Total reports
8 from
8 distinct
reporters
First reported
July 30th 2025
Most recent report
2 days ago
Last 60 days
Top reporter locations
🇩🇪
Germany
1
Most common categories
DDoS Attack
1
Bad Web Bot
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
LRob
2026-11-08 15:18:41
UTC ·
(2 days ago)
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /WP/email-toolkit/src/commit/c43ef7971c6a917faa27e7104504536c7e0aa8b7/docs/wiki/CSS-personnalise | src_port: 9061 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x6 ...
show more
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /WP/email-toolkit/src/commit/c43ef7971c6a917faa27e7104504536c7e0aa8b7/docs/wiki/CSS-personnalise | src_port: 9061 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
show less
DDoS Attack
Bad Web Bot
2026-08-29 17:45:23
UTC ·
(2 months ago)
Large-scale coordinated botnet (3M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group | Attack Signature Bl ...
show more
Large-scale coordinated botnet (3M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group | Attack Signature Blocked: /wishlist/index/add/product/11197/form_key/52vtFb9vvL6fdfJf/ | UA: Opera/9.69.(X11; Linux i686; id-ID) Presto/2.9.171 Version/10.00 | (Magento Site)
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-08-23 04:02:52
UTC ·
(2 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇨🇭
backslash
2026-07-20 10:57:16
UTC ·
(3 months ago)
Bad Web Bot
🇨🇦
polycoda
2026-03-31 12:38:38
UTC ·
(7 months ago)
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
🇺🇸
TPI-Abuse
2025-12-27 18:24:47
UTC ·
(10 months ago)
(mod_security) mod_security (id:210350) triggered by 176.29.3.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 13:24:27.686959 2025] [security2:error] [pid 18859:tid 18859] [client 176.29.3.164:28362] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 176.29.3.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 13:24:27.686959 2025] [security2:error] [pid 18859:tid 18859] [client 176.29.3.164:28362] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mail.rharano.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mail.rharano.org"] [uri "/"] [unique_id "aVAkW7WuGn_WtcNDLzA21AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-25 08:20:21
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
🇮🇹
Markus S.
2025-07-30 12:00:00
UTC ·
(1 year ago)
ddos on webshop
DDoS Attack
