JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 137.59.4.149

137.59.4.149

Neutral Activity

10 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

HostRoyale Technologies Pvt Ltd

Usage Type

Data Center/Web Hosting/Transit

ASN

AS203020

Domain Name

hostroyale.com

Country

🇬🇷 Greece

City

Athens, Attica

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

137.59.4.149 has been reported 10 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 137.59.4.149:

This IP address has been reported a total of 10 times from 5 distinct sources. 137.59.4.149 was first reported on October 31st 2023, and the most recent report was 8 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-12-29 21:35:03 (8 months ago)	(mod_security) mod_security (id:211070) triggered by 137.59.4.149 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:211070) triggered by 137.59.4.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 16:34:56.594521 2025] [security2:error] [pid 21673:tid 21680] [client 137.59.4.149:57605] ModSecurity: Access denied with code 403 (phase 1). Pattern match "," at REQUEST_HEADERS:Transfer-Encoding. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "38"] [id "211070"] [rev "1"] [msg "COMODO WAF: HTTP Request Smuggling Attack.\|\|mail.kettlehill.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.kettlehill.com"] [uri "/tmui/login.jsp"] [unique_id "aVL0ANoKFoxlNLdnJRxhaQAAAEQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-13 11:56:08 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 137.59.4.149 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 137.59.4.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 06:56:02.511014 2025] [security2:error] [pid 18370:tid 18370] [client 137.59.4.149:51857] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.nbcnewsradio.com\|F\|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/ssl/localhost.key"] [unique_id "aRXHUobFZC4QR8g8LfOxYgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 dayda.net	2025-10-13 03:22:38 (11 months ago)	query: option=com_rokdownloads&controller=../../../../../../../../../../etc/passwd%00	Bad Web Bot
🇩🇪 SCHAPPY	2025-08-22 19:40:02 (1 year ago)	IP was involved in L7 DDoS attack.	DDoS Attack
🇺🇸 TPI-Abuse	2025-07-27 00:55:40 (1 year ago)	(mod_security) mod_security (id:221260) triggered by 137.59.4.149 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:221260) triggered by 137.59.4.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:55:25.135379 2025] [security2:error] [pid 404370:tid 404569] [client 137.59.4.149:50399] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|webmail.staging.kettlehill.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.staging.kettlehill.com"] [uri "/cgi-bin/status/status.cgi"] [unique_id "aIV4_cy-cZtwxEkIWL82mQAAANA"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-29 17:14:25 (1 year ago)	(mod_security) mod_security (id:211820) triggered by 137.59.4.149 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:211820) triggered by 137.59.4.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 13:14:18.323017 2025] [security2:error] [pid 3042803:tid 3042803] [client 137.59.4.149:58509] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:; ?(?:(?:(?:trunc\|cre\|upd)at\|renam)e\|(?:inser\|selec)t\|de(?:lete\|sc)\|alter\|load) ?[\\\\[(]?\\\\b\\\\w{2,}\|\\\\bcreate function .+ returns\\\\b))" at ARGS:rfilter. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "63"] [id "211820"] [rev "4"] [msg "COMODO WAF: Detects MySQL UDF injection and other data/structure manipulation attempts\|\|ftp.farmers123.com\|F\|2"] [data "Matched Data: ;SELECT SLEEP found within ARGS:rfilter: \\x22or \\x22\\x22=\\x22((\\x22));SELECT SLEEP(10);"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "ftp.farmers123.com"] [uri "/graph_view.php"] [unique_id "aDiV6vavDxOKEJxbx0tgKwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-15 12:41:00 (1 year ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
🇺🇸 ChamberofCommerce.com	2023-11-05 23:26:15 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-11-02 04:10:33 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-31 00:24:30 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 2602:80d:1003::25

🇨🇳 222.211.66.73

🇹🇼 198.235.24.79

🇨🇳 122.51.176.170

🇻🇳 116.98.245.218

🇳🇱 91.92.42.144

🇺🇸 76.34.141.145

🇺🇸 47.185.216.129

🇳🇱 45.148.10.212

🇺🇸 13.83.90.155

🇵🇰 223.123.65.54

🇷🇺 212.164.39.138

🇳🇱 160.119.71.92

🇸🇬 148.66.142.9

🇺🇸 8.234.21.69

🇬🇧 2a06:4880::9

🇰🇷 211.193.120.98

🇩🇪 205.185.222.235

🇹🇼 198.235.24.70

🇧🇷 189.41.127.221