🇺🇸
TPI-Abuse
2026-10-03 08:48:47
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 206.232.1.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 206.232.1.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 04:48:40.538819 2026] [security2:error] [pid 9177:tid 9177] [client 206.232.1.86:36769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "geo-modal.com"] [uri "/.git/HEAD"] [unique_id "asDBaHpjKv98VGo9yMAsHgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-03 04:00:45
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 206.232.1.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 206.232.1.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 00:00:39.598716 2026] [security2:error] [pid 10118:tid 10118] [client 206.232.1.86:56797] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.holgerfeld.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.holgerfeld.com"] [uri "/mailto:[email protected] "] [unique_id "asB95y6MA_IsY6BjbSmvmwAAAAQ"], referer: http://www.holgerfeld.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
mkln.org
2026-09-17 23:28:55
(3 weeks ago)
Comment spam: 1 submissions to a WordPress comment form between 2026-09-17 and 2026-09-17 UTC, all c ...
show more
Comment spam: 1 submissions to a WordPress comment form between 2026-09-17 and 2026-09-17 UTC, all caught by a hidden honeypot field.
show less
Blog Spam
🇩🇪
LRob
2026-09-11 11:23:47
(1 month ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: HEAD | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: HEAD | path: /mailto:[email protected] | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36 | 2026-09-11 11:23 UTC
show less
Hacking
Web App Attack
🇩🇪
bazter.pro
2026-09-10 11:27:28
(1 month ago)
Auto-Ban [2026-09-10 11:27:27]: CRITICAL: bot trap (hard) | host=zatoca.com | route=/-.stn/sync | hi ...
show more
Auto-Ban [2026-09-10 11:27:27]: CRITICAL: bot trap (hard) | host=zatoca.com | route=/-.stn/sync | hits=2 | ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
show less
Hacking
Web App Attack
🇫🇷
LRob
2026-09-10 03:35:56
(1 month ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-10 03:35 UTC
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-03 08:53:37
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 206.232.1.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 206.232.1.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 04:53:28.821337 2026] [security2:error] [pid 30679:tid 30679] [client 206.232.1.86:34705] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||capitalswisscorp.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/mailto:[email protected] "] [unique_id "apk1iOHrBB9uBIx9RhmEWAAAAAQ"], referer: http://CapitalSwissCorp.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 18:53:15
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 206.232.1.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 206.232.1.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 14:53:11.139372 2026] [security2:error] [pid 3307:tid 3307] [client 206.232.1.86:47473] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||sharawi-gum.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sharawi-gum.com"] [uri "/mailto: [email protected] "] [unique_id "apMql7JdO3nq1PjDTTnFPgAAAAg"], referer: http://sharawi-gum.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 18:30:38
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 206.232.1.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 206.232.1.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 14:30:31.578438 2026] [security2:error] [pid 26412:tid 26418] [client 206.232.1.86:41295] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aafm.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aafm.org"] [uri "/http/charteredfinancialmanager.com"] [unique_id "aoIBxztfSp4MCsUOKu05igAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-09 23:08:19
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 206.232.1.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 206.232.1.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 09 19:08:15.216708 2026] [security2:error] [pid 11665:tid 11665] [client 206.232.1.86:41399] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.customhumanrobots.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.customhumanrobots.com"] [uri "/mailto:[email protected] "] [unique_id "ankIX0O4yts8jCMsGBCf6AAAAAs"], referer: https://www.customhumanrobots.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-04 09:22:27
(2 months ago)
FortiWeb WAF: 24 attacks detected. Threat Score: 11473130. Types: Client Management(12), Signature D ...
show more
FortiWeb WAF: 24 attacks detected. Threat Score: 11473130. Types: Client Management(12), Signature Detection(12). Origin: United States.
show less
Web App Attack
2026-07-22 04:02:10
(2 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-07-22 00:58:18
(2 months ago)
20 attempts against mh-misbehave-ban on pavo
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-06-24 07:38:17
(3 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-38.206.232.1.86.web-spammer ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-38.206.232.1.86.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 13:21:48
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 206.232.1.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 206.232.1.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 09:21:42.194338 2026] [security2:error] [pid 18470:tid 18470] [client 206.232.1.86:61929] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||holgerfeld.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "holgerfeld.com"] [uri "/mailto:[email protected] "] [unique_id "ai1ZZhROClAxrhNe4o4JsAAAAAE"], referer: http://holgerfeld.com
show less
Brute-Force
Bad Web Bot
Web App Attack
