2026-08-26 21:01:34
(20 hours ago)
| SQL injection attempt.
Web App Attack
Hacking
SQL Injection
2026-08-04 10:17:49
(3 weeks ago)
FortiWeb WAF: 20 attacks detected. Threat Score: 11178305. Types: Client Management(10), Signature D ...
show more
FortiWeb WAF: 20 attacks detected. Threat Score: 11178305. Types: Client Management(10), Signature Detection(10). Origin: United States.
show less
Web App Attack
2026-07-23 01:27:06
(1 month ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2026-07-22 01:03:44
(1 month ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-14 18:16:52
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 206.232.2.220 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 206.232.2.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 14:16:45.791854 2026] [security2:error] [pid 3534019:tid 3534019] [client 206.232.2.220:32091] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||talentstar.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "talentstar.com"] [uri "/about-us"] [unique_id "ad6EjSeCWzRvu6gj3lf9eAAAABc"], referer: https://talentstar.com/about-us
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-09 17:18:56
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 206.232.2.220 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 206.232.2.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 13:18:21.325999 2026] [security2:error] [pid 1440540:tid 1440565] [client 206.232.2.220:59389] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aclarityforensics.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aclarityforensics.com"] [uri "/company"] [unique_id "adffXd9BpMchx4Gm0j7XLAAAAIs"], referer: https://aclarityforensics.com/company
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 09:46:40
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 206.232.2.220 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 206.232.2.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 05:44:38.383964 2026] [security2:error] [pid 8082:tid 8082] [client 206.232.2.220:63785] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.starsmogsandiego.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.starsmogsandiego.com"] [uri "/contactus"] [unique_id "ab-6BoEREadg4BG8C9XfQwAAABY"], referer: https://www.starsmogsandiego.com/contactus
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-13 16:51:42
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 206.232.2.220 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 206.232.2.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 12:50:55.949811 2026] [security2:error] [pid 641:tid 641] [client 206.232.2.220:59243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||christinepeat.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "christinepeat.com"] [uri "/contact-us"] [unique_id "abRAb3cljFKlBM9enk3ChwAAACs"], referer: https://christinepeat.com/contact-us
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-03 16:22:17
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 206.232.2.220 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 206.232.2.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 11:19:56.348909 2026] [security2:error] [pid 3315:tid 3315] [client 206.232.2.220:46835] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||northfortworthalliance.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "northfortworthalliance.com"] [uri "/about-us"] [unique_id "aacKLKMNhDMZATg3SfN4GQAAACg"], referer: https://northfortworthalliance.com/about-us
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-17 19:32:05
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 206.232.2.220 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 206.232.2.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 14:31:58.837367 2026] [security2:error] [pid 10582:tid 10582] [client 206.232.2.220:64531] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||charleshenri.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "charleshenri.com"] [uri "/"] [unique_id "aZTCLj-B6DHLJw4e0jrZHgAAAAA"], referer: https://charleshenri.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-13 10:36:16
(11 months ago)
(mod_security) mod_security (id:210740) triggered by 206.232.2.220 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 206.232.2.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 06:36:11.028879 2025] [security2:error] [pid 15164:tid 15186] [client 206.232.2.220:63293] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||accreditedprojectmanager.com:80|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "accreditedprojectmanager.com"] [uri "/"] [unique_id "aMVJG96vQqgDqqgwrvVB2wAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2025-04-19 06:21:27
(1 year ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 4/19/2025 6:21 am (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-04-07 08:39:07
(1 year ago)
WP Login Scan Activities
Web App Attack