Total reports
4 from
3 distinct
reporters
First reported
August 16th 2026
Most recent report
33 minutes ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
1
Most common categories
Brute-Force
1
Web App Attack
1
Bad Web Bot
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-11-14 20:54:00
UTC ·
(33 minutes ago)
(mod_security) mod_security (id:210730) triggered by 68.67.112.212 (youbot-68-67-112-212.search.you.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 15:53:54.603720 2026] [security2:error] [pid 27463:tid 274 ...
show more
(mod_security) mod_security (id:210730) triggered by 68.67.112.212 (youbot-68-67-112-212.search.you.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 15:53:54.603720 2026] [security2:error] [pid 27463:tid 27475] [client 68.67.112.212:55901] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.aafm.us|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.aafm.us"] [uri "/http/charteredfinancialmanager.com"] [unique_id "avjKYuLvyHzmDqWzLtvAUQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 19:44:16
UTC ·
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 68.67.112.212 (youbot-68-67-112-212.search.you.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 15:44:13.486092 2026] [security2:error] [pid 21775:tid 217 ...
show more
(mod_security) mod_security (id:210730) triggered by 68.67.112.212 (youbot-68-67-112-212.search.you.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 15:44:13.486092 2026] [security2:error] [pid 21775:tid 21775] [client 68.67.112.212:38750] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.greenroomonline.org|F|2"] [data ".lnk"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.greenroomonline.org"] [uri "/windows/start menu/microsoft word.lnk"] [unique_id "aqb9DSrBGDdIiSWOgzsSJwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2026-08-27 20:57:38
UTC ·
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: / | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/140.0.7339.16 Safari/537.36 • Generated by: github.com ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: / | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/140.0.7339.16 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇬🇧
SilverZippo
2026-08-16 01:59:34
UTC ·
(2 months ago)
Web App Attack
Web App Attack
