This IP address has been reported a total of
8
times from
4 distinct
sources.
152.39.155.210 was first reported on
November 5th 2025 , and the most recent report was
1 day ago Switzerland
with 1
report;
United States of America
with 1
report.
The most common categories in these recent reports were:
Bad Web Bot
2
times;
Web App Attack
1
time;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-07 13:42:17
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 152.39.155.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 152.39.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 09:42:01.941270 2026] [security2:error] [pid 2210:tid 2210] [client 152.39.155.210:43055] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||anbruswebdesign.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "anbruswebdesign.com"] [uri "/[email protected] "] [unique_id "asZMKe6lAA-CyjO5zthKagAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-08-23 06:42:00
(1 month ago)
block ruleset A83E80CC113635A4EF3A24679E16A44DF84CAB37
Bad Web Bot
2026-07-08 04:33:23
(3 months ago)
Banned by Fail2Ban on server
Web App Attack
2026-07-02 22:19:35
(3 months ago)
Banned by Fail2Ban on server
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 12:01:01
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 152.39.155.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 152.39.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 08:00:43.572590 2026] [security2:error] [pid 26320:tid 26320] [client 152.39.155.210:39723] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.chicagowca.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.chicagowca.com"] [uri "/[email protected] "] [unique_id "ajKMa2vdA8xLAFh96jfdAgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-04 12:28:03
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 152.39.155.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 152.39.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 04 07:27:49.413820 2026] [security2:error] [pid 23957:tid 23957] [client 152.39.155.210:35821] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||anbruswebdesign.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "anbruswebdesign.com"] [uri "/[email protected] "] [unique_id "aVpcxUH7Ur_9487awKN_AwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Shaik Sai Meera
2025-11-29 00:51:06
(10 months ago)
IM360 WAF: Request indicates a Headless browser
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-11-05 06:13:51
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 152.39.155.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 152.39.155.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 01:13:43.045440 2025] [security2:error] [pid 29228:tid 29228] [client 152.39.155.210:37265] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||efhgtc.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "efhgtc.org"] [uri "/[email protected] "] [unique_id "aQrrF-C3GrU_Z_6W2Ts65QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
