Total reports
8 from
7 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
🇺🇸
ledii
|
|
Blocked by os-abuseipdb; 369 hits, proto=udp, ports=31818,61464
|
Port Scan
|
|
🇺🇸
MPL
|
|
tcp/7680 (15 or more attempts)
|
Port Scan
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 64.49.91.66 (64-49-91-66.ny.ny.everestbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 02 19:43:05.692081 2024] [security2:error] [pid 17960:tid 47 ...
show more
(mod_security) mod_security (id:210730) triggered by 64.49.91.66 (64-49-91-66.ny.ny.everestbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 02 19:43:05.692081 2024] [security2:error] [pid 17960:tid 47621955114752] [client 64.49.91.66:49840] [client 64.49.91.66] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||woadwellness.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "woadwellness.com"] [uri "/mailto:[email protected]"] [unique_id "ZZStmTaYsyQJGkdgQ0D-7QAAAUs"], referer: http://woadwellness.com/contactus.html
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
ezsystems.com
|
|
|
Web Spam
|
|
🇦🇺
MAGIC
|
|
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
|
DDoS Attack
Bad Web Bot
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 64.49.91.66 (64-49-91-66.ny.ny.everestbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 11 11:02:36.219474 2023] [security2:error] [pid 23539] [clie ...
show more
(mod_security) mod_security (id:210730) triggered by 64.49.91.66 (64-49-91-66.ny.ny.everestbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 11 11:02:36.219474 2023] [security2:error] [pid 23539] [client 64.49.91.66:2522] [client 64.49.91.66] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||chrischambers.us|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "chrischambers.us"] [uri "/html/mailto:[email protected]"] [unique_id "ZXcynMPH9KTJ5Vqeol7YqgAAAAE"], referer: http://chrischambers.us/html/contact_us.html
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇷🇸
Smel
|
|
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
|
Email Spam
Hacking
Brute-Force
|
|
🇨🇦
Peter Chargen
|
|
PHP email form abuse/SPAM attempt
|
Email Spam
|
