Total reports
7 from
5 distinct
reporters
First reported
December 1st 2025
Most recent report
6 days ago
Last 60 days
Top reporter locations
🇩🇪
Germany
1
Most common categories
DDoS Attack
1
Web App Attack
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
LRob
2026-11-06 15:38:20
UTC ·
(6 days ago)
Proxynvader botnet, shop flood (L7 DDoS): https://shieldlist.eu/en/threats/proxynvader | path: /3-velos | query: q=Famille-Avant-Gambler-TREKKING-Crosshill | src_port: 63151
DDoS Attack
Web App Attack
2026-09-08 04:00:23
UTC ·
(2 months ago)
Large-scale coordinated botnet (4M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group | Catalog Search Abus ...
show more
Large-scale coordinated botnet (4M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group | Catalog Search Abuse Blocked: /catalogsearch/result/?cat=33&dir=asc&iptel_application=178&iptel_type=173&order=relevance&q=ex+90&rating=6 | UA: Mozilla/5.0 (Android 2.0; Mobile; rv:43.0) Gecko/43.0 Firefox/43.0 | (Magento Site)
show less
Hacking
Bad Web Bot
🇸🇬
mypatricks
2026-05-14 04:07:21
UTC ·
(5 months ago)
98.58.128.69 | Port: 11154 | DNS: c-98-58-128-69.hsd1.fl.comcast.net 2026-05-14T12:07:20+08:00 America/New_York | Fake HTTP Protocol detected! | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Saf ...
show more
98.58.128.69 | Port: 11154 | DNS: c-98-58-128-69.hsd1.fl.comcast.net 2026-05-14T12:07:20+08:00 America/New_York | Fake HTTP Protocol detected! | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /account/signin/?45df0470b5ba16a7665cc1819cf441b6=1774745772 | Ref: - | Country: US/United States/-08:00 IP City: Key West Linux 9fb70907cc27259f-MIA/Miami, FL, United States 1 hits/0 secs Robots 2
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇺🇸
TPI-Abuse
2025-12-28 17:13:41
UTC ·
(10 months ago)
(mod_security) mod_security (id:210350) triggered by 98.58.128.69 (c-98-58-128-69.hsd1.fl.comcast.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 12:13:33.429416 2025] [security2:error] [pid 3599:tid 3599] ...
show more
(mod_security) mod_security (id:210350) triggered by 98.58.128.69 (c-98-58-128-69.hsd1.fl.comcast.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 12:13:33.429416 2025] [security2:error] [pid 3599:tid 3599] [client 98.58.128.69:43324] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mail.celebrationofdiana.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mail.celebrationofdiana.com"] [uri "/"] [unique_id "aVFlPWa4Y-iFWnVvSWEEzgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-12 22:34:07
UTC ·
(11 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-12-10 14:52:11
UTC ·
(11 months ago)
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access"
DDoS Attack
SQL Injection
Exploited Host
2025-12-01 14:10:17
UTC ·
(11 months ago)
botnet
DDoS Attack
