Total reports
7 from
5 distinct
reporters
First reported
June 7th 2025
Most recent report
2 days ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
2
🇷🇴
Romania
1
Most common categories
Web App Attack
3
Brute-Force
3
Bad Web Bot
3
Hacking
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇷🇴
SpamStopper
2026-11-10 16:25:21
UTC ·
(2 days ago)
Fail2Ban - WordPress\(Anomis\) Looking for CMS/PHP/SQL vulnerabilities and hacked web hosts servers
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 13:40:32
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 181.118.45.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:40:28.379513 2026] [security2:error] [pid 1947:tid 1947] [client 181.118.45.97:59944] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 181.118.45.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:40:28.379513 2026] [security2:error] [pid 1947:tid 1947] [client 181.118.45.97:59944] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stukabird.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stukabird.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avMezLy38NVdkrs-hDrbwQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 00:47:57
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 181.118.45.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:47:50.180734 2026] [security2:error] [pid 9540:tid 9540] [client 181.118.45.97:46466] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 181.118.45.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:47:50.180734 2026] [security2:error] [pid 9540:tid 9540] [client 181.118.45.97:46466] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cnphilos.bridgital.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cnphilos.bridgital.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "auFGNtuys85mrbZZWhfAGwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-08-19 01:18:54
UTC ·
(2 months ago)
L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /33-meilleur-velo-entre-5000-et-10000-euros | query: q=Famille-Plasma+RC ...
show more
L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /33-meilleur-velo-entre-5000-et-10000-euros | query: q=Famille-Plasma+RC-Solace+Gravel+eRIDE-Scale+RC&resultsPerPage=12
show less
DDoS Attack
Web App Attack
🇳🇱
exxos
2025-08-08 19:45:35
UTC ·
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-08-05 03:10:01
UTC ·
(1 year ago)
http-no-verb
Hacking
🇩🇪
botreporter
2025-06-07 15:45:55
UTC ·
(1 year ago)
botnet ignoring robots.txt
Bad Web Bot
