Total reports
5 from
4 distinct
reporters
First reported
October 23rd 2026
Most recent report
1 week ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
4
🇨🇭
Switzerland
1
Most common categories
Web App Attack
3
Bad Web Bot
3
Brute-Force
2
DDoS Attack
2
Exploited Host
1
Old reports
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
ALPHANET
2026-10-30 13:40:14
UTC ·
(1 week ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
🇺🇸
TPI-Abuse
2026-10-29 12:16:53
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 187.49.175.25 (187-49-175-25.inforbarra.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 08:16:45.752168 2026] [security2:error] [pid 16482:tid 16639] ...
show more
(mod_security) mod_security (id:210350) triggered by 187.49.175.25 (187-49-175-25.inforbarra.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 08:16:45.752168 2026] [security2:error] [pid 16482:tid 16639] [client 187.49.175.25:56307] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||certifiedprojectmanager.eu|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "certifiedprojectmanager.eu"] [uri "/"] [unique_id "auM5LSKMp4Lla0_r8v31gAAAAEk"], referer: https://aafm.us/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-10-25 10:02:25
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-24T23:45:41.000Z.
Web App Attack
🇺🇸
kosada.com
2026-10-24 10:13:46
UTC ·
(2 weeks ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=31&topics%5B2%5D=81&topics%5B3%5D=54&topics%5B4%5D=32 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=31&topics%5B2%5D=81&topics%5B3%5D=54&topics%5B4%5D=32 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-23 06:34:28
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 187.49.175.25 (187-49-175-25.inforbarra.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 02:34:20.082602 2026] [security2:error] [pid 12052:tid 12052] ...
show more
(mod_security) mod_security (id:210350) triggered by 187.49.175.25 (187-49-175-25.inforbarra.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 02:34:20.082602 2026] [security2:error] [pid 12052:tid 12052] [client 187.49.175.25:33823] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||uppermotradingco.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "uppermotradingco.com"] [uri "/"] [unique_id "atr_7DNj1_dSGRTo3IJUKAAAABE"], referer: https://shootingwithhobie.blogspot.com/2008/12/my-soon-to-be-ar-15.html
show less
Brute-Force
Bad Web Bot
Web App Attack
