🇩🇪
Skyrider
2026-04-17 18:13:46
(1 month ago)
crowdsecurity/http-open-proxy
Hacking
🇺🇸
TPI-Abuse
2026-04-16 09:38:19
(1 month ago)
(mod_security) mod_security (id:217210) triggered by 156.246.90.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:217210) triggered by 156.246.90.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 05:38:15.987989 2026] [security2:error] [pid 2858278:tid 2858278] [client 156.246.90.81:46200] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||www.cameronwv.com:443|F|4"] [data "CONNECT www.cameronwv.com:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cameronwv.com"] [uri "/"] [unique_id "aeCuB9rjvY8ezXVyYvQ2LAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-15 16:03:11
(1 month ago)
(mod_security) mod_security (id:217210) triggered by 156.246.90.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:217210) triggered by 156.246.90.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 12:03:04.537939 2026] [security2:error] [pid 3964692:tid 3964692] [client 156.246.90.81:51118] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||haverhillhouse.com:443|F|4"] [data "CONNECT haverhillhouse.com:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "haverhillhouse.com"] [uri "/"] [unique_id "ad-2uHCHWYXOHQ4ORQKMMwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
rsa
2026-04-15 16:00:00
(1 month ago)
CONNECT www.xxxxxxxx.com:443 HTTP/1.1
DDoS Attack
Brute-Force
Exploited Host
Web App Attack
Hacking
🇳🇱
BlueWire Hosting
2026-04-02 12:03:14
(2 months ago)
Probing websites SQL vulnerabilities
Web App Attack
🇮🇹
IRT@Unisi
2026-03-28 03:10:14
(2 months ago)
anomaly:tcp_dst_session,1001>threshold1000,repeats11761timessincelastlog
DDoS Attack
🇫🇷
Murazaki
2026-03-25 23:47:02
(2 months ago)
lemmy.balamb.fr 156.246.90.81 - - [25/Mar/2026:08:45:37 +0100] "CONNECT lemmy.balamb.fr:443 HTTP/1.1 ...
show more
lemmy.balamb.fr 156.246.90.81 - - [25/Mar/2026:08:45:37 +0100] "CONNECT lemmy.balamb.fr:443 HTTP/1.1" 405 150 "-" "-" "-"
...
show less
Hacking
🇫🇷
Murazaki
2026-03-24 23:14:43
(2 months ago)
lemmy.balamb.fr 156.246.90.81 - - [24/Mar/2026:13:28:36 +0100] "CONNECT lemmy.balamb.fr:443 HTTP/1.1 ...
show more
lemmy.balamb.fr 156.246.90.81 - - [24/Mar/2026:13:28:36 +0100] "CONNECT lemmy.balamb.fr:443 HTTP/1.1" 405 150 "-" "-" "-"
...
show less
Hacking
🇺🇸
octageeks.com
2026-03-24 04:08:25
(2 months ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
🇫🇷
Murazaki
2026-03-23 23:47:38
(2 months ago)
lemmy.balamb.fr 156.246.90.81 - - [23/Mar/2026:03:39:32 +0100] "CONNECT lemmy.balamb.fr:443 HTTP/1.1 ...
show more
lemmy.balamb.fr 156.246.90.81 - - [23/Mar/2026:03:39:32 +0100] "CONNECT lemmy.balamb.fr:443 HTTP/1.1" 405 150 "-" "-" "-"
...
show less
Hacking
🇫🇷
Murazaki
2026-03-22 23:05:09
(2 months ago)
lemmy.balamb.fr 156.246.90.81 - - [22/Mar/2026:13:44:10 +0100] "CONNECT lemmy.balamb.fr:443 HTTP/1.1 ...
show more
lemmy.balamb.fr 156.246.90.81 - - [22/Mar/2026:13:44:10 +0100] "CONNECT lemmy.balamb.fr:443 HTTP/1.1" 405 150 "-" "-" "-"
...
show less
Hacking
🇸🇪
KIDOS
2026-03-19 14:34:02
(2 months ago)
malicious activity
Web App Attack
🇺🇸
xmission.com
2026-03-04 10:45:35
(3 months ago)
Blocked by UFW (TCP on 35898)
Source port: 80
TTL: 56
Packet length: 52
TOS: 0x00
This report (for ...
show more
Blocked by UFW (TCP on 35898)
Source port: 80
TTL: 56
Packet length: 52
TOS: 0x00
This report (for 156.246.90.81) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
TPI-Abuse
2026-02-22 03:53:36
(3 months ago)
(mod_security) mod_security (id:217210) triggered by 156.246.90.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:217210) triggered by 156.246.90.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 22:53:33.014000 2026] [security2:error] [pid 11762:tid 11762] [client 156.246.90.81:40510] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||www.yacht-register-holland.com:443|F|4"] [data "CONNECT www.yacht-register-holland.com:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.yacht-register-holland.com"] [uri "/"] [unique_id "aZp9vQgflf7swy0I-TgOqgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2026-01-24 04:47:28
(4 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: / (Rule ID: 911100) - Method is not allowed by policy
show less
Web App Attack