AbuseIPDB » 197.211.52.94

197.211.52.94 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 1%: ?

ISP	Enterprise Benin
Usage Type	Fixed Line ISP
Domain Name	gloworld.com
Country	Norfolk Island
City	Kingston, Norfolk Island

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 197.211.52.94

Whois 197.211.52.94

IP Abuse Reports for 197.211.52.94:

This IP address has been reported a total of 5 times from 4 distinct sources. 197.211.52.94 was first reported on November 10th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
sthoyer.de	2024-09-09 17:10:02 (1 month ago)	Sep 9 19:10:00 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:23:9 ... show moreSep 9 19:10:00 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:28:99:3a:4d:23:91:08:00 SRC=197.211.52.94 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=20968 DF PROTO=TCP SPT=38182 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
TPI-Abuse	2024-02-15 14:52:58 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 197.211.52.94 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210730) triggered by 197.211.52.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 15 09:52:52.394833 2024] [security2:error] [pid 3300] [client 197.211.52.94:39764] [client 197.211.52.94] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.vindiesel.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vindiesel.com"] [uri "/vindiesel.com"] [unique_id "Zc4lRHneJFbOffpMrlVwEQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
IP Analyzer	2023-12-10 14:30:23 (10 months ago)	Unauthorized connection attempt from IP address 197.211.52.94 on Port 445(SMB)	Port Scan
Smel	2023-12-07 12:19:50 (10 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
Smel	2023-11-10 09:05:13 (11 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force