Total reports
7 from
7 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
Anonymous
|
|
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Excessive Shopby Manufacturers Blocked: /communications/shopby/manufacturer-cisco-aastra-snom-netgear-hp-crestron-rcf-sony-avaya-ruckus-xclaim-fortinet-huawei-unify.html | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 Edg/99.0.1150.30 | (Magento Site)
show less
|
Hacking
Bad Web Bot
|
|
🇧🇷
ICS Labs
|
|
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-20 UTC.
|
Brute-Force
|
|
🇩🇪
ghostwarriors
|
|
Webpage scraping
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
ksol-hostmaster
|
|
2026/10/20 16:34:38 [error] 11254#101019: *1354578 access forbidden by rule, client: 36.255.40.3, server: new.hondaforum.hu, request: "GET /topic/honda-accord/407476/ HTTP/1.1", host: "new.hondaforum.hu"
...
|
Web Spam
|
|
🇨🇭
backslash
|
|
block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803
|
Bad Web Bot
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 36.255.40.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 20 04:02:51.819169 2025] [security2:error] [pid 2586:tid 2586] [client 36.255.40.3:54768] ModSecu ...
show more
(mod_security) mod_security (id:210730) triggered by 36.255.40.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 20 04:02:51.819169 2025] [security2:error] [pid 2586:tid 2586] [client 36.255.40.3:54768] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.kingstoneproperties.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kingstoneproperties.com"] [uri "/[email protected]"] [unique_id "aUZmO3rmOtK-DBedoXesaAAAABM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇷
ᴀʀᴛ
|
|
Triggered Cloudflare WAF (firewallCustom) from PK.
ASN: 9541 (CYBERNET-AP Cyber Internet Services Pvt Ltd.)
Protocol: HTTP/2 (GET method)
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537 ...
show more
Triggered Cloudflare WAF (firewallCustom) from PK.
ASN: 9541 (CYBERNET-AP Cyber Internet Services Pvt Ltd.)
Protocol: HTTP/2 (GET method)
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
