This IP address has been reported a total of
24
times from
11 distinct
sources.
109.252.164.212 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
[TueMay1903:24:15.3918482026][security2:error][pid2889443:tid2889470][client109.252.164.212:0]ModSec ...
show more[TueMay1903:24:15.3918482026][security2:error][pid2889443:tid2889470][client109.252.164.212:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"motogiro.com\"][uri\"/bitrix/admin/index.php\"][unique_id\"agu7v7xpmF4vqMMkQk6wGAAAABc\"]
show less
[SatMay1602:24:55.5225832026][security2:error][pid3635969:tid3635975][client109.252.164.212:0]ModSec ...
show more[SatMay1602:24:55.5225832026][security2:error][pid3635969:tid3635975][client109.252.164.212:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"motogiro.com\"][uri\"/bitrix/modules/main/public/session.php\"][unique_id\"age5V8OR91oRPyvdxgpKgQAAAAQ\"]
show less
[TueMay1207:14:25.6231312026][security2:error][pid366283:tid366399][client109.252.164.212:0]ModSecur ...
show more[TueMay1207:14:25.6231312026][security2:error][pid366283:tid366399][client109.252.164.212:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"motogiro.com\"][uri\"/ajax/auth.php\"][unique_id\"agK3MXZTYHVuPsdtAMqLJwAAAIo\"]
show less
[TueMay1206:13:28.5642502026][security2:error][pid3626515:tid3626605][client109.252.164.212:0]ModSec ...
show more[TueMay1206:13:28.5642502026][security2:error][pid3626515:tid3626605][client109.252.164.212:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"giftech.ch\"][uri\"/index.php\"][unique_id\"agKo6LwYmY7l5GRllkwp7gAAAJM\"]
show less
Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on trackpunkracing.com (W ...
show moreAttack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on trackpunkracing.com (WP vulnerability) 109.252.164.212 (RU/Russia/109-252-164-212.dynamic.spd-mgts.ru): 1 in the last 3600 secs (CF_ENABLE); IP: 109.252.164.212; Ports: *; Direction: 0; Trigger: LF_CUSTOMTRIGGER;
show less
This IP address has been identified as part of a botnet infrastructure used by threat actors, indica ...
show moreThis IP address has been identified as part of a botnet infrastructure used by threat actors, indicating automated and malicious activity.
show less
Fraud Orders
Web App Attack
SSH
Web Spam
FTP Brute-Force
Phishing
Email Spam
Port Scan
Brute-Force
Exploited Host
Hacking
SQL Injection