Total reports
8 from
7 distinct
reporters
First reported
October 13th 2026
Most recent report
1 day ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
4
🇩🇪
Germany
2
🇫🇷
France
1
Most common categories
Bad Web Bot
4
Brute-Force
3
Port Scan
3
Web App Attack
2
Hacking
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-11-07 18:32:07
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 86.97.151.83 (bba-86-97-151-83.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:32:01.851763 2026] [security2:error] [pid 7664:tid 7664] [c ...
show more
(mod_security) mod_security (id:210350) triggered by 86.97.151.83 (bba-86-97-151-83.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:32:01.851763 2026] [security2:error] [pid 7664:tid 7664] [client 86.97.151.83:52010] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||clinicacero.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "clinicacero.com"] [uri "/"] [unique_id "au9uoQSorxdy2YLu4aS6ZQAAAAs"], referer: https://lorentius.com/all/649/33.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-06 22:36:06
UTC ·
(2 days ago)
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/blame/commit/e5701bd4b5c3494070808bf00304efe674b06365/internal/store/counters_test.go | src_port: 52810 | ua: Mozilla/5.0 (Ma ...
show more
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/blame/commit/e5701bd4b5c3494070808bf00304efe674b06365/internal/store/counters_test.go | src_port: 52810 | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
show less
DDoS Attack
Bad Web Bot
🇺🇸
pixelmemory.us
2026-11-01 02:45:09
UTC ·
(1 week ago)
2026-11-01T02:43:14 86.97.151.83 GET /Photos/Outdoors/2020-10-10%20Renaisance%20Faire/raw/DSC04702.ARW Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
...
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-16 20:52:05
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 86.97.151.83 (bba-86-97-151-83.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 16:52:00.459368 2026] [security2:error] [pid 12483:tid 12483] ...
show more
(mod_security) mod_security (id:225170) triggered by 86.97.151.83 (bba-86-97-151-83.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 16:52:00.459368 2026] [security2:error] [pid 12483:tid 12483] [client 86.97.151.83:39020] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.tasteshop.l3l4.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tasteshop.l3l4.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atKOcKu6zLEYEPfgrhQRAwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
security.rdmc.fr
2026-10-14 01:59:28
UTC ·
(3 weeks ago)
Port Scan Attack proto:TCP src:51048 dst:23
Port Scan
2026-10-13 22:21:34
UTC ·
(3 weeks ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
🇬🇧
knock
2026-10-13 21:40:43
UTC ·
(3 weeks ago)
Knock-Knock honeypot brute-force: Telnet (100 total hits)
Brute-Force
🇺🇸
RAP
2026-10-13 19:15:52
UTC ·
(3 weeks ago)
2026-10-13 19:15:52 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
