Total reports
6 from
5 distinct
reporters
First reported
September 21st 2026
Most recent report
1 day ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
3
🇩🇪
Germany
1
🇪🇸
Spain
1
Most common categories
Web App Attack
4
Brute-Force
3
Hacking
2
Bad Web Bot
2
SQL Injection
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
ersei.net
2026-11-12 01:38:32
UTC ·
(1 day ago)
Web app exploiting
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 03:51:54
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 94.9.83.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:51:48.808557 2026] [security2:error] [pid 9670:tid 9670] [client 94.9.83.246:1260] ModSecur ...
show more
(mod_security) mod_security (id:210730) triggered by 94.9.83.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:51:48.808557 2026] [security2:error] [pid 9670:tid 9670] [client 94.9.83.246:1260] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||192.64.150.244:443|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "192.64.150.244"] [uri "/log/debug.log"] [unique_id "aulaVFkqWFZ2-B_ruHPYnwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2026-10-30 00:58:33
UTC ·
(2 weeks ago)
Cloudflare WAF: Request Path: /dudas_generales/mozila_con_flash_player_10-t305440.0.html;msg1516708 Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 S ...
show more
Cloudflare WAF: Request Path: /dudas_generales/mozila_con_flash_player_10-t305440.0.html;msg1516708 Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: Sky UK Limited Country: GB Method: GET Timestamp: 2026-10-30T00:58:33Z ruleId: 1f52f3074c894e2395a237e7eac6a9a6.
show less
Hacking
SQL Injection
Web App Attack
🇫🇮
pavel Karpenko
2026-10-29 07:19:14
UTC ·
(2 weeks ago)
94.9.83.246 - - [29/Oct/2026:10:19:14 +0300] "GET /property_lir.php?id=ch.hosttech&lang=es HTTP/1.1" 404 218 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" client_port=1265 ...
show more
94.9.83.246 - - [29/Oct/2026:10:19:14 +0300] "GET /property_lir.php?id=ch.hosttech&lang=es HTTP/1.1" 404 218 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" client_port=1265 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1793258354.815
show less
DDoS Attack
🇺🇸
TPI-Abuse
2026-09-23 09:10:15
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 94.9.83.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 05:08:41.404961 2026] [security2:error] [pid 25651:tid 25746] [client 94.9.83.246:1197] ModSec ...
show more
(mod_security) mod_security (id:210492) triggered by 94.9.83.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 05:08:41.404961 2026] [security2:error] [pid 25651:tid 25746] [client 94.9.83.246:1197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "giere.org.giere.us"] [uri "/old/.env.save~"] [unique_id "arOXGWkKbKLJQuURc42PTQAAAoA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-21 13:20:44
UTC ·
(1 month ago)
Unauthorized VPN login attempts
Hacking
Brute-Force
