JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

195.234.109.174

Activity Trending Down

Abuse Confidence Score

13% Caution

142 reports

19 reporters · latest 1 week ago

ISP: Ministry of Automattic Limited
Usage Type: Data Center/Web Hosting/Transit
ASN: AS2635
Domain Name: automattic.com
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

142 from 19 distinct reporters

First reported

July 19th 2021

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇨🇭 Switzerland 4 🇺🇸 United States of America 2

Most common categories Web App Attack 6 Bad Web Bot 6 Brute-Force 2

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-04 07:39:48 UTC · (1 week ago)	(mod_security) mod_security (id:210381) triggered by 195.234.109.174 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:39:40.989601 2026] [security2:error] [pid 16964:tid 16964] [client 195.234.109.174:3885 ... show more (mod_security) mod_security (id:210381) triggered by 195.234.109.174 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:39:40.989601 2026] [security2:error] [pid 16964:tid 16964] [client 195.234.109.174:38858] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.deckmasterscompany.com\|F\|4"] [data "REQUEST_URI=/Sample pix/images/Tile Pattern 2%_20Color Sponge_JPG.jpg"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.deckmasterscompany.com"] [uri "/Sample pix/images/Tile Pattern 2%_20Color Sponge_JPG.jpg"] [unique_id "aurhPBYo9fe0j3lHnEMIeAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 rt	2026-11-01 23:07:39 UTC · (1 week ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇨🇭 rt	2026-10-30 07:51:41 UTC · (1 week ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇨🇭 rt	2026-10-29 07:48:47 UTC · (2 weeks ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇨🇭 rt	2026-10-15 07:11:17 UTC · (4 weeks ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 22:19:58 UTC · (1 month ago)	(mod_security) mod_security (id:210381) triggered by 195.234.109.174 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 18:19:53.939984 2026] [security2:error] [pid 3998:tid 3998] [client 195.234.109.174:62564] ... show more (mod_security) mod_security (id:210381) triggered by 195.234.109.174 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 18:19:53.939984 2026] [security2:error] [pid 3998:tid 3998] [client 195.234.109.174:62564] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.deckmasterscompany.com\|F\|4"] [data "REQUEST_URI=/Sample pix/images/Tile Pattern 2%_20Color Sponge_JPG.jpg"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.deckmasterscompany.com"] [uri "/Sample pix/images/Tile Pattern 2%_20Color Sponge_JPG.jpg"] [unique_id "arroCdNIvl-ojl99ir3NBQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 rt	2026-07-30 08:13:21 UTC · (3 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇨🇭 rt	2026-07-27 07:09:10 UTC · (3 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇨🇭 rt	2026-07-06 01:39:42 UTC · (4 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇸🇬 serverutama	2026-05-27 17:01:20 UTC · (5 months ago)	Nginx scanner:	Web App Attack Bad Web Bot
🇸🇬 serverutama	2026-05-27 16:32:49 UTC · (5 months ago)	Nginx scanner: 195.234.109.174 - - [27/May/2026:12:59:04 +0700] "GET /wp-content/uploads/2016/01/galihrezah26.jpg HTTP/1.1" 404 182 "-" "Photon/1.0" "-"	Web App Attack Bad Web Bot
🇨🇭 rt	2026-05-24 04:48:53 UTC · (5 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-05-22 19:03:13 UTC · (5 months ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇸🇬 securejdprop	2026-05-14 21:26:11 UTC · (5 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
🇺🇸 ipblock.com	2026-05-09 10:39:00 UTC · (6 months ago)	IPBlock protected site ID [4055-d][s=07]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 142 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 134.209.72.65

🇺🇸 66.132.172.198

🇰🇷 58.229.180.110

🇺🇸 205.210.31.22

🇹🇼 198.235.24.107

🇳🇱 195.178.110.30

🇧🇷 187.120.105.112

🇨🇴 181.52.113.102

🇦🇷 179.60.26.107

🇷🇺 146.158.115.52

🇫🇷 143.244.57.84

🇺🇸 129.121.138.48

🇺🇸 98.148.153.162

🇺🇸 77.83.199.240

🇩🇪 43.228.157.216

🇩🇪 37.114.50.18

🇸🇪 31.208.252.54

🇩🇪 2.58.80.191

🇪🇨 181.188.237.213

🇺🇸 142.4.5.181