JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.237.230.46

152.237.230.46 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 30%: ?

30%

ISP	RAYIP NETWORKS - FZCO
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60982
Domain Name	rayip.com
Country	🇷🇴 Romania
City	Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.237.230.46

Whois 152.237.230.46

IP Abuse Reports for 152.237.230.46:

This IP address has been reported a total of 10 times from 4 distinct sources. 152.237.230.46 was first reported on October 14th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-16 11:19:39 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:19:35.918288 2026] [security2:error] [pid 28296:tid 28296] [client 152.237.230.46:35826] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tgcindustrial.com"] [uri "/.git/info/refs"] [unique_id "atIIR3j3D_bmzHn2wkzjvQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-10-16 07:22:20 (1 day ago)	Try to access /.git/info/refs?service=git-upload-pack	Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 22:03:43 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 18:03:39.002555 2026] [security2:error] [pid 9062:tid 9062] [client 152.237.230.46:50942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "p-co.com"] [uri "/.git/info/refs"] [unique_id "atFNuwFmdASelzdZug6HRgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 17:33:17 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 13:33:13.307403 2026] [security2:error] [pid 20847:tid 20847] [client 152.237.230.46:58858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.eduempowermentsolutions.com"] [uri "/.git/info/refs"] [unique_id "atEOWR-bgdzKNRL1S5zv9wAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-10-15 07:07:43 (2 days ago)	csagent: score 20.0: secrets grab x2; 2 domain(s) in 0s	Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 05:22:43 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 01:22:38.473902 2026] [security2:error] [pid 12556:tid 12556] [client 152.237.230.46:35282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blockadefoundationrepair.com"] [uri "/.git/info/refs"] [unique_id "atBjHp5e9sGHokgClWgm9wAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 01:29:23 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 152.237.230.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:949110) triggered by 152.237.230.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 21:29:18.640434 2026] [security2:error] [pid 18721:tid 18721] [client 152.237.230.46:37046] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.spmbookings.com"] [uri "/.git/info/refs"] [unique_id "atAsbqjKAs0-HBep2ZifngAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 17:05:17 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 13:05:10.883493 2026] [security2:error] [pid 13567:tid 13581] [client 152.237.230.46:37982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oldestgunclub.com"] [uri "/.git/info/refs"] [unique_id "as-2Ruq6EcGXcBE2pO1g_AAAAEs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-14 14:21:23 (3 days ago)	Secret file probe \| method: GET \| path: /.git/info/refs \| ua: git/2.53.0	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 09:10:17 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 05:10:14.726427 2026] [security2:error] [pid 25968:tid 25968] [client 152.237.230.46:42018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arlan-associates.com"] [uri "/.git/info/refs"] [unique_id "as9G9sd_wgx2WaH9pM7jVgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.198.240.162

🇺🇸 185.89.110.158

🇧🇩 103.101.250.217

🇳🇱 94.154.43.117

🇳🇱 89.248.172.12

🇱🇹 88.119.66.23

🇺🇸 43.130.116.87

🇬🇧 35.203.211.62

🇯🇵 8.211.191.56

🇹🇼 221.120.7.187

🇩🇪 172.70.240.8

🇹🇭 103.132.1.231

🇺🇸 96.89.227.150

🇯🇵 49.212.152.153

🇫🇷 45.95.174.62

🇰🇷 222.118.59.16

🇧🇩 160.236.58.208

🇨🇳 120.41.126.251

🇰🇷 112.151.168.124

🇨🇳 111.48.160.201