AbuseIPDB » 104.254.92.20

104.254.92.20 was found in our database!

This IP was reported 192 times. Confidence of Abuse is 52%: ?

52%

ISP	Amanah Tech Inc.
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	invest.erejoicing.com
Domain Name	amanah.com
Country	Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 104.254.92.20

Whois 104.254.92.20

IP Abuse Reports for 104.254.92.20:

This IP address has been reported a total of 192 times from 54 distinct sources. 104.254.92.20 was first reported on December 10th 2020, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2024-09-14 09:28:33 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 104.254.92.20 (invest.erejoicing.com): 1 in the ... show more(mod_security) mod_security (id:210730) triggered by 104.254.92.20 (invest.erejoicing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 14 05:28:29.187262 2024] [security2:error] [pid 18625:tid 18625] [client 104.254.92.20:7099] [client 104.254.92.20] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cnprcertificationreviews.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cnprcertificationreviews.org"] [uri "/instagram.com"] [unique_id "ZuVXPcvluPTApiJY_feeKAAAAAA"], referer: https://cnprcertificationreviews.org/ show less	Brute-Force Bad Web Bot Web App Attack
HeliJP	2024-09-13 15:15:08 (1 week ago)	2024-09-13T11:14:47Z - Recognized attacks\bad behavior from IP address 104.254.92.20 on port 443\80 ... show more2024-09-13T11:14:47Z - Recognized attacks\bad behavior from IP address 104.254.92.20 on port 443\80 (17 daily hits): SQL Injection Attack: SQL Tautology Detected, SQL Injection Attack: Common Injection Testing Detected, SQL Injection Attack, Missing User Agent Header, SQL Injection Attack Detected via libinjection show less	Hacking SQL Injection
HeliJP	2024-09-13 14:15:33 (1 week ago)	2024-09-13T11:14:47Z - Recognized attacks\bad behavior from IP address 104.254.92.20 on port 443\80 ... show more2024-09-13T11:14:47Z - Recognized attacks\bad behavior from IP address 104.254.92.20 on port 443\80 (17 daily hits): SQL Injection Attack: Common Injection Testing Detected, SQL Injection Attack: SQL Tautology Detected, SQL Injection Attack, SQL Injection Attack Detected via libinjection, Missing User Agent Header show less	Hacking SQL Injection
HeliJP	2024-09-13 13:15:36 (1 week ago)	2024-09-13T11:14:47Z - Recognized attacks\bad behavior from IP address 104.254.92.20 on port 443\80 ... show more2024-09-13T11:14:47Z - Recognized attacks\bad behavior from IP address 104.254.92.20 on port 443\80 (17 daily hits): SQL Injection Attack, SQL Injection Attack: SQL Tautology Detected, SQL Injection Attack: Common Injection Testing Detected, SQL Injection Attack Detected via libinjection, Missing User Agent Header show less	Hacking SQL Injection
Anonymous	2024-09-13 12:15:14 (1 week ago)	SQL Injection	SQL Injection
Anonymous	2024-09-13 12:00:03 (1 week ago)	nvOpzp; AND 1=1 OR (<'">iKO)),	SQL Injection Web App Attack
HeliJP	2024-09-13 11:15:27 (1 week ago)	2024-09-13T11:14:47Z - Recognized attacks\bad behavior from IP address 104.254.92.20 on port 443\80 ... show more2024-09-13T11:14:47Z - Recognized attacks\bad behavior from IP address 104.254.92.20 on port 443\80 (17 daily hits): SQL Injection Attack: SQL Tautology Detected, SQL Injection Attack Detected via libinjection, SQL Injection Attack, Missing User Agent Header, SQL Injection Attack: Common Injection Testing Detected show less	Hacking SQL Injection
Reinhard	2024-09-13 10:17:00 (1 week ago)	Msg from utility: IP-Addr: 104.254.92.20, Fehler: www.luszcz.de/util/showpic2.php?parm=%27nvOpzp;%20 ... show moreMsg from utility: IP-Addr: 104.254.92.20, Fehler: www.luszcz.de/util/showpic2.php?parm=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),. Body: Fri, 13 Sep 2024 12:17:10 +0200, IP-Addr:104.254.92.20, Host: invest.erejoicing.com, Info: SQL injection, parameter error show less	Hacking SQL Injection Web App Attack
Sklurk	2024-09-13 10:06:04 (1 week ago)	Web App Attack	Web App Attack
pa4080	2024-09-13 10:02:54 (1 week ago)	Detected by ModSecurity. Request URI: /index.php?title=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiK ... show moreDetected by ModSecurity. Request URI: /index.php?title=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&page=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), show less	Hacking Web App Attack
TheMadBeaker	2024-09-13 09:58:50 (1 week ago)	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	Hacking SQL Injection
Anonymous	2024-08-31 04:28:28 (2 weeks ago)		Web Spam
nowyouknow	2024-08-22 22:55:00 (4 weeks ago)	(From [email protected]) Hello Looking to improve your posture and live ... show more(From [email protected]) Hello Looking to improve your posture and live a healthier life? Our Medico Postura™ Body Posture Corrector is here to help! Experience instant posture improvement with Medico Postura™. This easy-to-use device can be worn anywhere, anytime – at home, work, or even while you sleep. Made from lightweight, breathable fabric, it ensures comfort all day long. Grab it today at a fantastic 60% OFF: https://medicopostura.com Plus, enjoy FREE shipping for today only! Don't miss out on this amazing deal. Get yours now and start transforming your posture! Have a great time, Miriam show less	Phishing Web Spam
oncord	2024-08-10 22:37:23 (1 month ago)	Form spam	Web Spam
RLDD	2024-08-08 07:24:05 (1 month ago)	WP login attempts -dyn	Brute-Force