This IP address has been reported a total of
74
times from
53 distinct
sources.
176.152.237.66 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
United States of America
with 2
reports;
Australia
with 1
report.
The most common categories in these recent reports were:
Web App Attack
9
times;
Brute-Force
3
times;
Hacking
2
times;
Bad Web Bot
2
times;
Port Scan
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[MonOct1218:55:54.0320292026][security2:error][pid4092163:tid4092171][client176.152.237.66:0]ModSecu ...
show more[MonOct1218:55:54.0320292026][security2:error][pid4092163:tid4092171][client176.152.237.66:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^/components/com_clm/clm/\)\"against\"REQUEST_URI\"required.[file\"/etc/apache2/conf.d/modsec_rules/50_asl_rootkits.conf\"][line\"197\"][id\"390904\"][rev\"15\"][msg\"Atomicorp.comWAFRules:PossibleShellCommandAttempt\"][data\"cat/\"][severity\"CRITICAL\"][hostname\"maxay.ch\"][uri\"/admin/config\"][unique_id\"as0RGmVqdexVs2WigX-j_wAAAEU\"]
show less
[MonOct1212:12:58.0790412026][security2:error][pid2542394:tid2542500][client176.152.237.66:0]ModSecu ...
show more[MonOct1212:12:58.0790412026][security2:error][pid2542394:tid2542500][client176.152.237.66:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"218\"][id\"331039\"][rev\"1\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(Python-urllib\).DisablethisruleifyouusePython-urllib.\"][severity\"CRITICAL\"][hostname\"swiss-domain-name.ch\"][uri\"/\"][unique_id\"asyyqo1XAXDokPlGwOTsRAAAAJI\"]
show less
(mod_security) mod_security triggered on hostname [redacted] 176.152.237.66 (FR/France/176-152-237-6 ...
show more(mod_security) mod_security triggered on hostname [redacted] 176.152.237.66 (FR/France/176-152-237-66.abo.bbox.fr)
show less
Participated in Layer 7 DDoS attack against forum search endpoint. Part of residential botnet using ...
show moreParticipated in Layer 7 DDoS attack against forum search endpoint. Part of residential botnet using 15,000+ unique IPs with 8 round-robined browser user agents. Behavior: deep pagination of search/tag queries (up to page 1500+), findComment chain crawling, 87% requests closed before response (499). No static assets loaded. Attack ramped from ~1,800 req/hr to ~14,000 req/hr over 17 hours then stopped abruptly. Observed 2026-04-01.
show less
