Total reports
8 from
6 distinct
reporters
First reported
August 8th 2026
Most recent report
1 month ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
1
Most common categories
Brute-Force
1
Web App Attack
1
Bad Web Bot
1
Old reports
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-07 22:57:22
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 189.81.4.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 18:57:17.870249 2026] [security2:error] [pid 5715:tid 5715] [client 189.81.4.222:29450] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 189.81.4.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 18:57:17.870249 2026] [security2:error] [pid 5715:tid 5715] [client 189.81.4.222:29450] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Luxury Beds/Standard Bed 3101/Thumbs.db"] [unique_id "asbOTdUa7EzRg4rFr3CycwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2026-08-31 10:53:45
UTC ·
(2 months ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇫🇷
bigorre.org
2026-08-30 06:50:59
UTC ·
(2 months ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇮🇹
A000Z
2026-08-22 04:46:39
UTC ·
(2 months ago)
Fail2Ban: 189.81.4.222 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36
Bad Web Bot
🇨🇭
backslash
2026-08-12 02:42:03
UTC ·
(2 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-10 14:56:29
UTC ·
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 189.81.4.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 10:56:20.690751 2026] [security2:error] [pid 1290089:tid 1290089] [client 189.81.4.222:56302] ...
show more
(mod_security) mod_security (id:210730) triggered by 189.81.4.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 10:56:20.690751 2026] [security2:error] [pid 1290089:tid 1290089] [client 189.81.4.222:56302] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nancyscafeandcatering.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-content/themes/eatery/hqpornxvideos.com"] [unique_id "annmlHrB_lC4wqnryCE5uQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
DrLex0
2026-08-10 04:14:45
UTC ·
(3 months ago)
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives
189.81.4.222 443 - [10/Aug/2026:04:14:45 +0000] "GET [redacted] HTTP/1.1" 200 8690 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_1 ...
show more
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives
189.81.4.222 443 - [10/Aug/2026:04:14:45 +0000] "GET [redacted] HTTP/1.1" 200 8690 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
show less
Bad Web Bot
Exploited Host
🇩🇪
ghostwarriors
2026-08-08 04:50:41
UTC ·
(3 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
