Total reports
6 from
4 distinct
reporters
First reported
September 22nd 2025
Most recent report
1 day ago
Last 60 days
Top reporter locations
🇩🇪
Germany
2
Most common categories
Bad Web Bot
2
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
LRob
2026-11-08 00:55:02
UTC ·
(1 day ago)
Not following 301 redirects — wasted requests | method: GET | path: /professionnel/machines-a-cafe-traditionnelles/ | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 | 2026-11-08 00: ...
show more
Not following 301 redirects — wasted requests | method: GET | path: /professionnel/machines-a-cafe-traditionnelles/ | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 | 2026-11-08 00:55 UTC
show less
Bad Web Bot
🇩🇪
LRob
2026-11-07 21:39:19
UTC ·
(1 day ago)
Not following 301 redirects — wasted requests | method: GET | path: /professionnel/machines-a-glacons/hoshizaki-dcm-230-he/ | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Bad Web Bot
🇦🇺
MAGIC
2026-06-20 00:06:41
UTC ·
(4 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-11 13:28:26
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 193.142.36.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 09:28:18.575808 2026] [security2:error] [pid 7699:tid 7699] [client 193.142.36.240:43703] M ...
show more
(mod_security) mod_security (id:225170) triggered by 193.142.36.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 09:28:18.575808 2026] [security2:error] [pid 7699:tid 7699] [client 193.142.36.240:43703] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.goglobex.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.goglobex.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiq38lOHTCXZUMSbphhMNgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
MusicLibrary
2026-04-23 07:55:01
UTC ·
(6 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇺🇸
TPI-Abuse
2025-09-22 04:49:01
UTC ·
(1 year ago)
(mod_security) mod_security (id:210831) triggered by 193.142.36.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 00:48:55.920271 2025] [security2:error] [pid 30244:tid 30244] [client 193.142.36.240:17555] ...
show more
(mod_security) mod_security (id:210831) triggered by 193.142.36.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 00:48:55.920271 2025] [security2:error] [pid 30244:tid 30244] [client 193.142.36.240:17555] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||thechoiceint.com|F|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "thechoiceint.com"] [uri "/webalizer/usage_201009.html"] [unique_id "aNDVN2cDPkDzS2nH8MputAAAAAU"], referer: http://thechoiceint.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
