JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.169.10.4

109.169.10.4 was found in our database!

This IP was reported 661 times. Confidence of Abuse is 35%: ?

35%

ISP	Iomart Managed Services Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20860
Hostname(s)	as038.pub.threatview.app
Domain Name	rapidswitch.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Reading, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.169.10.4

Whois 109.169.10.4

IP Abuse Reports for 109.169.10.4:

This IP address has been reported a total of 661 times from 121 distinct sources. 109.169.10.4 was first reported on October 12th 2021, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Mangelot Hosting	2026-07-14 13:40:54 (10 hours ago)	(DNSAXFR) NS1 DNS AXFR scan detected 109.169.10.4 (GB/United Kingdom/as038.pub.threatview.app): 1 in ... show more (DNSAXFR) NS1 DNS AXFR scan detected 109.169.10.4 (GB/United Kingdom/as038.pub.threatview.app): 1 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-06-26 05:02:47 (2 weeks ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: GB, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: GB, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
Anonymous	2026-06-25 05:02:17 (2 weeks ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: GB, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: GB, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-06-25 03:41:34 (2 weeks ago)	(mod_security) mod_security (id:11000011) triggered by 109.169.10.4 (GB/United Kingdom/England/Maide ... show more (mod_security) mod_security (id:11000011) triggered by 109.169.10.4 (GB/United Kingdom/England/Maidenhead/-/[AS20860 IOMART-AS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 06:41:29.989272 2026] [security2:error] [pid 358185:tid 358270] [remote 109.169.10.4:58576] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "threatview.app" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: as038.pub.threatview.app"] [severity "CRITICAL"] [hostname "mail.asteriassantorini.com"] [uri "/"] [unique_id "ajyjaTpPCootS5mrGd6gBQABlRY"] show less	Port Scan
🇬🇷 setupgr	2026-06-20 03:54:45 (3 weeks ago)	(mod_security) mod_security (id:11000011) triggered by 109.169.10.4 (GB/United Kingdom/England/Maide ... show more (mod_security) mod_security (id:11000011) triggered by 109.169.10.4 (GB/United Kingdom/England/Maidenhead/-/[AS20860 IOMART-AS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 20 06:54:44.743423 2026] [security2:error] [pid 2278:tid 2338] [remote 109.169.10.4:42460] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "threatview.app" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: as038.pub.threatview.app"] [severity "CRITICAL"] [hostname "mail.adoro.gr"] [uri "/"] [unique_id "ajYPBAuYeXI6iTUJgvtFlAAAkwU"] show less	Port Scan
🇬🇷 setupgr	2026-06-18 03:41:59 (3 weeks ago)	(mod_security) mod_security (id:11000011) triggered by 109.169.10.4 (GB/United Kingdom/England/Maide ... show more (mod_security) mod_security (id:11000011) triggered by 109.169.10.4 (GB/United Kingdom/England/Maidenhead/-/[AS20860 IOMART-AS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 18 06:41:56.894153 2026] [security2:error] [pid 3040547:tid 3040572] [remote 109.169.10.4:60394] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "threatview.app" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: as038.pub.threatview.app"] [severity "CRITICAL"] [hostname "mail.asteriassantorini.com"] [uri "/"] [unique_id "ajNpBHJQXt_97GWFlLmF0wAAQRg"] show less	Port Scan
🇬🇷 setupgr	2026-06-17 02:44:03 (3 weeks ago)	(mod_security) mod_security (id:11000011) triggered by 109.169.10.4: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:11000011) triggered by 109.169.10.4: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 05:44:00.555135 2026] [security2:error] [pid 2210176:tid 2210200] [remote 109.169.10.4:42814] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "threatview.app" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: as038.pub.threatview.app"] [severity "CRITICAL"] [hostname "babis.photo"] [uri "/"] [unique_id "ajIJ8I0pb6dkgQfaMdDhRgABBgA"] show less	Port Scan
🇺🇸 nodepile	2026-06-14 01:33:06 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=HEAD path=/ ua='Turaco Labs ThreatVie ... show more Requests denied due to active blacklist hits (tenant=82 method=HEAD path=/ ua='Turaco Labs ThreatView Security Auditor (threatview.app)') show less	Web App Attack Exploited Host
🇬🇷 setupgr	2026-06-13 04:00:07 (1 month ago)	(mod_security) mod_security (id:11000011) triggered by 109.169.10.4: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:11000011) triggered by 109.169.10.4: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 07:00:06.248656 2026] [security2:error] [pid 568634:tid 568678] [remote 109.169.10.4:34164] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "threatview.app" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: as038.pub.threatview.app"] [hostname "mail.babis.photo"] [uri "/"] [unique_id "aizVxmhA1AVliy02kiGXAQAB0w8"] show less	Port Scan
Anonymous	2026-06-03 09:31:23 (1 month ago)	FortiWeb WAF: 56 attacks detected. Threat Score: 7200. Types: Client Management(28), Block IP List(2 ... show more FortiWeb WAF: 56 attacks detected. Threat Score: 7200. Types: Client Management(28), Block IP List(28). Origin: United Kingdom. show less	Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-02 12:10:16 (1 month ago)	Blocked by CSF 13 firewall - Rule: GB/United Kingdom/as038.pub.threatview.app	Web App Attack
🇩🇪 grassau.com	2026-06-02 08:10:43 (1 month ago)	Port Scan detected from 109.169.10.4 (GB/United Kingdom/-/-/as038.pub.threatview.app).	Port Scan
🇩🇪 EGP Abuse Dept	2026-06-02 07:52:27 (1 month ago)	Scanning for web/db/file exploits on www.stekdenhaag.nl	SQL Injection Bad Web Bot Web App Attack
🇫🇷 tecnicorioja	2026-06-01 22:00:15 (1 month ago)	wp-login attack [01/Jun/2026:07:41:36	Brute-Force Web App Attack
Anonymous	2026-06-01 10:55:15 (1 month ago)	109.169.10.4 - - [01/Jun/2026:10:55:14 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 3728 " ... show more 109.169.10.4 - - [01/Jun/2026:10:55:14 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 3728 "-" "Turaco Labs ThreatView Security Auditor (threatview.app)" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 661 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 121.121.60.201

🇺🇸 98.89.204.118

🇮🇳 27.255.175.66

🇨🇳 211.95.159.159

🇧🇷 205.210.31.207

🇩🇪 141.11.45.17

🇨🇳 117.137.81.184

🇦🇺 77.95.117.50

🇷🇺 77.34.232.229

🇲🇾 47.254.245.24

🇧🇷 45.157.156.222

🇺🇸 107.175.95.133

🇭🇰 101.36.107.233

🇵🇱 176.53.159.197

🇫🇮 147.185.133.27

🇺🇸 85.208.98.18

🇫🇷 85.204.70.98

🇸🇪 82.209.191.11

🇷🇺 82.147.84.148

🇬🇧 35.203.211.195