AbuseIPDB » 191.96.11.209
191.96.11.209
This IP was reported 65 times. Confidence of
Abuse
is 100% : ?
ISP
Chunkserve Mateusz Peplinski
Usage Type
Data Center/Web Hosting/Transit
ASN
AS214481
Domain Name
abuseradar.com
Country
🇳🇱
Netherlands
City
Amsterdam, North Holland
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 191.96.11.209 :
This IP address has been reported a total of
65
times from
47 distinct
sources.
191.96.11.209 was first reported on
May 26th 2026 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-05-26 13:24:19
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 191.96.11.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 191.96.11.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 09:24:13.772372 2026] [security2:error] [pid 7550:tid 7550] [client 191.96.11.209:35734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gallery.pcoecsi.com"] [uri "/.git/HEAD"] [unique_id "ahWe_ZLiXAbI3uK0GR0o8AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
MM-bot
2026-05-26 12:41:51
(1 week ago)
URL-probe: HTTP/1.1 GET request on /.git/config (2026-05-26 14:41:51 UTC+2)
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-05-26 12:34:49
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 191.96.11.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:949110) triggered by 191.96.11.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 08:34:44.574421 2026] [security2:error] [pid 5820:tid 5820] [client 191.96.11.209:32824] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "gaming.freedrm.org"] [uri "/.git/HEAD"] [unique_id "ahWTZM1PYDR5qmIdf_i4dgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-26 11:17:34
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 191.96.11.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 191.96.11.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 07:17:27.164129 2026] [security2:error] [pid 9435:tid 9435] [client 191.96.11.209:48188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "files.lmffl.com"] [uri "/.git/HEAD"] [unique_id "ahWBRws5GKKYoqpfl5n6XQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-26 10:56:24
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 191.96.11.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 191.96.11.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 06:56:18.658760 2026] [security2:error] [pid 16451:tid 16460] [client 191.96.11.209:52414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gafm.org"] [uri "/.git/HEAD"] [unique_id "ahV8UsPyXPUiFz8R6K45fgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 61 to
65
of 65 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: