Total reports
9 from
9 distinct
reporters
First reported
May 17th 2023
Most recent report
11 hours ago
Last 60 days
Top reporter locations
🇫🇷
France
2
🇩🇪
Germany
1
🇬🇧
United Kingdom of Great Britain and Northern Ireland
1
Most common categories
Port Scan
4
Brute-Force
1
IoT Targeted
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
security.rdmc.fr
2026-11-10 22:21:02
UTC ·
(11 hours ago)
Port Scan Attack proto:TCP src:60434 dst:23
Port Scan
🇬🇧
sonot
2026-11-05 09:19:20
UTC ·
(6 days ago)
Blocked by UFW on tunneluk01 [23/tcp] | SPT: 48488 | TTL: 49 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
IoT Targeted
🇫🇷
Petre 21_ip
2026-11-04 16:13:45
UTC ·
(6 days ago)
2026-11-04T17:13:44.443021+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=91.238.99.2 DST=155.133.26.57 LEN=60 TOS=0x00 PREC=0x20 TTL=51 ID=31860 DF PROTO=TCP SPT=19079 DPT=23 WINDOW=65535 RES=0x00 ...
show more
2026-11-04T17:13:44.443021+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=91.238.99.2 DST=155.133.26.57 LEN=60 TOS=0x00 PREC=0x20 TTL=51 ID=31860 DF PROTO=TCP SPT=19079 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
2026-11-02 16:52:22
UTC ·
(1 week ago)
denied Telnet access attempt. destination port 23.
Port Scan
Brute-Force
🇵🇱
sefinek.net
2025-03-15 08:00:06
UTC ·
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from RU.
Action taken: MANAGED_CHALLENGE
ASN: 202984 (TEAM-HOST AS)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2025-03-15T07:59:20Z
Ray ID: 920a788668ae542e
UA: Mozilla/5.0 (Windows NT 10.0; Win64 ...
show more
Triggered Cloudflare WAF (firewallCustom) from RU.
Action taken: MANAGED_CHALLENGE
ASN: 202984 (TEAM-HOST AS)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2025-03-15T07:59:20Z
Ray ID: 920a788668ae542e
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Report generated by Cloudflare-WAF-To-AbuseIPDB:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-03-07 17:25:32
UTC ·
(1 year ago)
(mod_security) mod_security (id:210831) triggered by 91.238.99.2 (64390.web.hosting-russia.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 07 12:25:26.805926 2025] [security2:error] [pid 351209:tid 351209] [cli ...
show more
(mod_security) mod_security (id:210831) triggered by 91.238.99.2 (64390.web.hosting-russia.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 07 12:25:26.805926 2025] [security2:error] [pid 351209:tid 351209] [client 91.238.99.2:44863] [client 91.238.99.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||backstore.com|F|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/webalizer/usage_201802.html"] [unique_id "Z8ssBsbiu7VNh49_Hr_3YwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Linuxmalwarehuntingnl
2024-07-01 10:53:55
UTC ·
(2 years ago)
Unauthorized connection attempt
Brute-Force
2023-07-20 19:13:15
UTC ·
(3 years ago)
Web Spam
Email Spam
Blog Spam
Bad Web Bot
Web App Attack
2023-05-17 12:35:17
UTC ·
(3 years ago)
hack vpn
VPN IP
Hacking
