Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show moreLarge-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Catalog Search Abuse Blocked: /catalogsearch/result/?cat=139++&q=DVI+104+Tx%2FRx&rating=6 | UA: Mozilla/5.0 (compatible; MSIE 9.0; Windows CE; Trident/3.1) | (Magento Site)
show less
WordPress credential brute-force against beanythingmuseum.org: 1 x POST /wp-login.php at 01/Nov/2026:15:14:33 +0000, HTTP 200 (authentication failed). This address never requested the login form - across 14,708 lines of access logs covering 2 days it ...
show moreWordPress credential brute-force against beanythingmuseum.org: 1 x POST /wp-login.php at 01/Nov/2026:15:14:33 +0000, HTTP 200 (authentication failed). This address never requested the login form - across 14,708 lines of access logs covering 2 days its only traffic to this server is the credential POST(s), so the submission is scripted, not a user. Rate kept under 5-per-10-minutes to evade per-IP rate limiting; one of 90 distinct IPs running the same low-rate spray against this host on 2026-11-01.
show less
UDP flood (DDoS) vs AS215599: 695 pkts / 0.99 MB to UDP 80/8443 across 291 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised ho ...
show moreUDP flood (DDoS) vs AS215599: 695 pkts / 0.99 MB to UDP 80/8443 across 291 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
UDP flood (DDoS) vs AS215599: 695 pkts / 0.99 MB to UDP 80/8443 across 291 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised ho ...
show moreUDP flood (DDoS) vs AS215599: 695 pkts / 0.99 MB to UDP 80/8443 across 291 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
