Total reports
4 from
4 distinct
reporters
First reported
August 28th 2026
Most recent report
1 week ago
Last 60 days
Top reporter locations
🇩🇪
Germany
2
🇫🇷
France
1
Most common categories
Bad Web Bot
2
Web App Attack
2
Brute-Force
1
Old reports
The most recent abuse report for this IP address is from
1 week ago .
It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
AetherFox
2026-10-29 06:57:30
UTC ·
(1 week ago)
AetherFox VoidGuard detected: [Thu Oct 29 06:57:17.125199 2026] [authz_core:error] [pid 1027905:tid 1027949] [client 90.126.56.67:48712] AH01630: client denied by server configuration: proxy:https://[MASKED]/kb/index.php
[Thu Oct 29 06:57:20.913436 2 ...
show more
AetherFox VoidGuard detected: [Thu Oct 29 06:57:17.125199 2026] [authz_core:error] [pid 1027905:tid 1027949] [client 90.126.56.67:48712] AH01630: client denied by server configuration: proxy:https://[MASKED]/kb/index.php
[Thu Oct 29 06:57:20.913436 2026] [authz_core:error] [pid 1027905:tid 1027951] [client 90.126.56.67:48716] AH01630: client denied by server configuration: proxy:https://[MASKED]/kb/index.php
[Thu Oct 29 06:57:26.137702 2026] [authz_core:error] [pid 1027905:tid 1027944] [client 90.126.56.67:48722] AH01630: client denied by server configuration: proxy:https://[MASKED]/kb/index.php
[Thu Oct 29 06:57:29.721102 2026] [authz_core:error] [pid 1027905:tid 1027940] [client 90.126.56.67:48726] AH01630: client denied by server configuration: proxy:https://[MASKED]/kb/index.php
[Thu Oct 29 06:57:30.027440 2026] [authz_core:error] [pid 1027905:tid 1027953] [client 90.126.56.67:48722] AH01630: client denied by server configuration: proxy:https://5.75.
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-10-29 03:44:39
UTC ·
(1 week ago)
90.126.56.67 (FR/France/Bas-Rhin/Strasbourg/lfbn-str-1-593-67.w90-126.abo.wanadoo.fr/[redacted]
Brute-Force
🇫🇷
regishoussin
2026-10-06 18:24:10
UTC ·
(4 weeks ago)
Automated web scanning detected by Wazuh (rule 100170): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-06 18:24 UTC.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 06:16:15
UTC ·
(2 months ago)
(mod_security) mod_security (id:220150) triggered by 90.126.56.67 (lfbn-str-1-593-67.w90-126.abo.wanadoo.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 02:16:08.877966 2026] [security2:error] [pid 6643:tid ...
show more
(mod_security) mod_security (id:220150) triggered by 90.126.56.67 (lfbn-str-1-593-67.w90-126.abo.wanadoo.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 02:16:08.877966 2026] [security2:error] [pid 6643:tid 6643] [client 90.126.56.67:50122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\*.{0,399}\\\\*\\\\/)?select)" at ARGS:mp-event_category. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||vip.veneerdent.com|F|2"] [data "')/**/and/**/('jlgyjt'='jlgyjt'/**/union/**/all/**/select/**/'ihgyateoyermqykxcueygubmetszrpfu',null--/**/q9z9ru"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vip.veneerdent.com"] [uri "/"] [unique_id "apEnqP6aeKW-7gJXAtLD6AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack