AbuseIPDB » 147.185.250.40
147.185.250.40
This IP was reported 6 times. Confidence of
Abuse
is 4% : ?
ISP
trafficforce, UAB
Usage Type
Data Center/Web Hosting/Transit
ASN
AS264617
Domain Name
trafficforce.lt
Country
🇨🇭
Switzerland
City
Zurich, Zurich
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 147.185.250.40 :
This IP address has been reported a total of
6
times from
2 distinct
sources.
147.185.250.40 was first reported on
May 1st 2025 , and the most recent report was
6 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-01 02:17:46
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 147.185.250.40 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 147.185.250.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:17:37.429220 2026] [security2:error] [pid 7578:tid 7646] [client 147.185.250.40:46473] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kettlehill.net|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.net"] [uri "/\\\\windows/win.ini"] [unique_id "ahzrwTiC2MDz6asrVnUmqwAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-07 17:53:49
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 147.185.250.40 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 147.185.250.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 12:53:43.062578 2026] [security2:error] [pid 22787:tid 22787] [client 147.185.250.40:42483] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ftp.nbcnewsradio.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/server.key"] [unique_id "aYd8J78s-dMlkP84XEDW7wAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-28 18:48:45
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 147.185.250.40 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 147.185.250.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 14:48:40.308280 2025] [security2:error] [pid 5408:tid 5408] [client 147.185.250.40:55685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/wp-config.php.bak"] [unique_id "aQEQCN_2tI0CHAHThkn0dgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
sailor
2025-10-18 18:46:00
(7 months ago)
blocked by firewall for XSS: Cross Site Scripting in query string:
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-01 06:59:38
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 147.185.250.40 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 147.185.250.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 01 02:59:30.285857 2025] [security2:error] [pid 32047:tid 32124] [client 147.185.250.40:56219] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||staging.kettlehill.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "staging.kettlehill.com"] [uri "/translate.sql"] [unique_id "aGOHUgF1tdoO2im1K3V07wAAAI8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-01 03:04:56
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 147.185.250.40 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 147.185.250.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 30 23:03:35.211938 2025] [security2:error] [pid 10928:tid 11090] [client 147.185.250.40:43941] [client 147.185.250.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.kettlehill.com"] [uri "/wp-content/plugins/simple-file-list/includes/ee-downloader.php"] [unique_id "aBLkh2hpHha-h36oCB5rjwAAAJg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: