Total reports
5 from
5 distinct
reporters
First reported
August 6th 2026
Most recent report
1 week ago
Last 60 days
Top reporter locations
🇩🇪
Germany
1
🇳🇱
Netherlands
1
🇷🇺
Russian Federation
1
Most common categories
Bad Web Bot
4
Web App Attack
2
Brute-Force
1
Hacking
1
Exploited Host
1
Old reports
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-11-07 02:15:03
UTC ·
(1 week ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Attack Signature Blocked: /wishlist/index/add/product/11369/form_key/FUDkDvsifRqJ1k9I/ | UA: Mozilla/5.0 (Android 3.2.1; Mobile; rv:54.0) Gecko/54.0 Firefox/54.0 | (Magento Site)
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 09:43:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 88.97.220.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 04:43:38.235604 2026] [security2:error] [pid 23320:tid 23320] [client 88.97.220.253:1204] Mo ...
show more
(mod_security) mod_security (id:210730) triggered by 88.97.220.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 04:43:38.235604 2026] [security2:error] [pid 23320:tid 23320] [client 88.97.220.253:1204] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.med-engineering.com|F|2"] [data ".bactroban.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.med-engineering.com"] [uri "/www.bactroban.com"] [unique_id "auhbSq7XKquRN_ISD-H7rgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
DrLex0
2026-10-28 21:20:30
UTC ·
(2 weeks ago)
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives
88.97.220.253 443 - [28/Oct/2026:21:20:30 +0000] "GET [redacted] HTTP/1.1" 410 5314 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_ ...
show more
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives
88.97.220.253 443 - [28/Oct/2026:21:20:30 +0000] "GET [redacted] HTTP/1.1" 410 5314 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Bad Web Bot
Exploited Host
🇩🇪
LRob
2026-09-16 13:53:44
UTC ·
(1 month ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: http://www.meteo-centre.fr/blog/ | 2026-09-16 13:53 UTC
Bad Web Bot
🇬🇧
Steve
2026-08-06 21:48:58
UTC ·
(3 months ago)
SQL Injection Attempts
Brute-Force
SQL Injection
