Total reports
8 from
7 distinct
reporters
First reported
February 5th 2025
Most recent report
1 day ago
Last 60 days
Top reporter locations
🇩🇪
Germany
1
Most common categories
DDoS Attack
1
Bad Web Bot
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
LRob
2026-11-12 20:53:59
UTC ·
(1 day ago)
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/src/commit/e582079a0fc0e4f98640a36c3e2ccd98d7d76fe1/shipped/parsers/bind-transfer-denied.yaml | src_port: 48692 | ua: Mozilla ...
show more
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/src/commit/e582079a0fc0e4f98640a36c3e2ccd98d7d76fe1/shipped/parsers/bind-transfer-denied.yaml | src_port: 48692 | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
DDoS Attack
Bad Web Bot
🇮🇩
hermawan
2026-06-06 14:23:18
UTC ·
(5 months ago)
[Sat Jun 06 21:23:14.115351 2026] [security2:error] [pid 57905:tid 140594232944320] [client 41.135.196.0:60203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/corerules ...
show more
[Sat Jun 06 21:23:14.115351 2026] [security2:error] [pid 57905:tid 140594232944320] [client 41.135.196.0:60203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 15; SM-S916U1 Build/AP3A.240905.015.A2; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan"] [unique_id "aiQtUkK-3OVXiztLXXSy3wABCwI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg
...
show less
Email Spam
Hacking
2025-11-24 18:40:56
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-16 11:01:08
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
🇸🇬
mypatricks
2025-10-10 02:41:31
UTC ·
(1 year ago)
41.135.196.0 | Port: 63990 | DNS: 41-135-196-0.ftth.web.africa 2025-10-10T10:41:30+08:00 Africa/Johannesburg | Bad Behavior Activity | UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 ...
show more
41.135.196.0 | Port: 63990 | DNS: 41-135-196-0.ftth.web.africa 2025-10-10T10:41:30+08:00 Africa/Johannesburg | Bad Behavior Activity | UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 HTTP/1.1 443 GET | URL: /hashtag/marshall/?cea5b2285f3cc0261f1547583bdda990=1745621775&6c97026a43e526c61=enabled | Ref: - | Country: ZA/South Africa/+02:00 IP City: Durban 98c2c2485e47d221-DUR/Durban, South Africa 1 hits/0 secs Robots 4
show less
Web Spam
Blog Spam
Brute-Force
Exploited Host
Web App Attack
🇨🇭
backslash
2025-09-22 03:42:28
UTC ·
(1 year ago)
Bad Web Bot
🇳🇱
exxos
2025-09-05 17:03:01
UTC ·
(1 year ago)
Attacks with Bad user agents
Hacking
2025-02-05 04:16:28
UTC ·
(1 year ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
