159.100.18.229
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- UltaHost Inc
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS214036
- Domain Name
- ultahost.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
20 from
15 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 francelink.fr |
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-07T02:12:38.000Z.
|
Web App Attack | |
| 🇫🇷 Baking333 |
|
Bad Web Bot Web App Attack | |
| 🇫🇷 COMAITE |
Suspicious URL access.
|
Web App Attack | |
| 🇫🇷 Stylottica |
PrestaShop Security Module: suspicious probe path detected (/.env)
|
Web App Attack | |
| 🇫🇷 gavrielpiperno |
PrestaShop Security Module: suspicious probe path detected (/config.json)
|
Web App Attack | |
| 🇪🇸 bohl-aiG5aef |
Suricata Alert [SID:2031502] ET INFO Request to Hidden Environment File - Inbound
|
Hacking | |
| 🇨🇿 UltimWeb |
Fail2ban_apache-auth
|
Brute-Force Web App Attack | |
| 🇺🇸 nyt |
Fake Chrome UA, Sensitive File Probe, Fake Chrome UA
|
Web App Attack | |
| 🇺🇸 francelink.fr |
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-04T16:12:57.000Z.
|
Web App Attack | |
| 🇫🇷 Baking333 |
|
Bad Web Bot Web App Attack | |
| Anonymous |
IP matched detection query 20 more in short time bad rqs.
|
Brute-Force Web App Attack Hacking | |
| 🇩🇪 LRob |
Secret file probe | method: GET | path: /.env | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 | src_port: 58650 | 2026-11-03 07:30 UTC
|
Hacking Web App Attack | |
| 🇺🇸 nyt |
Fake Chrome UA, 404 request to unusual endpoint
|
Web App Attack | |
| 🇧🇪 taivas.nl |
Site scraper
|
Web App Attack | |
| 🇩🇪 big-cloud.nl |
Try to access /wp-content/plugins/pojo-accessibility/readme.txt
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown