Total reports
5 from
4 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
. It is possible that this IP is
no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
🇳🇱
Alt255
|
|
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 195.210.106.218 - - [17/Oct/2026:18:42:29 +0200] "GET /wp-content/plugins/buddypress/alfa.php HTTP/2.0" 403 138 "https://www.demetermagazine.nl/w ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 195.210.106.218 - - [17/Oct/2026:18:42:29 +0200] "GET /wp-content/plugins/buddypress/alfa.php HTTP/2.0" 403 138 "https://www.demetermagazine.nl/wp-content/plugins/buddypress/alfa.php" "Go-http-client/2.0"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇬🇷
setupgr
|
|
(mod_security) mod_security (id:1000001) triggered by 195.210.106.218 (US/United States/-/-/-/[AS137409 GSL Networks Pty LTD]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 17 18:14:23.573701 20 ...
show more
(mod_security) mod_security (id:1000001) triggered by 195.210.106.218 (US/United States/-/-/-/[AS137409 GSL Networks Pty LTD]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 17 18:14:23.573701 2026] [security2:error] [pid 2492:tid 2641] [client 195.210.106.218:31475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/error.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "102"] [id "1000001"] [msg "Bad file blocked: /wp-content/themes/news-portal/error.php"] [severity "CRITICAL"] [tag "security"] [hostname "setworldup.com"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "atOQz-VNEvdn6p9SHo7eFAAAAQc"]
show less
|
Port Scan
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|
|
🇬🇷
setupgr
|
|
(mod_security) mod_security (id:1000001) triggered by 195.210.106.218 (US/United States/-/-/-/[AS137409 GSL Networks Pty LTD]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 17 13:52:09.973639 20 ...
show more
(mod_security) mod_security (id:1000001) triggered by 195.210.106.218 (US/United States/-/-/-/[AS137409 GSL Networks Pty LTD]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 17 13:52:09.973639 2026] [security2:error] [pid 51861:tid 51900] [client 195.210.106.218:59105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/error.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "102"] [id "1000001"] [msg "Bad file blocked: /wp-content/themes/news-portal/error.php"] [severity "CRITICAL"] [tag "security"] [hostname "babis.photo"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "atNTWTqhN_dFKTpgrIspmwAAAIw"]
show less
|
Port Scan
|
|
🇨🇭
backslash
|
|
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
|
Bad Web Bot
|
