JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.196.163.155

109.196.163.155 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 11%: ?

11%

ISP	HostRoyale Technologies Pvt Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203020
Domain Name	hostroyale.com
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.196.163.155

Whois 109.196.163.155

IP Abuse Reports for 109.196.163.155:

This IP address has been reported a total of 18 times from 11 distinct sources. 109.196.163.155 was first reported on October 30th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Rokku	2026-06-12 11:17:00 (1 month ago)	Faking GoogleBot	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-04 06:09:00 (1 month ago)	Exabot	Bad Web Bot
🇫🇷 bigorre.org	2026-05-28 09:52:19 (1 month ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2025-07-27 00:10:22 (11 months ago)	(mod_security) mod_security (id:211190) triggered by 109.196.163.155 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:211190) triggered by 109.196.163.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:09:35.759259 2025] [security2:error] [pid 83761:tid 84002] [client 109.196.163.155:53249] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|ftp.kettlehill.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-content/plugins/mail-masta/inc/lists/csvexport.php?pl=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.kettlehill.com"] [uri "/wp-content/plugins/mail-masta/inc/lists/csvexport.php"] [unique_id "aIVuP2If-iQLocfPxyOZuwAAAUw"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 rafix	2025-07-20 11:18:46 (1 year ago)	Botnet, DDoS #20250720	Bad Web Bot
🇺🇸 TPI-Abuse	2025-05-29 22:54:27 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 109.196.163.155 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 109.196.163.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 18:54:21.287426 2025] [security2:error] [pid 3697726:tid 3697726] [client 109.196.163.155:52649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.farmers123.com"] [uri "/web.config"] [unique_id "aDjlndfP2MV4QX1TbeSmhwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 dayda.net	2025-05-22 06:12:59 (1 year ago)	p=1&xsg-provider=data://text/html,<?php%20echo%20md5("CVE-2022-0346");%20//&xsg-format=yyy&xsg-type= ... show more p=1&xsg-provider=data://text/html,<?php%20echo%20md5("CVE-2022-0346");%20//&xsg-format=yyy&xsg-type=zz&xsg-page=pp show less	Bad Web Bot
Anonymous	2025-02-27 22:20:10 (1 year ago)	\| A web attack returned code 200 (success).	Hacking SQL Injection Web App Attack
Anonymous	2025-02-09 08:16:56 (1 year ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-09-04 05:36:21 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 109.196.163.155 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:217280) triggered by 109.196.163.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 04 01:36:03.680461 2024] [security2:error] [pid 4044:tid 4044] [client 109.196.163.155:50735] [client 109.196.163.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|callbobh.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "callbobh.com"] [uri "/"] [unique_id "Ztfxw7ayQtP5ASR6iA5wqgAAABE"], referer: http://callbobh.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oncord	2024-08-26 16:28:11 (1 year ago)	Form spam	Web Spam
🇸🇬 oncord	2024-08-25 09:57:31 (1 year ago)	Form spam	Web Spam
🇺🇸 oncord	2024-08-22 02:50:50 (1 year ago)	Form spam	Web Spam
🇸🇬 oncord	2024-08-18 07:54:58 (1 year ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2024-08-11 16:02:02 (1 year ago)	(From [email protected]) # Non-Shared Leads – Witness Our System Work Picture receivin ... show more (From [email protected]) # Non-Shared Leads – Witness Our System Work Picture receiving exclusive, exclusive leads straight from top search engines, customized for your needs. This system eliminates the hassle of bidding wars and budget caps, making sure you get customers near you who are looking for your services. No competition in sight, you'll experience instant success. Don't just take our word for it – schedule a live demo right away and see the amazing results our clients are loving. Watch it in action: https://bit.ly/roofingb2b Don't miss out on this opportunity to leverage your lead generation! Unsubscribe here if you don't want to get these great messages: [email protected] Discesa Gaiola 145, Albany, New York, US, 85023 show less	Phishing Web Spam

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 185.59.247.146

🇦🇺 223.27.17.37

🇵🇪 213.173.36.36

🇦🇲 212.73.71.195

🇹🇹 190.58.30.98

🇮🇷 185.66.229.118

🇧🇷 179.125.175.74

🇺🇸 172.237.156.206

🇵🇰 163.128.8.59

🇺🇸 162.216.149.186

🇺🇸 159.65.220.167

🇮🇳 150.241.244.100

🇬🇧 138.68.152.76

🇺🇸 136.117.49.103

🇰🇷 119.195.102.159

🇵🇰 103.73.101.183

🇰🇿 81.91.185.86

🇰🇪 41.220.233.254

🇺🇸 35.255.119.121

🇺🇸 34.83.169.240