🇺🇸
TPI-Abuse
2026-11-13 06:26:41
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 206.232.1.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:26:38.355420 2026] [security2:error] [pid 26277:tid 26277] [client 206.232.1.145:29401] M ...
show more
(mod_security) mod_security (id:210492) triggered by 206.232.1.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:26:38.355420 2026] [security2:error] [pid 26277:tid 26277] [client 206.232.1.145:29401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virtualvideo.org"] [uri "/.git/HEAD"] [unique_id "avatnpgRiIRfgzzSdYS3PQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Kepler-1649c
2026-11-11 11:15:10
UTC ·
(2 days ago)
Detected Attack: ffuf.Web.Fuzzer
Hacking
🇵🇱
Budyn
2026-10-27 07:55:15
UTC ·
(2 weeks ago)
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_3 | Action: AWS API Call | Token: 4tpvosl7k2etr0dcza06lsb9g | Client Tool: Boto3/1.42.60 md/Botocore#1.42.60 ua/2.1 os/linux#5.15.0-191-generic md/arch#x86_64 lang/python#3.10.12 md/pyimpl ...
show more
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_3 | Action: AWS API Call | Token: 4tpvosl7k2etr0dcza06lsb9g | Client Tool: Boto3/1.42.60 md/Botocore#1.42.60 ua/2.1 os/linux#5.15.0-191-generic md/arch#x86_64 lang/python#3.10.12 md/pyimpl#CPython m/b,Z,e,E cfg/retry-mode#standard B...
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 19:09:21
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 206.232.1.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 15:09:15.476362 2026] [security2:error] [pid 15190:tid 15209] [client 206.232.1.145:64309] M ...
show more
(mod_security) mod_security (id:210492) triggered by 206.232.1.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 15:09:15.476362 2026] [security2:error] [pid 15190:tid 15209] [client 206.232.1.145:64309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centurylink-sales.com"] [uri "/.git/HEAD"] [unique_id "arAvW_ZwOhW-Odp13o1KGQAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-19 23:54:36
UTC ·
(1 month ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 206.232.1.145 - - [20/Sep/2026:01:54:35 +0200] "GET /.git/HEAD HTTP/1.1" 404 2046 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/1 ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 206.232.1.145 - - [20/Sep/2026:01:54:35 +0200] "GET /.git/HEAD HTTP/1.1" 404 2046 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-18 17:10:17
UTC ·
(1 month ago)
Enumerating paths that do not exist (scanning) | method: GET | path: /web-console/ | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0 Safari/537.36 | 2026-09-18 17:10 UTC
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 10:49:37
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 206.232.1.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:49:31.307137 2026] [security2:error] [pid 28445:tid 28445] [client 206.232.1.145:46609] M ...
show more
(mod_security) mod_security (id:210492) triggered by 206.232.1.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:49:31.307137 2026] [security2:error] [pid 28445:tid 28445] [client 206.232.1.145:46609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "essentialee.com"] [uri "/.env"] [unique_id "aqp0O7AGdf5w6RdzgJtPLQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-04 10:31:27
UTC ·
(3 months ago)
FortiWeb WAF: 14 attacks detected. Threat Score: 11092480. Types: Client Management(7), Signature Detection(7). Origin: United States.
Web App Attack
🇦🇺
MAGIC
2025-03-24 01:13:10
UTC ·
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇮🇩
BPS-StatisticsIndonesia
2025-03-01 07:34:45
UTC ·
(1 year ago)
WP Login Scan Activities
Web App Attack
🇬🇧
Bytemark
2025-02-24 00:18:41
UTC ·
(1 year ago)
206.232.1.145 - - [24/Feb/2025:00:18:37 +0000] "GET /wp-login.php HTTP/2.0" 404 36 "-" "-"
206.232.1.145 - - [24/Feb/2025:00:18:40 +0000] "GET /wp-login.php HTTP/2.0" 404 36 "-" "-"
206.232.1.145 - - [24/Feb/2025:00:18:40 +0000] "GET /wp-login.php HT ...
show more
206.232.1.145 - - [24/Feb/2025:00:18:37 +0000] "GET /wp-login.php HTTP/2.0" 404 36 "-" "-"
206.232.1.145 - - [24/Feb/2025:00:18:40 +0000] "GET /wp-login.php HTTP/2.0" 404 36 "-" "-"
206.232.1.145 - - [24/Feb/2025:00:18:40 +0000] "GET /wp-login.php HTTP/2.0" 404 36 "-" "-"
show less
Brute-Force
Web App Attack
🇺🇸
VSM Networks
2022-12-15 10:55:33
UTC ·
(3 years ago)
Credential Stuffing
Brute-Force
