Total reports
9 from
6 distinct
reporters
First reported
March 11th 2026
Most recent report
4 days ago
Last 60 days
Top reporter locations
🇨🇦
Canada
2
🇮🇪
Ireland
2
🇩🇪
Germany
1
Most common categories
Web App Attack
6
Bad Web Bot
3
Brute-Force
2
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇦
vbios.com
2026-11-10 04:45:03
UTC ·
(4 days ago)
WEB_Brute-Force
Brute-Force
🇨🇦
DRI
2026-11-09 15:58:37
UTC ·
(5 days ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇦
DRI
2026-11-08 10:57:50
UTC ·
(6 days ago)
Web attack/Malicious activity detected
Web App Attack
🇵🇱
sefinek.net
2026-10-23 08:56:35
UTC ·
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 • Generated by: gith ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-20 07:53:47
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 195.63.19.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 03:53:39.872138 2026] [security2:error] [pid 26649:tid 26649] [client 195.63.19.47:14972] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 195.63.19.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 03:53:39.872138 2026] [security2:error] [pid 26649:tid 26649] [client 195.63.19.47:14972] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.directcch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.directcch.com"] [uri "/wp-login.php"] [unique_id "atceA0c92gtw82SUQ42wrQAAAAI"], referer: https://directcch.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
AutosOnShow
2026-10-14 06:54:07
UTC ·
(1 month ago)
blocked for webapp attack | path requested: /.env | seen at 2026-10-14 06:53:35.831 |
Web App Attack
🇮🇪
AutosOnShow
2026-10-13 16:48:04
UTC ·
(1 month ago)
blocked for webapp attack | path requested: /.env | seen at 2026-10-13 16:47:47.874 |
Web App Attack
🇩🇪
FD-IX
2026-09-29 23:24:42
UTC ·
(1 month ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-11 20:32:55
UTC ·
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 195.63.19.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 16:32:48.624235 2026] [security2:error] [pid 13199:tid 13199] [client 195.63.19.47:21824] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 195.63.19.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 16:32:48.624235 2026] [security2:error] [pid 13199:tid 13199] [client 195.63.19.47:21824] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "abHRcJlx7lAOxtld9oVSpwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
