Total reports
5 from
5 distinct
reporters
First reported
August 2nd 2026
Most recent report
7 hours ago
Last 60 days
Top reporter locations
🇮🇩
Indonesia
1
🇵🇱
Poland
1
🇷🇺
Russian Federation
1
Most common categories
Hacking
2
Bad Web Bot
2
Brute-Force
2
Email Spam
1
Web App Attack
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-11-15 15:15:04
UTC ·
(7 hours ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Offpeak: Sessionless Catalog Access Blocked: /brands/shopby/manufacturer-extron-hp-logitech-aruba_networks-haivision.html?mode=grid | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
2026-11-09 11:09:07
UTC ·
(6 days ago)
WEB attack
Brute-Force
🇺🇸
TPI-Abuse
2026-11-07 22:38:58
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 188.236.105.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:38:53.819839 2026] [security2:error] [pid 26324:tid 26324] [client 188.236.105.73:44128] ...
show more
(mod_security) mod_security (id:210350) triggered by 188.236.105.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:38:53.819839 2026] [security2:error] [pid 26324:tid 26324] [client 188.236.105.73:44128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.taekwondoit.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.taekwondoit.com"] [uri "/"] [unique_id "au-ofc_6O_C0X0qhBhRhcQAAAAA"], referer: https://clptolim.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2026-10-04 00:53:20
UTC ·
(1 month ago)
[Sun Oct 04 07:37:38.082798 2026] [security2:error] [pid 1016229:tid 139889962116800] [client 188.236.105.73:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "ubuntu" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/corerul ...
show more
[Sun Oct 04 07:37:38.082798 2026] [security2:error] [pid 1016229:tid 139889962116800] [client 188.236.105.73:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "ubuntu" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: ubuntu found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Ubuntu; Linux i686; rv:134.0) Gecko/20100101 Firefox/134.0 request_line = GET /images/vi_webp/Ost-sZlMjjU/maxresdefault.webp HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/vi_webp/Ost-sZlMjjU/maxresdefault.webp"] [unique_id "asGf0mJo4oB8NgkEwAW6EwAAAE8"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1016271] [zUXr+Hg8wg0] [asGf0mJo4oB8NgkEwAW6EwAAAE8] keep_alive=[0] [2026-10-04 07:37:38.082807] [R:asGf0mJo4oB8NgkEwAW6EwAAAE8] UA:'Mozilla/5.0 (Ubuntu; Linux i
...
show less
Email Spam
Hacking
🇺🇸
Zandro
2026-08-02 11:03:55
UTC ·
(3 months ago)
distributed harvester
Bad Web Bot
Exploited Host
