AbuseIPDB » 154.54.249.18

154.54.249.18 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	Babbar
Usage Type	Search Engine Spider
Hostname(s)	crawl-dev-4.babbar.eu
Domain Name	babbar.eu
Country	France
City	Nozay, Pays-de-la-Loire

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Important Note: 154.54.249.18 is an IP address from within our benign crawler whitelist. We confidently believe it is not a bad bot. If you disagree, please provide us with compelling evidence.

Report 154.54.249.18

Whois 154.54.249.18

IP Abuse Reports for 154.54.249.18:

This IP address has been reported a total of 15 times from 8 distinct sources. 154.54.249.18 was first reported on March 1st 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
SCHAPPY	2024-10-10 10:33:11 (2 days ago)	Bad bot identified by user agent	Bad Web Bot
Thaliruth	2024-09-18 11:44:04 (3 weeks ago)	154.54.249.18 - - [18/Sep/2024:13:44:03 +0200] "GET /robots.txt HTTP/1.0" 200 1144 "-" "Mozilla/5.0 ... show more154.54.249.18 - - [18/Sep/2024:13:44:03 +0200] "GET /robots.txt HTTP/1.0" 200 1144 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)" ... show less	Bad Web Bot
Roderic	2024-09-17 09:22:20 (3 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 154.54.249.18 (FR/Fr ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 154.54.249.18 (FR/France/crawl-dev-4.babbar.eu) show less	Bad Web Bot
TPI-Abuse	2024-09-17 05:23:28 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 154.54.249.18 (crawl-dev-4.babbar.eu): 1 in the ... show more(mod_security) mod_security (id:210730) triggered by 154.54.249.18 (crawl-dev-4.babbar.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 17 01:23:21.042600 2024] [security2:error] [pid 1117017:tid 1117017] [client 154.54.249.18:17857] [client 154.54.249.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.justinrudd.com\|F\|2"] [data ".bonpetsupply.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.justinrudd.com"] [uri "/www.bonpetsupply.com"] [unique_id "ZukSSVCwhK8wvG2UtP8fBwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-09-16 21:55:23 (3 weeks ago)	Excessive crawling/scraping	Hacking Brute-Force
TPI-Abuse	2024-09-16 21:38:37 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 154.54.249.18 (crawl-dev-4.babbar.eu): 1 in the ... show more(mod_security) mod_security (id:210730) triggered by 154.54.249.18 (crawl-dev-4.babbar.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 16 17:38:33.177399 2024] [security2:error] [pid 1070:tid 1070] [client 154.54.249.18:7707] [client 154.54.249.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|williamfitzsimmons.com\|F\|2"] [data ".citywinery.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "williamfitzsimmons.com"] [uri "/news/224-spring-solo-tour-new-album/www.citywinery.com"] [unique_id "ZuilWXHUyDTwD2NxafXHpwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Roderic	2024-09-16 06:58:42 (3 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 154.54.249.18 (FR/Fr ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 154.54.249.18 (FR/France/crawl-dev-4.babbar.eu) show less	Bad Web Bot
bigscoots.com	2024-09-15 22:00:54 (3 weeks ago)	(PERMBLOCK) 154.54.249.18 (FR/France/crawl-dev-4.babbar.eu) has had more than 4 temp blocks in the l ... show more(PERMBLOCK) 154.54.249.18 (FR/France/crawl-dev-4.babbar.eu) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
Anonymous	2024-09-12 04:22:12 (1 month ago)	Excessive crawling/scraping	Hacking Brute-Force
silisoftware.com	2024-09-11 23:02:22 (1 month ago)	/phpBB3/viewforum.php?f=7	Web App Attack
bigscoots.com	2024-09-11 20:37:45 (1 month ago)	(PERMBLOCK) 154.54.249.18 (FR/France/crawl-dev-4.babbar.eu) has had more than 4 temp blocks in the l ... show more(PERMBLOCK) 154.54.249.18 (FR/France/crawl-dev-4.babbar.eu) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
Roderic	2024-03-04 09:16:35 (7 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 154.54.249.18 (FR/Fr ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 154.54.249.18 (FR/France/crawl-dev-4.babbar.eu) show less	Bad Web Bot
mwgbr	2024-03-04 04:35:10 (7 months ago)	154.54.249.18 (FR/France/crawl-dev-4.babbar.eu), more than 10 Apache 403 hits	Hacking
mwgbr	2024-03-02 08:16:47 (7 months ago)	154.54.249.18 (FR/France/crawl-dev-4.babbar.eu), more than 10 Apache 403 hits	Hacking
Roderic	2024-03-01 17:30:54 (7 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 154.54.249.18 (FR/Fr ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 154.54.249.18 (FR/France/crawl-dev-4.babbar.eu) show less	Bad Web Bot