🇨🇭
Kepler-1649c
2026-11-11 11:26:30
UTC ·
(1 day ago)
Detected Attack: ffuf.Web.Fuzzer
Hacking
🇺🇸
TPI-Abuse
2026-10-18 20:00:56
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 206.232.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 16:00:49.427890 2026] [security2:error] [pid 19926:tid 19926] [client 206.232.1.95:41041] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 206.232.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 16:00:49.427890 2026] [security2:error] [pid 19926:tid 19926] [client 206.232.1.95:41041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "militaryordnance.com"] [uri "/.git/HEAD"] [unique_id "atUlcTmQPedoScbSPiacqAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-05 02:40:03
UTC ·
(1 month ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 10:07:07
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 206.232.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:07:03.595396 2026] [security2:error] [pid 9632:tid 9704] [client 206.232.1.95:53929] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 206.232.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:07:03.595396 2026] [security2:error] [pid 9632:tid 9704] [client 206.232.1.95:53929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fastesttrademark.com"] [uri "/.git/HEAD"] [unique_id "arzfR5TIkSRSwyIE-IC4XQAAAUw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 06:34:55
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 206.232.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 02:34:48.214930 2026] [security2:error] [pid 5037:tid 5037] [client 206.232.1.95:52889] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 206.232.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 02:34:48.214930 2026] [security2:error] [pid 5037:tid 5037] [client 206.232.1.95:52889] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.holgerfeld.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.holgerfeld.com"] [uri "/mailto:[email protected] "] [unique_id "aqo4iOh5ueEZRSpN4dmK9wAAAAc"], referer: http://www.holgerfeld.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
kranem
2026-09-12 00:00:51
UTC ·
(2 months ago)
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 174 (Cogent Communications, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-09-11T23:30:09Z
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 174 (Cogent Communications, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-09-11T23:30:09Z
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/118.0
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-02 02:15:36
UTC ·
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 206.232.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:15:27.110130 2026] [security2:error] [pid 27772:tid 27772] [client 206.232.1.95:62199] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 206.232.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:15:27.110130 2026] [security2:error] [pid 27772:tid 27772] [client 206.232.1.95:62199] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||capitalswisscorp.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/mailto:[email protected] "] [unique_id "apeGv4EmSuwLsUgwkHkUrQAAAAM"], referer: http://CapitalSwissCorp.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
rsa
2026-08-06 17:58:00
UTC ·
(3 months ago)
excessive crawling ddos
DDoS Attack
Bad Web Bot
Web App Attack
2026-08-04 09:57:20
UTC ·
(3 months ago)
FortiWeb WAF: 28 attacks detected. Threat Score: 11296855. Types: Client Management(14), Signature Detection(14). Origin: United States.
Web App Attack
2026-07-22 04:05:17
UTC ·
(3 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-07-22 03:24:42
UTC ·
(3 months ago)
53 attempts against mh-misbehave-ban on pavo
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-29 01:05:46
UTC ·
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 206.232.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 21:05:38.616086 2026] [security2:error] [pid 12627:tid 12627] [client 206.232.1.95:36681] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 206.232.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 21:05:38.616086 2026] [security2:error] [pid 12627:tid 12627] [client 206.232.1.95:36681] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.holgerfeld.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.holgerfeld.com"] [uri "/mailto:[email protected] "] [unique_id "ahjmYoe7P26gG8136YnPhgAAAA0"], referer: http://www.holgerfeld.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-18 00:33:01
UTC ·
(5 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 03-33.206.232.1.95.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
2026-04-23 10:16:55
UTC ·
(6 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-16.206.232.1.95.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇺🇸
TPI-Abuse
2026-04-14 23:49:16
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 206.232.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 19:49:12.474849 2026] [security2:error] [pid 883069:tid 883069] [client 206.232.1.95:50739] M ...
show more
(mod_security) mod_security (id:210730) triggered by 206.232.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 19:49:12.474849 2026] [security2:error] [pid 883069:tid 883069] [client 206.232.1.95:50739] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.CapitalSwissCorp.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.capitalswisscorp.com"] [uri "/mailto:[email protected] "] [unique_id "ad7SeCWCuF0Tzb5H5ugj2AAAABE"], referer: http://www.CapitalSwissCorp.com
show less
Brute-Force
Bad Web Bot
Web App Attack
