Total reports
4 from
4 distinct
reporters
First reported
September 10th 2026
Most recent report
1 day ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
3
🇦🇺
Australia
1
Most common categories
Web App Attack
2
Hacking
1
Bad Web Bot
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-11-07 16:51:02
UTC ·
(1 day ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
1gz
2026-10-24 08:45:12
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /script.js
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36
This re ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /script.js
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
kosada.com
2026-10-18 10:21:35
UTC ·
(3 weeks ago)
Repeated exploit attempts, for example: /hybridauth/window/Facebook?destination=community&destination_error=node/631%3F%23comment-form (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ...
show more
Repeated exploit attempts, for example: /hybridauth/window/Facebook?destination=community&destination_error=node/631%3F%23comment-form (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36")
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 20:23:00
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 43.166.214.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 16:22:55.946516 2026] [security2:error] [pid 4048151:tid 4048192] [client 43.166.214.243:42 ...
show more
(mod_security) mod_security (id:210730) triggered by 43.166.214.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 16:22:55.946516 2026] [security2:error] [pid 4048151:tid 4048192] [client 43.166.214.243:42429] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dubarch.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dubarch.com"] [uri "/ahmedalbanna.com"] [unique_id "aqMRnyFaTr65PBY9GGrQkwAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
