconet S.A" country=EC
...
Bad Web Bot
