Total reports
5 from
4 distinct
reporters
First reported
October 7th 2022
Most recent report
4 days ago
Last 60 days
Top reporter locations
๐จ๐ญ
Switzerland
1
๐บ๐ธ
United States of America
1
Most common categories
Bad Web Bot
1
Exploited Host
1
DDoS Attack
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐จ๐ญ
ALPHANET
2026-11-06 15:55:20
UTC ยท
(4 days ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-26 10:09:56
UTC ยท
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2025-04-27 21:36:56
UTC ยท
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 88.130.149.44 (i5882952C.versanet.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 17:36:53.118252 2025] [security2:error] [pid 16439:tid 16439] [client 88 ...
show more
(mod_security) mod_security (id:210730) triggered by 88.130.149.44 (i5882952C.versanet.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 17:36:53.118252 2025] [security2:error] [pid 16439:tid 16439] [client 88.130.149.44:18103] [client 88.130.149.44] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy|||F|2"] [data ".txt.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "web15.dnchosting.com"] [uri "/nice ports,/Trinity.txt.bak"] [unique_id "aA6jdUuZvgBBqrCDT5vavgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-04-27 19:29:21
UTC ยท
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 88.130.149.44 (i5882952C.versanet.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 15:29:16.499631 2025] [security2:error] [pid 5775:tid 5775] [client 88.1 ...
show more
(mod_security) mod_security (id:210730) triggered by 88.130.149.44 (i5882952C.versanet.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 15:29:16.499631 2025] [security2:error] [pid 5775:tid 5775] [client 88.130.149.44:18417] [client 88.130.149.44] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy|||F|2"] [data ".txt.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "web27.dnchosting.com"] [uri "/nice ports,/Trinity.txt.bak"] [unique_id "aA6FjHTGBpDDzDE5ynO-egAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐น
rnl
2022-10-07 04:14:36
UTC ยท
(4 years ago)
postfix
Email Spam
Brute-Force