This IP address has been reported a total of
9
times from
6 distinct
sources.
8.219.116.223 was first reported on
October 11th 2026 , and the most recent report was
6 hours ago United States of America
with 5
reports;
Czechia
with 1
report;
Denmark
with 1
report.
The most common categories in these recent reports were:
Web App Attack
8
times;
Brute-Force
6
times;
Bad Web Bot
5
times;
Port Scan
1
time;
SQL Injection
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
mnsf
2026-10-14 10:05:18
(6 hours ago)
Too many Status 40X (16)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 09:08:24
(7 hours ago)
(mod_security) mod_security (id:210730) triggered by 8.219.116.223 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 8.219.116.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 05:08:19.381045 2026] [security2:error] [pid 29623:tid 29643] [client 8.219.116.223:60066] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||almerirock.com|F|2"] [data ".cer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "almerirock.com"] [uri "/okok.cer"] [unique_id "as9Gg4VvIuCZXRoDPqVFAgAAARI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
regishoussin
2026-10-14 01:59:05
(14 hours ago)
Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of ...
show more
Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-14 01:59 UTC.
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 01:32:51
(15 hours ago)
(mod_security) mod_security (id:210730) triggered by 8.219.116.223 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 8.219.116.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 21:32:46.959864 2026] [security2:error] [pid 28925:tid 28925] [client 8.219.116.223:57020] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||albrittonmcclain.com|F|2"] [data ".cer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "albrittonmcclain.com"] [uri "/okok.cer"] [unique_id "as7bvvxNVkhewPRXLOwZegAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:32:07
(18 hours ago)
(mod_security) mod_security (id:210730) triggered by 8.219.116.223 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 8.219.116.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:32:01.243440 2026] [security2:error] [pid 22877:tid 22877] [client 8.219.116.223:36162] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aktkaro.com|F|2"] [data ".cer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aktkaro.com"] [uri "/okok.cer"] [unique_id "as6xYVEySFCRbG_R16WDDAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-13 02:05:13
(1 day ago)
Blocked: Reason='Vulnerability probing — PHP scan detected (402/60 min)'; Requests=402
Port Scan
🇮🇹
VHosting
2026-10-12 21:35:06
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-10-11 07:10:05
(3 days ago)
| [Dangerous/Singapore] Aggressive IP 8.219.116.223 (~30 hits). Type: DoS Defender- Web server 400 e ...
show more
| [Dangerous/Singapore] Aggressive IP 8.219.116.223 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-10-11 07:10:04
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 8.219.116.223 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 8.219.116.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 03:09:55.517789 2026] [security2:error] [pid 25686:tid 25702] [client 8.219.116.223:49980] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||accreditedlawschool.org|F|2"] [data ".cer"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "accreditedlawschool.org"] [uri "/okok.cer"] [unique_id "ass2Q9rolItqr8PWK67pNQAAAU4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
9
of 9 reports
