This IP address has been reported a total of
11
times from
11 distinct
sources.
39.194.2.151 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Repeated exploit attempts on WordPress entry points (prohibited REST API request; prohibited JSON re ...
show moreRepeated exploit attempts on WordPress entry points (prohibited REST API request; prohibited JSON request)
show less
[SatJul1823:54:01.3709052026][security2:error][pid3340045:tid3340056][client39.194.2.151:0]ModSecuri ...
show more[SatJul1823:54:01.3709052026][security2:error][pid3340045:tid3340056][client39.194.2.151:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"restaurantgandria.ch\"][uri\"/\"][unique_id\"alv1-SLmoHap4ablQ2xdsAAAAAA\"]
show less
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 39.194.2.151 (ID/Indonesia/-): 1 in ...
show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 39.194.2.151 (ID/Indonesia/-): 1 in the last 3600 secs
show less
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
GENERAL: parametres: [url:helix3=] UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7) AppleWebKit/605.1 ...
show moreGENERAL: parametres: [url:helix3=] UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7) AppleWebKit/605.1.15 Version/18.1 Safari/605.1.15 URL:/index.php?option=com_ajax&plugin=helix3&format=json
show less
[Fri Nov 21 01:32:22.467368 2025] [security2:error] [pid 203331:tid 140513238775488] [client 39.194. ...
show more[Fri Nov 21 01:32:22.467368 2025] [security2:error] [pid 203331:tid 140513238775488] [client 39.194.2.151:16222] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "199"] [id "40236"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=476&id=684%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-1-7-september-2015&start=60 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=476&id=684%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-1-7-september-2015&start=60 Req..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aR9etumgN41C6dq
...
show less
Hacking
Web App Attack
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩