Total reports
7 from
6 distinct
reporters
First reported
September 21st 2026
Most recent report
4 hours ago
Last 60 days
Top reporter locations
🇩🇪
Germany
3
🇫🇷
France
1
🇵🇱
Poland
1
Most common categories
Bad Web Bot
5
DDoS Attack
4
Web App Attack
3
Brute-Force
1
Hacking
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-11-15 12:15:05
UTC ·
(4 hours ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Offpeak: Sessionless Catalog Access Blocked: /brands/shopby/manufacturer-christie-f5_networks-plantronics-cyberpower-fortinet.html | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇩🇪
LRob
2026-11-08 20:39:57
UTC ·
(6 days ago)
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/blame/commit/8e8a556f9306476427bcddcde777d413509b1cc6/internal/api/recidivism.go | src_port: 44906 | ua: Mozilla/5.0 (Macinto ...
show more
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/blame/commit/8e8a556f9306476427bcddcde777d413509b1cc6/internal/api/recidivism.go | src_port: 44906 | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 | 2026-11-08 20:39 UTC
show less
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-29 07:45:08
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 5.29.140.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 03:45:02.890674 2026] [security2:error] [pid 16676:tid 16676] [client 5.29.140.110:52750] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 5.29.140.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 03:45:02.890674 2026] [security2:error] [pid 16676:tid 16676] [client 5.29.140.110:52750] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||frankcgill.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "frankcgill.com"] [uri "/"] [unique_id "auL5fiUe_7MoyA903igzHwAAAAE"], referer: https://five.co.in/redirect.php?ref_host=youcangetwomen.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-10-26 07:53:33
UTC ·
(2 weeks ago)
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
🇵🇱
MatStef132
2026-10-22 21:35:44
UTC ·
(3 weeks ago)
MatShield L7: blocked on unlocknow.cc (sec-fetch-before-safari-16)
DDoS Attack
🇩🇪
LRob
2026-10-15 00:03:58
UTC ·
(1 month ago)
Calendar filter flood (L7 DDoS) | host: escrime-auvergnerhonealpes.fr | path: /calendrier-2/action~agenda/time_limit~1763506800/cat_ids~137/tag_ids~275,654,669,633,246,623,577/request_format~json/ | src_port: 49500
DDoS Attack
Web App Attack
🇩🇪
HandyTreff.de
2026-09-21 23:24:46
UTC ·
(1 month ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -63.663 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa
Web App Attack
Bad Web Bot
