AbuseIPDB » 109.169.55.38

109.169.55.38 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 8%: ?

ISP	IOMART MANAGED SERVICES LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20860
Hostname(s)	svr3.freebooter.net
Domain Name	rapidswitch.com
Country	United Kingdom of Great Britain and Northern Ireland
City	Saffron Walden, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 109.169.55.38

Whois 109.169.55.38

IP Abuse Reports for 109.169.55.38:

This IP address has been reported a total of 5 times from 3 distinct sources. 109.169.55.38 was first reported on November 10th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
MAGIC	2024-12-12 07:12:31 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
TPI-Abuse	2024-12-10 10:24:51 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 109.169.55.38 (svr3.freebooter.net): 1 in the l ... show more(mod_security) mod_security (id:225170) triggered by 109.169.55.38 (svr3.freebooter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 10 05:24:44.404828 2024] [security2:error] [pid 9834:tid 9834] [client 109.169.55.38:34737] [client 109.169.55.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.kbalan.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kbalan.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z1gW7G_AsJjb2B7RRYVwMAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-12-04 08:51:20 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 109.169.55.38 (svr3.freebooter.net): 1 in the l ... show more(mod_security) mod_security (id:225170) triggered by 109.169.55.38 (svr3.freebooter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 04 03:51:16.589251 2024] [security2:error] [pid 1360:tid 1360] [client 109.169.55.38:42222] [client 109.169.55.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.whatyouhear.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.whatyouhear.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z1AYBKeN93mlk9Tk224k1AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-12-04 04:00:11 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 109.169.55.38 (svr3.freebooter.net): 1 in the l ... show more(mod_security) mod_security (id:225170) triggered by 109.169.55.38 (svr3.freebooter.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 03 23:00:05.179378 2024] [security2:error] [pid 3624056:tid 3624056] [client 109.169.55.38:58990] [client 109.169.55.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.oldworldfineantiques.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.oldworldfineantiques.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z0_TxaOLH5bs_Rp_vc6KyAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
cmbplf	2024-11-10 08:00:11 (2 months ago)	3 /?fzK=cuXsG (3mos3w3d)	Brute-Force Bad Web Bot