This IP address has been reported a total of
13
times from
11 distinct
sources.
194.44.21.11 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Participated in Layer 7 DDoS attack against forum search endpoint. Part of residential botnet using ...
show moreParticipated in Layer 7 DDoS attack against forum search endpoint. Part of residential botnet using 15,000+ unique IPs with 8 round-robined browser user agents. Behavior: deep pagination of search/tag queries (up to page 1500+), findComment chain crawling, 87% requests closed before response (499). No static assets loaded. Attack ramped from ~1,800 req/hr to ~14,000 req/hr over 17 hours then stopped abruptly. Observed 2026-04-01.
show less
(mod_security) mod_security (id:210730) triggered by 194.44.21.11 (-): 1 in the last 300 secs; Ports ...
show more(mod_security) mod_security (id:210730) triggered by 194.44.21.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 04:03:16.591145 2026] [security2:error] [pid 21190:tid 21190] [client 194.44.21.11:51192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.birascreekresort.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.birascreekresort.com"] [uri "/services-amenities/[email protected]"] [unique_id "acouRIvB7KbKGa1I6UFDsAAAAAo"], referer: https://www.birascreekresort.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show moreDistributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-post.asp
show less