Hello,
We received repeated high-volume traffic from 91.107.157.70 aimed at our network (target 81.12.80.144). We saw this source in 7 incidents over the last 7 days, hitting 1 address of ours. The most recent one ended at 2026-10-29 16:58:15 UTC.
P ...
show moreHello,
We received repeated high-volume traffic from 91.107.157.70 aimed at our network (target 81.12.80.144). We saw this source in 7 incidents over the last 7 days, hitting 1 address of ours. The most recent one ended at 2026-10-29 16:58:15 UTC.
Peak from this source alone in that incident: 372736 pps / 527.5 Mbps, active for about 4s.
Pattern: ACK / PSH-ACK Flood (severity MODERATE).
Traffic detail: protocols tcp 100%; top dest port(s) tcp/8880; sample confidence high (397 samples).
Measured with sFlow: high confidence, 397 samples at 1:4096 sampling.
Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network.
Regards,
ParsAbr Network Abuse Automation
show less
Hello,
We received repeated high-volume traffic from 91.107.157.70 aimed at our network (target 81.12.80.144). We saw this source in 3 incidents over the last 7 days, hitting 1 address of ours. The most recent one ended at 2026-10-27 22:58:26 UTC.
P ...
show moreHello,
We received repeated high-volume traffic from 91.107.157.70 aimed at our network (target 81.12.80.144). We saw this source in 3 incidents over the last 7 days, hitting 1 address of ours. The most recent one ended at 2026-10-27 22:58:26 UTC.
Peak from this source alone in that incident: 273613 pps / 947.9 Mbps, active for about 3s.
Pattern: ACK / PSH-ACK Flood (severity MODERATE).
Traffic detail: protocols tcp 100%; top dest port(s) tcp/8880; sample confidence high (307 samples).
Measured with sFlow: high confidence, 307 samples at 1:4096 sampling.
Please check the system using this address at that time and stop the traffic. We do not report sources that look spoofed or that belong to a CDN or other intermediary network.
Regards,
ParsAbr Network Abuse Automation
show less
DDoS Attack
Exploited Host
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown