JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

185.125.50.5

Neutral Activity

Abuse confidence score ?

0% Low Risk

472 reports

77 reporters · latest 1 year ago

ISP	H2.NEXUS Frankfurt Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215730
Hostname(s)	s325056.love-is.nexus
Domain Name	h2.nexus
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

185.125.50.5 has been reported 472 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 185.125.50.5

Export CSV

This IP address has been reported a total of 472 times from 77 distinct sources. 185.125.50.5 was first reported on March 8th 2024, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 octageeks.com	2025-09-15 04:06:40 (1 year ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇳🇱 MM-bot	2025-09-14 16:34:33 (1 year ago)	URL-probe: HTTP/1.1 GET request on /elmah.axd (2025-09-14 18:34:33 UTC+2)	Hacking Web App Attack
🇬🇧 AvonleaConsulting	2025-09-14 15:40:46 (1 year ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 12:30:50 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 08:30:46.192050 2025] [security2:error] [pid 23623:tid 23623] [client 185.125.50.5:28500] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|syscomprint.com\|F\|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "syscomprint.com"] [uri "/elmah.axd"] [unique_id "aMa1dsiJemEfyUNrK8SVZgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-09-14 08:26:18 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 07:18:04 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 03:17:57.291881 2025] [security2:error] [pid 14442:tid 14442] [client 185.125.50.5:21684] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|strawusa.com\|F\|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "strawusa.com"] [uri "/elmah.axd"] [unique_id "aMZsJfJLz5eWzBCBud5mZgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 05:05:46 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 01:05:41.561232 2025] [security2:error] [pid 8221:tid 8221] [client 185.125.50.5:34590] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|stat-alliance.com\|F\|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stat-alliance.com"] [uri "/elmah.axd"] [unique_id "aMZNJSblM1-lqNjRCfPIegAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 04:30:56 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 00:30:50.408352 2025] [security2:error] [pid 9658:tid 9658] [client 185.125.50.5:52184] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|stananddana.com\|F\|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stananddana.com"] [uri "/elmah.axd"] [unique_id "aMZE-pc-gaCRDyKw4KyQywAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 04:06:19 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 00:06:15.122275 2025] [security2:error] [pid 7260:tid 7260] [client 185.125.50.5:42958] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ssleasingmi.com\|F\|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ssleasingmi.com"] [uri "/elmah.axd"] [unique_id "aMY_N--Wg-Bsh2VDdvh74wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 03:20:10 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 23:20:06.691612 2025] [security2:error] [pid 27311:tid 27311] [client 185.125.50.5:7100] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|spottedeaglearts.com\|F\|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "spottedeaglearts.com"] [uri "/elmah.axd"] [unique_id "aMY0ZoYu7zDBs0lEMz1EQgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 02:59:03 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 22:58:57.992635 2025] [security2:error] [pid 25682:tid 25682] [client 185.125.50.5:17474] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|spmbookings.com\|F\|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "spmbookings.com"] [uri "/elmah.axd"] [unique_id "aMYvcc87r9vLvcPLRFALKgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 02:40:38 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 22:40:34.674912 2025] [security2:error] [pid 6461:tid 6461] [client 185.125.50.5:55340] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|spiht.com\|F\|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "spiht.com"] [uri "/elmah.axd"] [unique_id "aMYrIhsLddcvWRoQNhRduwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2025-09-14 02:31:00 (1 year ago)	IPBlock protected site ID [4055-d][s=02]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 02:19:27 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 22:19:22.790535 2025] [security2:error] [pid 21674:tid 21674] [client 185.125.50.5:21070] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|specialtycomputer.com\|F\|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "specialtycomputer.com"] [uri "/elmah.axd"] [unique_id "aMYmKndb4V5FwCtlg4elXgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-14 01:51:04 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the ... show more (mod_security) mod_security (id:210730) triggered by 185.125.50.5 (s175269.love-is.nexus): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 21:51:00.146322 2025] [security2:error] [pid 24117:tid 24117] [client 185.125.50.5:7360] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|spacemonsterpublishing.com\|F\|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "spacemonsterpublishing.com"] [uri "/elmah.axd"] [unique_id "aMYfhMClE4HVnSMsWetE3gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 472 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 45.119.81.245

🇺🇸 44.244.105.185

🇨🇳 42.227.139.105

🇬🇧 35.203.211.208

🇧🇩 103.31.179.73

🇬🇧 86.38.187.45

🇬🇧 82.26.28.175

🇸🇬 47.84.204.145

🇳🇱 45.148.10.247

🇺🇸 45.131.195.100

🇦🇿 37.114.150.169

🇬🇧 35.203.211.198

🇬🇧 35.203.210.143

🇳🇱 34.32.154.238

🇺🇸 205.210.31.64

🇺🇸 162.216.149.118

🇺🇸 159.65.219.252

🇺🇸 157.245.243.118

🇧🇷 152.32.200.22

🇵🇱 94.154.21.127