This IP address has been reported a total of
17
times from
9 distinct
sources.
118.195.199.55 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Not following 301 redirects — wasted requests | method: HEAD | path: / | ua: curl-proxy/1.0 | 2026-1 ...
show moreNot following 301 redirects — wasted requests | method: HEAD | path: / | ua: curl-proxy/1.0 | 2026-10-25 10:52 UTC
show less
[SatOct2423:00:18.6072282026][security2:error][pid254186:tid254280][client118.195.199.55:0]ModSecuri ...
show more[SatOct2423:00:18.6072282026][security2:error][pid254186:tid254280][client118.195.199.55:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.morgenstern-swiss.ch\"][uri\"/\"][unique_id\"at0cYoqYntuK3MyB4deeJwAAAMI\"]
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 118.195.199.55: traffic from this a ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 118.195.199.55: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
Not following 301 redirects — wasted requests | method: HEAD | path: / | ua: curl-proxy/1.0 | 2026-1 ...
show moreNot following 301 redirects — wasted requests | method: HEAD | path: / | ua: curl-proxy/1.0 | 2026-10-23 21:18 UTC
show less
[FriOct2313:13:41.2237482026][security2:error][pid2509202:tid2509278][client118.195.199.55:0]ModSecu ...
show more[FriOct2313:13:41.2237482026][security2:error][pid2509202:tid2509278][client118.195.199.55:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"essesolution.ch\"][uri\"/\"][unique_id\"attBZZ-rax0ViTQ5Cn_2QAAAAQs\"]
show less
Not following 301 redirects — wasted requests | method: HEAD | path: / | ua: curl-proxy/1.0 | 2026-1 ...
show moreNot following 301 redirects — wasted requests | method: HEAD | path: / | ua: curl-proxy/1.0 | 2026-10-23 02:30 UTC
show less
Not following 301 redirects — wasted requests | method: GET | path: /wp-content/uploads/2014/11/outi ...
show moreNot following 301 redirects — wasted requests | method: GET | path: /wp-content/uploads/2014/11/outil-destruc-1024x597.png | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
[MonAug2406:28:15.1828052026][security2:error][pid538936:tid539034][client118.195.199.55:0]ModSecuri ...
show more[MonAug2406:28:15.1828052026][security2:error][pid538936:tid539034][client118.195.199.55:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"asw-sa.com\"][uri\"/\"][unique_id\"aovIXxbe1O8lkIKLcH_-xwAAAQE\"]
show less
[FriAug2114:39:55.2754472026][security2:error][pid1079103:tid1079227][client118.195.199.55:0]ModSecu ...
show more[FriAug2114:39:55.2754472026][security2:error][pid1079103:tid1079227][client118.195.199.55:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"dsfiduciaria.ch\"][uri\"/\"][unique_id\"aohHG3yjceo_hA-3BHTaKQAAAQ4\"]
show less
[WedAug1909:47:01.5626672026][security2:error][pid2154601:tid2154675][client118.195.199.55:0]ModSecu ...
show more[WedAug1909:47:01.5626672026][security2:error][pid2154601:tid2154675][client118.195.199.55:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"bianchitecno.ch\"][uri\"/\"][unique_id\"aoVfdc6L6nmX6tnuX73OOAAAAIw\"]
show less
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -33.353 (Bad < -10 / Very Bad < -20 ...
show moreBot/Spam/Scrapper attack detected on www.handytreff.de - Score: -33.353 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa
show less
Web App Attack
Bad Web Bot
Showing 1 to
15
of 17 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩