Total reports
7 from
7 distinct
reporters
First reported
June 17th 2025
Most recent report
1 month ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
1
Most common categories
Bad Web Bot
1
Brute-Force
1
Web App Attack
1
Old reports
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-06 06:08:32
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 179.6.5.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 02:08:29.531844 2026] [security2:error] [pid 3159:tid 3159] [client 179.6.5.94:16597] ModSecuri ...
show more
(mod_security) mod_security (id:210350) triggered by 179.6.5.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 02:08:29.531844 2026] [security2:error] [pid 3159:tid 3159] [client 179.6.5.94:16597] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gulftelecom.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gulftelecom.com"] [uri "/"] [unique_id "asSQXWyKgdKUbA7F22VqbQAAABo"], referer: https://qualitybacklinksservice.online/dir/professional-seo-backlinks-87194
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
A000Z
2026-06-29 12:16:31
UTC ·
(4 months ago)
Fail2Ban: 179.6.5.94 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Bad Web Bot
🇩🇪
pltcldvlpr
2026-06-23 23:35:02
UTC ·
(4 months ago)
Bogus Useragent: 179.6.5.94 - - [24/Jun/2026:01:35:01 +0200] "GET /protocol?id=bb_5_92&offset=350&seq=255 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows 98; bho-IN; rv:1.9.1.20) Gecko/8980-01-30 20:38:05.931549 Firefox/7.0" asn=12252 org="America Movil Pe ...
show more
Bogus Useragent: 179.6.5.94 - - [24/Jun/2026:01:35:01 +0200] "GET /protocol?id=bb_5_92&offset=350&seq=255 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows 98; bho-IN; rv:1.9.1.20) Gecko/8980-01-30 20:38:05.931549 Firefox/7.0" asn=12252 org="America Movil Peru S.A.C." country=PE
...
show less
Bad Web Bot
🇩🇪
Vegascosmetics
2026-06-16 11:11:34
UTC ·
(4 months ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
2026-06-11 09:00:41
UTC ·
(4 months ago)
Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 | Killer parameter blocked | UA: Mozilla/5.0 (Windows; U; Windows NT 5.01) AppleWebKit/535.9.6 (KHTML, like Gecko) Version/5.1 Safari/535.9.6 | (Magento Site)
Hacking
Bad Web Bot
🇩🇪
filstal.org
2026-06-01 09:44:59
UTC ·
(5 months ago)
Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Opera/8.42.(Windows NT 6.1; tn-ZA) Presto/2.9.168 Version/12.00
Bad Web Bot
Web App Attack
🇳🇱
rroethof
2025-06-17 21:26:22
UTC ·
(1 year ago)
2025-06-17T23:25:40.559013+02:00 mx3 postfix/smtpd[2742350]: NOQUEUE: reject: RCPT from unknown[179.6.5.94]: 550 5.1.1 <[email protected] >: Recipient address rejected: undeliverable address: Recipient address lookup failed; from=<[email protected] > to ...
show more
2025-06-17T23:25:40.559013+02:00 mx3 postfix/smtpd[2742350]: NOQUEUE: reject: RCPT from unknown[179.6.5.94]: 550 5.1.1 <[email protected] >: Recipient address rejected: undeliverable address: Recipient address lookup failed; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<[179.6.5.94]>
2025-06-17T23:26:21.867039+02:00 mx3 postfix/smtpd[2742350]: NOQUEUE: reject: RCPT from unknown[179.6.5.94]: 550 5.1.1 <[email protected] >: Recipient address rejected: undeliverable address: Recipient address lookup failed; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<[179.6.5.94]>
...
show less
Email Spam
