JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

193.108.119.2

Recent Activity

Abuse Confidence Score

100% Critical

33 reports

21 reporters · latest 13 hours ago

ISP: GlobalTeleHost Corp.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS63023
Hostname(s): 2-119-108-193.clients.gthost.com
Domain Name: globaltelehost.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

33 from 21 distinct reporters

First reported

July 6th 2026

Most recent report

13 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 8 🇦🇺 Australia 4 🇳🇱 Netherlands 4

Most common categories Web App Attack 15 Brute-Force 8 Hacking 7 Bad Web Bot 7 Web Spam 5

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-11-15 01:05:31 UTC · (13 hours ago)	[SunNov1502:05:27.2294772026][security2:error][pid3204966:tid3205156][client193.108.119.2:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-B ... show more [SunNov1502:05:27.2294772026][security2:error][pid3204966:tid3205156][client193.108.119.2:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"rssolution.ch\"][uri\"/media/sourcerer/js/popup.js\"][unique_id\"avkFVwWEx7aVKNKygkwZNgAAANU\"] show less	Hacking Web App Attack
🇩🇪 4server	2026-11-15 00:43:23 UTC · (14 hours ago)	[SunNov1501:43:18.1037362026][security2:error][pid635944:tid635993][client193.108.119.2:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLO ... show more [SunNov1501:43:18.1037362026][security2:error][pid635944:tid635993][client193.108.119.2:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"risparmiocasasuisse.ch\"][uri\"/media/sourcerer/js/popup.js\"][unique_id\"avkAJiDfy-q_PLRCb1ZCxgAAAEY\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 security.rdmc.fr	2026-11-15 00:43:14 UTC · (14 hours ago)	Activity from blacklisted IP	Hacking
🇦🇺 oncord	2026-11-13 22:45:22 UTC · (1 day ago)	Form spam	Web Spam
🇩🇪 ghostwarriors	2026-11-13 17:20:14 UTC · (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2026-11-12 10:49:10 UTC · (3 days ago)	Form spam	Web Spam
🇩🇪 FeG Deutschland	2026-11-12 10:41:55 UTC · (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇳🇱 pixelXp	2026-11-12 10:11:17 UTC · (3 days ago)	Reason:15 (Hacking), Via: www.sintannaboxmeer.nl/index-ajax.php, Message: Blocked URL pattern: 'index-ajax.php'. [POST] Gevaarlijk woord 'EVAL' in Value in 'search' [+35] #IN_KEYWORD{word=EVAL,part=value,field=search}; G ... show more Reason:15 (Hacking), Via: www.sintannaboxmeer.nl/index-ajax.php, Message: Blocked URL pattern: 'index-ajax.php'. [POST] Gevaarlijk woord 'EVAL' in Value in 'search' [+35] #IN_KEYWORD{word=EVAL,part=value,field=search}; Gevaarlijk woord 'eval' in Value in 'ucfg' [+35] #IN_KEYWORD{word=eval,part=value,field=ucfg}; Verdachte string 'base64_decode' in Value in 'ucfg' [+20] #IN_LOOSE{str=base64_decode,part=value,field=ucfg}; Verdachte Base64 content: [ show less	Hacking
🇿🇦 vanderhost	2026-11-12 08:11:13 UTC · (3 days ago)	[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /livewire/update via rule: /livewire	Web App Attack Bad Web Bot
🇵🇱 dzpk	2026-11-12 06:10:53 UTC · (3 days ago)	[12/Nov/2026:07:10:45 +0100] 179446384575.215111 193.108.119.2 39528 HOST 443 [12/Nov/2026:07:10:45 +0100] 179446384515.366964 193.108.119.2 39528 HOST 443 [12/Nov/2026:07:10:53 +0100] 179446385386.030076 193.108.119.2 39528 HOST 443	Web App Attack
🇳🇱 pixelXp	2026-11-12 05:03:04 UTC · (3 days ago)	Reason:15 (Hacking), Via: www.bomenrooien.com/index-ajax.php, Message: Blocked URL pattern: 'index-ajax.php'. [POST] Gevaarlijk woord 'EVAL' in Value in 'search' [+35] #IN_KEYWORD{word=EVAL,part=value,field=search}; Geva ... show more Reason:15 (Hacking), Via: www.bomenrooien.com/index-ajax.php, Message: Blocked URL pattern: 'index-ajax.php'. [POST] Gevaarlijk woord 'EVAL' in Value in 'search' [+35] #IN_KEYWORD{word=EVAL,part=value,field=search}; Gevaarlijk woord 'eval' in Value in 'ucfg' [+35] #IN_KEYWORD{word=eval,part=value,field=ucfg}; Verdachte string 'base64_decode' in Value in 'ucfg' [+20] #IN_LOOSE{str=base64_decode,part=value,field=ucfg}; Verdachte Base64 content: [ show less	Hacking
🇫🇷 dynamix	2026-11-12 02:57:45 UTC · (3 days ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-11-12 00:08:43 UTC · (3 days ago)	RUPLDE WEBFORM SPAM 193.108.119.2 (2-119-108-193.clients.gthost.com)	Web Spam
🇩🇪 FeG Deutschland	2026-11-11 10:34:10 UTC · (4 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-11-11 10:25:27 UTC · (4 days ago)	(mod_security) mod_security (id:210730) triggered by 193.108.119.2 (2-119-108-193.clients.gthost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:25:19.961782 2026] [security2:error] [pid 620:tid 620] [cl ... show more (mod_security) mod_security (id:210730) triggered by 193.108.119.2 (2-119-108-193.clients.gthost.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:25:19.961782 2026] [security2:error] [pid 620:tid 620] [client 193.108.119.2:60548] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|walkerweb.com\|F\|2"] [data ".pkg_sourcerer.sys.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "walkerweb.com"] [uri "/language/en-GB/en-GB.pkg_sourcerer.sys.ini"] [unique_id "avRCj9VuYinzKxqtTyecngAAAAM"], referer: https://walkerweb.com/administrator/manifests/packages/pkg_sourcerer.xml show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 187.190.35.163

🇺🇸 159.223.171.155

🇺🇸 143.244.166.88

🇵🇱 31.77.75.123

🇹🇳 197.3.0.205

🇲🇦 196.92.7.247

🇳🇱 192.253.248.229

🇧🇴 190.181.44.194

🇺🇸 159.89.89.50

🇫🇷 88.168.58.238

🇺🇸 66.132.195.86

🇳🇱 34.1.255.60

🇺🇸 172.56.107.113

🇺🇸 137.220.32.43

🇳🇱 109.160.32.111

🇸🇬 107.155.55.85

🇸🇪 16.171.159.244

🇬🇧 2.57.17.224

🇺🇸 161.35.6.67

🇺🇸 147.185.132.227