This IP address has been reported a total of
50
times from
35 distinct
sources.
157.180.49.117 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[WedSep2312:00:34.8746332026][security2:error][pid536364:tid537189][client157.180.49.117:0]ModSecuri ...
show more[WedSep2312:00:34.8746332026][security2:error][pid536364:tid537189][client157.180.49.117:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"218\"][id\"331039\"][rev\"1\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(Python-urllib\).DisablethisruleifyouusePython-urllib.\"][severity\"CRITICAL\"][hostname\"mondo-it.ch\"][uri\"/\"][unique_id\"arOjQvdIUKO8b4mdZKZ9GgAAAAM\"]
show less
[WedSep2301:27:53.5680002026][security2:error][pid1417379:tid1417485][client157.180.49.117:0]ModSecu ...
show more[WedSep2301:27:53.5680002026][security2:error][pid1417379:tid1417485][client157.180.49.117:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"feldenkraisticino.ch\"][uri\"/\"][unique_id\"arMO-UYaWSyyPToQOfSVfwAAAQQ\"]
show less
Blocked by UFW (TCP on 80)
Source port: 8289
TTL: 56
Packet length: 60
TOS: 0x00
This report (for 1 ...
show moreBlocked by UFW (TCP on 80)
Source port: 8289
TTL: 56
Packet length: 60
TOS: 0x00
This report (for 157.180.49.117) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
[SatSep1923:23:35.3508062026][security2:error][pid1251702:tid1251835][client157.180.49.117:0]ModSecu ...
show more[SatSep1923:23:35.3508062026][security2:error][pid1251702:tid1251835][client157.180.49.117:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"pietroviviani.ch\"][uri\"/\"][unique_id\"aq79V3o17bkGklaTEjjsLgAAAJU\"]
show less
157.180.49.117 (FI/Finland/static.117.49.180.157.clients.your-server.de), more than 7 Apache 403 hit ...
show more157.180.49.117 (FI/Finland/static.117.49.180.157.clients.your-server.de), more than 7 Apache 403 hits
show less
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 157.180.49.117 (FI/F ...
show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 157.180.49.117 (FI/Finland/static.117.49.180.157.clients.your-server.de)
show less
Walking a list of paths that do not exist (scanning) | method: GET | path: /jobs (+7 more) | 2026-09 ...
show moreWalking a list of paths that do not exist (scanning) | method: GET | path: /jobs (+7 more) | 2026-09-08 20:50 UTC
show less
[SunSep0616:24:26.7049742026][security2:error][pid995882:tid996639][client157.180.49.117:0]ModSecuri ...
show more[SunSep0616:24:26.7049742026][security2:error][pid995882:tid996639][client157.180.49.117:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"218\"][id\"331039\"][rev\"1\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(Python-urllib\).DisablethisruleifyouusePython-urllib.\"][severity\"CRITICAL\"][hostname\"support-ticino.ch\"][uri\"/\"][unique_id\"ap13ml1A1kli513oAmkCvgAAAMY\"]
show less