Total reports
4 from
3 distinct
reporters
First reported
September 17th 2026
Most recent report
10 hours ago
Last 60 days
Top reporter locations
🇩🇪
Germany
2
🇺🇸
United States of America
2
Most common categories
Bad Web Bot
4
Web App Attack
3
Brute-Force
2
Hacking
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
Vegascosmetics
2026-11-06 07:07:04
UTC ·
(10 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: Cluster Berater de17848 (10 IPs/15 Min)
Hacking
Bad Web Bot
Web App Attack
🇩🇪
PTScreens
2026-11-03 06:59:55
UTC ·
(3 days ago)
Rotating-proxy exit used by a headless browser crawler on an image host: 1 request on 2026-11-03, part of a ~1M request/day scrape spread over ~57k IPs.
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-28 21:57:23
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 45.70.12.197 (edge-197-12-70-45.iplus.com.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 17:57:17.885831 2026] [security2:error] [pid 2107:tid 2107] [cli ...
show more
(mod_security) mod_security (id:210350) triggered by 45.70.12.197 (edge-197-12-70-45.iplus.com.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 17:57:17.885831 2026] [security2:error] [pid 2107:tid 2107] [client 45.70.12.197:34602] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.waterspell.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.waterspell.net"] [uri "/"] [unique_id "arrivci9PsFnO59pGDozaAAAABc"], referer: https://januarymagazine.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 13:51:09
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 45.70.12.197 (edge-197-12-70-45.iplus.com.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:51:04.045931 2026] [security2:error] [pid 19377:tid 19377] [c ...
show more
(mod_security) mod_security (id:210350) triggered by 45.70.12.197 (edge-197-12-70-45.iplus.com.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:51:04.045931 2026] [security2:error] [pid 19377:tid 19377] [client 45.70.12.197:50102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||northfortworthalliance.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "northfortworthalliance.com"] [uri "/"] [unique_id "aqvwSCOEe-Cx1jyQVypQUwAAAAc"], referer: https://daandpachecker.online/dir/quality-backlink-services-150066
show less
Brute-Force
Bad Web Bot
Web App Attack
