Total reports
9 from
7 distinct
reporters
First reported
March 4th 2024
Most recent report
2 days ago
Last 60 days
Top reporter locations
🇨🇭
Switzerland
1
🇳🇱
Netherlands
1
🇺🇸
United States of America
1
Most common categories
Web App Attack
2
Bad Web Bot
2
Brute-Force
1
Hacking
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
Kepler-1649c
2026-11-11 11:21:47
UTC ·
(2 days ago)
Detected Attack: ffuf.Web.Fuzzer
Hacking
🇳🇱
Alt255
2026-11-04 12:58:51
UTC ·
(1 week ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 206.232.0.182 - - [04/Nov/2026:13:58:41 +0100] "GET /.git/HEAD HTTP/1.1" 301 6440 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 F ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 206.232.0.182 - - [04/Nov/2026:13:58:41 +0100] "GET /.git/HEAD HTTP/1.1" 301 6440 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 08:15:46
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 206.232.0.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 03:15:42.337294 2026] [security2:error] [pid 583110:tid 583123] [client 206.232.0.182:50879] ...
show more
(mod_security) mod_security (id:210492) triggered by 206.232.0.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 03:15:42.337294 2026] [security2:error] [pid 583110:tid 583123] [client 206.232.0.182:50879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southeastseal.com"] [uri "/.git/HEAD"] [unique_id "aurprlafGgB-HfKLbdALZwAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-04 11:24:45
UTC ·
(3 months ago)
FortiWeb WAF: 26 attacks detected. Threat Score: 10667180. Types: Client Management(13), Signature Detection(13). Origin: United States.
Web App Attack
2026-07-22 00:11:55
UTC ·
(3 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-09-15 06:32:43
UTC ·
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 206.232.0.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 15 02:32:38.516357 2025] [security2:error] [pid 29184:tid 29184] [client 206.232.0.182:56589] M ...
show more
(mod_security) mod_security (id:210740) triggered by 206.232.0.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 15 02:32:38.516357 2025] [security2:error] [pid 29184:tid 29184] [client 206.232.0.182:56589] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||caralis.com:80|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "caralis.com"] [uri "/"] [unique_id "aMezBlw1-qMahyKd96RqpQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-02-25 01:30:09
UTC ·
(1 year ago)
wordpress-trap
Web App Attack
2024-12-18 13:30:57
UTC ·
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted] 206.232.0.182 (US/United States/-)
SQL Injection
🇺🇸
TPI-Abuse
2024-03-04 19:24:02
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 206.232.0.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 04 14:23:50.167886 2024] [security2:error] [pid 16319] [client 206.232.0.182:63477] [client 206 ...
show more
(mod_security) mod_security (id:210730) triggered by 206.232.0.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 04 14:23:50.167886 2024] [security2:error] [pid 16319] [client 206.232.0.182:63477] [client 206.232.0.182] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kingstoneproperties.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kingstoneproperties.com"] [uri "/[email protected] "] [unique_id "ZeYfxmoSoPH_oIkQC2iz4AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
