🇺🇸
TPI-Abuse
2026-11-12 18:50:53
UTC ·
(1 day ago)
(mod_security) mod_security (id:217210) triggered by 80.83.30.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:50:47.221098 2026] [security2:error] [pid 22631:tid 22631] [client 80.83.30.121:38832] Mod ...
show more
(mod_security) mod_security (id:217210) triggered by 80.83.30.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:50:47.221098 2026] [security2:error] [pid 22631:tid 22631] [client 80.83.30.121:38832] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||www.macryder.com|F|4"] [data "GET http://www.macryder.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.macryder.com"] [uri "/"] [unique_id "avYKh6aWkCm3_2VcOOjoCAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 13:07:43
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 80.83.30.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 09:07:38.851546 2026] [security2:error] [pid 9651:tid 9651] [client 80.83.30.121:45400] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 80.83.30.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 09:07:38.851546 2026] [security2:error] [pid 9651:tid 9651] [client 80.83.30.121:45400] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||photosatthebeach.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "photosatthebeach.com"] [uri "/"] [unique_id "asOhGgJGcF5_r_r00byy3gAAAAw"], referer: https://backlinkgenerator.site/dir/professional-link-building-161906
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-24 00:47:37
UTC ·
(1 month ago)
This address is taking part in a large-scale, distributed L7 DDoS against an online shop: automated requests to the shop's search, filter and sort pages — the most expensive pages to serve — sent with no referer and with no page asset loaded, so no b ...
show more
This address is taking part in a large-scale, distributed L7 DDoS against an online shop: automated requests to the shop's search, filter and sort pages — the most expensive pages to serve — sent with no referer and with no page asset loaded, so no browser is behind them. Each participating address sends only one or two such requests, but we count them by the million: a botnet, compromised devices, or abused proxies. The address is blocked. An investigation into what exactly sends these requests from your network (malware, an open proxy, a rented device) would help stop the attack at its source. | path: /5-vtt-electrique | query: q=Famille-Aspect-Genius-HYBE/Capacit%C3%A9+batterie-800+Wh | 2026-09-24 00:47 UTC
show less
DDoS Attack
Web App Attack
🇺🇸
鬼影233
2026-09-21 18:47:17
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-08-30 01:05:13
UTC ·
(2 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸
kosada.com
2026-08-09 13:58:35
UTC ·
(3 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇩🇪
Admins@FBN
2026-08-08 14:06:38
UTC ·
(3 months ago)
FW-PortScan: Traffic Blocked srcport=13563 dstport=23
Port Scan
2026-08-06 01:27:02
UTC ·
(3 months ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
🇺🇸
kosada.com
2026-07-29 21:35:50
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-06-29 12:37:49
UTC ·
(4 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
xmission.com
2026-05-12 02:42:16
UTC ·
(6 months ago)
Blocked by UFW (TCP on 23)
Source port: 29457
TTL: 49
Packet length: 60
TOS: 0x00
This report (for 80.83.30.121) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Hacking
Brute-Force
2026-05-11 22:34:41
UTC ·
(6 months ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
2026-04-27 02:50:49
UTC ·
(6 months ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
🇳🇱
maxxsense
2026-03-29 13:36:03
UTC ·
(7 months ago)
80.83.30.121 (LB/Lebanon/-), 12 distributed imapd attacks on account [redacted]
Brute-Force
🇺🇸
TPI-Abuse
2026-03-07 23:25:29
UTC ·
(8 months ago)
(mod_security) mod_security (id:218580) triggered by 80.83.30.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 07 18:25:25.442386 2026] [security2:error] [pid 17013:tid 17013] [client 80.83.30.121:38172] Mod ...
show more
(mod_security) mod_security (id:218580) triggered by 80.83.30.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 07 18:25:25.442386 2026] [security2:error] [pid 17013:tid 17013] [client 80.83.30.121:38172] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\*[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:id. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.||www.genesis-castle.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.genesis-castle.com"] [uri "/gallery/action.php"] [unique_id "aayz5UI1jTClVTNgpuYlnQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
