AbuseIPDB » 217.113.194.117

217.113.194.117 was found in our database!

This IP was reported 338 times. Confidence of Abuse is 0%: ?

0%

ISP	L'ile aux surfers s.a.r.l.
Usage Type	Fixed Line ISP
ASN	AS210743
Hostname(s)	c117.babbar.eu
Domain Name	lileauxsurfers.com
Country	France
City	Le Petit-Quevilly, Normandy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

---

Important Note: 217.113.194.117 is an IP address from within our benign crawler whitelist. We confidently believe it is not a bad bot. If you disagree, please provide us with compelling evidence.

Report 217.113.194.117

Whois 217.113.194.117

IP Abuse Reports for 217.113.194.117:

This IP address has been reported a total of 338 times from 27 distinct sources. 217.113.194.117 was first reported on November 10th 2023, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2025-05-13 18:31:32 (4 hours ago)	(mod_security) mod_security (id:210730) triggered by 217.113.194.117 (c117.babbar.eu): 1 in the last ... show more(mod_security) mod_security (id:210730) triggered by 217.113.194.117 (c117.babbar.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 13 14:31:26.524113 2025] [security2:error] [pid 1867884:tid 1867884] [client 217.113.194.117:27971] [client 217.113.194.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||comics.flyingdodostudio.com|F|2"] [data ".tumblr.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "comics.flyingdodostudio.com"] [uri "/DelicateSouffle/inkyphalangies.tumblr.com"] [unique_id "aCOP_jGrDYH7vbtTKD3EoQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
debaba	2025-05-13 15:54:51 (7 hours ago)	3	DNS Poisoning
Kimmo Rieskaniemi	2025-05-08 17:48:43 (5 days ago)	CrowdSec triggered crowdsecurity/http-bad-user-agent	Bad Web Bot Web App Attack
TPI-Abuse	2025-05-04 15:21:59 (1 week ago)	(mod_security) mod_security (id:225080) triggered by 217.113.194.117 (c117.babbar.eu): 1 in the last ... show more(mod_security) mod_security (id:225080) triggered by 217.113.194.117 (c117.babbar.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 04 11:21:55.818516 2025] [security2:error] [pid 3392866:tid 3392866] [client 217.113.194.117:24591] [client 217.113.194.117] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)||becclesrestaurants.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "becclesrestaurants.com"] [uri "/wp-includes/js/plupload/"] [unique_id "aBeGE2UghMKz0o8rDCyxsgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-05-04 01:56:53 (1 week ago)	Excessive crawling/scraping	Hacking Brute-Force
ThreatBook.io	2025-04-28 01:25:28 (2 weeks ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/217.113.194.117 ... show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/217.113.194.117 2025-04-27 06:59:26 /docs/connectors.html 2025-04-27 06:46:15 /docs/ 2025-04-27 07:02:28 /docs/config/http2.html 2025-04-27 06:58:23 /docs/extras.html 2025-04-27 07:04:03 /docs/tribes/transport.html show less	Web App Attack
Skyrider	2025-04-26 18:38:48 (2 weeks ago)	217.113.194.117 - - [26/Apr/2025:20:27:30 +0200] "GET /5d35e05dfc67c483d3cd527e/p/5675 HTTP/2.0" 404 ... show more217.113.194.117 - - [26/Apr/2025:20:27:30 +0200] "GET /5d35e05dfc67c483d3cd527e/p/5675 HTTP/2.0" 404 123 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)" 217.113.194.117 - - [26/Apr/2025:20:27:45 +0200] "GET /5d35e05dfc67c483d3cd527e/p/4638 HTTP/2.0" 404 123 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)" 217.113.194.117 - - [26/Apr/2025:20:29:31 +0200] "GET /5d35e05dfc67c483d3cd527e/p/2997 HTTP/2.0" 403 5756 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)" 217.113.194.117 - - [26/Apr/2025:20:33:32 +0200] "GET /5d35e05dfc67c483d3cd527e/p/3069 HTTP/2.0" 403 5756 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)" 217.113.194.117 - - [26/Apr/2025:20:38:48 +0200] "GET /5d35e05dfc67c483d3cd527e/p/3075 HTTP/2.0" 403 5756 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)" show less	Bad Web Bot Web App Attack
tecnicorioja	2025-04-15 22:01:40 (4 weeks ago)	(Mod_security) [15/Apr/2025:04:50:12.348350	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-15 00:00:00 (4 weeks ago)	"Excessive,undesired traffic against library service"	Bad Web Bot
Anonymous	2025-04-14 03:18:51 (4 weeks ago)	Excessive crawling/scraping	Hacking Brute-Force
tecnicorioja	2025-04-09 22:02:07 (1 month ago)	(Mod_security) [09/Apr/2025:04:18:21.237652	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-04-04 02:28:05 (1 month ago)	(mod_security) mod_security (id:211120) triggered by 217.113.194.117 (c117.babbar.eu): 1 in the last ... show more(mod_security) mod_security (id:211120) triggered by 217.113.194.117 (c117.babbar.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 22:27:58.740075 2025] [security2:error] [pid 21618:tid 21618] [client 217.113.194.117:28943] [client 217.113.194.117] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||www.nancyscafeandcatering.com|F|2"] [data "Matched Data: http://exchange.prx.org/series/47775-professionelle-datenrettung-kosten-verfahren-und? found within REQUEST_FILENAME: /wp-content/themes/eatery/nav.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-content/themes/eatery/nav.php"] [unique_id "Z-9DrtFtn4HxRZVWXRGqvwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-03 02:59:55 (1 month ago)	Excessive crawling/scraping	Hacking Brute-Force
tecnicorioja	2025-04-02 22:01:27 (1 month ago)	(Mod_security) [02/Apr/2025:11:11:44.726697	Brute-Force Bad Web Bot Web App Attack
spyra.rocks	2025-03-31 00:53:10 (1 month ago)	NGINX	Bad Web Bot

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩