AbuseIPDB » 217.113.194.117

217.113.194.117 was found in our database!

This IP was reported 348 times. Confidence of Abuse is 0%: ?

0%

ISP	L'ile aux surfers s.a.r.l.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210743
Hostname(s)	c117.babbar.eu
Domain Name	lileauxsurfers.com
Country	France
City	Le Petit-Quevilly, Normandy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

---

Important Note: 217.113.194.117 is an IP address from within our benign crawler whitelist. We confidently believe it is not a bad bot. If you disagree, please provide us with compelling evidence.

Report 217.113.194.117

Whois 217.113.194.117

IP Abuse Reports for 217.113.194.117:

This IP address has been reported a total of 348 times from 28 distinct sources. 217.113.194.117 was first reported on November 10th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2023-12-12 10:07:41 (1 year ago)	Excessive crawling/scraping	Hacking Brute-Force
Sklurk	2023-12-12 06:04:16 (1 year ago)	Web App Attack	Web App Attack
TPI-Abuse	2023-12-09 11:58:11 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 217.113.194.117 (c117.babbar.eu): 1 in the last ... show more(mod_security) mod_security (id:210730) triggered by 217.113.194.117 (c117.babbar.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 09 06:58:07.163169 2023] [security2:error] [pid 25958] [client 217.113.194.117:51609] [client 217.113.194.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vangentholding.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vangentholding.com"] [uri "/tag/luxury-shisha-hire-north-london-packages-for-your-wedding-birthday-party-corporate-event-or-house-party/cyclesandseasons.com"] [unique_id "ZXRWTyAN4riWhHRiuSMN7AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Sklurk	2023-12-08 11:52:11 (1 year ago)	Web App Attack	Web App Attack
Sklurk	2023-12-07 11:33:28 (1 year ago)	Web App Attack	Web App Attack
Anonymous	2023-12-07 06:56:06 (1 year ago)	Excessive crawling/scraping	Hacking Brute-Force
Sklurk	2023-12-05 14:05:47 (1 year ago)	Web App Attack	Web App Attack
Sklurk	2023-12-04 13:24:15 (1 year ago)	Web App Attack	Web App Attack
Sklurk	2023-12-03 13:10:38 (1 year ago)	Web App Attack	Web App Attack
Sklurk	2023-12-02 12:09:49 (1 year ago)	Web App Attack	Web App Attack
Sklurk	2023-11-30 04:18:32 (1 year ago)	Web App Attack	Web App Attack
Sklurk	2023-11-29 02:34:35 (1 year ago)	Web App Attack	Web App Attack
TPI-Abuse	2023-11-29 01:11:59 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 217.113.194.117 (c117.babbar.eu): 1 in the last ... show more(mod_security) mod_security (id:210730) triggered by 217.113.194.117 (c117.babbar.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 28 20:11:55.931910 2023] [security2:error] [pid 17049] [client 217.113.194.117:47097] [client 217.113.194.117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.borzois.com|F|2"] [data ".batw.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.borzois.com"] [uri "/www.BATW.com"] [unique_id "ZWaP2wFCfyIt55a90sbk6gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Sklurk	2023-11-28 01:47:04 (1 year ago)	Web App Attack	Web App Attack
Sklurk	2023-11-27 01:38:22 (1 year ago)	Web App Attack	Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩