AbuseIPDB » 217.113.194.99

217.113.194.99 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 0%: ?

ISP	L'ile aux surfers s.a.r.l.
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	c099.babbar.eu
Domain Name	cineteck-fr.com
Country	France
City	Graulhet, Occitanie

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Important Note: 217.113.194.99 is an IP address from within our benign crawler whitelist. We confidently believe it is not a bad bot. If you disagree, please provide us with compelling evidence.

Report 217.113.194.99

Whois 217.113.194.99

IP Abuse Reports for 217.113.194.99:

This IP address has been reported a total of 25 times from 5 distinct sources. 217.113.194.99 was first reported on November 11th 2023, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp	Comment	Categories
Sklurk	2023-12-09 09:26:55 (2 hours ago)	Web App Attack	Web App Attack
Sklurk	2023-12-08 09:25:13 (1 day ago)	Web App Attack	Web App Attack
Sklurk	2023-12-07 09:08:56 (2 days ago)	Web App Attack	Web App Attack
Anonymous	2023-12-07 06:11:03 (2 days ago)	Excessive crawling/scraping	Hacking Brute-Force
Sklurk	2023-12-05 14:49:29 (3 days ago)	Web App Attack	Web App Attack
Sklurk	2023-12-04 12:44:28 (4 days ago)	Web App Attack	Web App Attack
Sklurk	2023-12-03 11:05:50 (6 days ago)	Web App Attack	Web App Attack
Sklurk	2023-12-02 10:40:02 (1 week ago)	Web App Attack	Web App Attack
Sklurk	2023-11-30 04:04:24 (1 week ago)	Web App Attack	Web App Attack
TPI-Abuse	2023-11-29 22:13:55 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 217.113.194.99 (c099.babbar.eu): 1 in the last ... show more(mod_security) mod_security (id:210730) triggered by 217.113.194.99 (c099.babbar.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 29 17:13:50.088034 2023] [security2:error] [pid 1398] [client 217.113.194.99:20223] [client 217.113.194.99] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|carolemoore.com\|F\|2"] [data ".stephenzmetaldesigns.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "carolemoore.com"] [uri "/http;/www.stephenzmetaldesigns.com"] [unique_id "ZWe3nj82oKuUvoanqPJX5QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2023-11-29 07:26:32 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 217.113.194.99 (c099.babbar.eu): 1 in the last ... show more(mod_security) mod_security (id:210730) triggered by 217.113.194.99 (c099.babbar.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 29 02:26:25.852880 2023] [security2:error] [pid 22782] [client 217.113.194.99:14955] [client 217.113.194.99] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Kendall 4733/Thumbs.db"] [unique_id "ZWbnoe-cGLtrR_JEGvqVHAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Sklurk	2023-11-29 03:22:07 (1 week ago)	Web App Attack	Web App Attack
Sklurk	2023-11-28 01:59:29 (1 week ago)	Web App Attack	Web App Attack
Sklurk	2023-11-27 01:26:47 (1 week ago)	Web App Attack	Web App Attack
TPI-Abuse	2023-11-22 20:07:26 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 217.113.194.99 (c099.babbar.eu): 1 in the last ... show more(mod_security) mod_security (id:210730) triggered by 217.113.194.99 (c099.babbar.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 22 15:07:23.287767 2023] [security2:error] [pid 609627] [client 217.113.194.99:23183] [client 217.113.194.99] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|crestonecolorado.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "crestonecolorado.com"] [uri "/fifthdimensionalliving.com"] [unique_id "ZV5fe-ttgBtgy0qxfmbOtAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack