🇨🇭
Kepler-1649c
2026-11-11 11:28:10
UTC ·
(2 days ago)
Detected Attack: ffuf.Web.Fuzzer
Hacking
🇳🇱
homeshowdomain.nl
2026-10-15 21:59:56
UTC ·
(4 weeks ago)
Auto-ban: >3000 req/min op 2026-10-15
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-10-05 03:38:58
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 206.232.2.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 23:38:53.863522 2026] [security2:error] [pid 20224:tid 20224] [client 206.232.2.72:32299] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 206.232.2.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 23:38:53.863522 2026] [security2:error] [pid 20224:tid 20224] [client 206.232.2.72:32299] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gun-laws-by-state.com"] [uri "/.git/HEAD"] [unique_id "asMbzU00zHCfVwwMgCbdxAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-26 20:03:47
UTC ·
(1 month ago)
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; bl ...
show more
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: HEAD | path: / | 2026-09-26 20:03 UTC
show less
Bad Web Bot
🇫🇷
service Informatique
2026-09-20 04:00:37
UTC ·
(1 month ago)
GET /config
Web App Attack
2026-07-23 01:15:28
UTC ·
(3 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2026-07-22 00:59:10
UTC ·
(3 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-15 03:39:39
UTC ·
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 206.232.2.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 23:39:35.182429 2026] [security2:error] [pid 2649596:tid 2649643] [client 206.232.2.72:62717] ...
show more
(mod_security) mod_security (id:210350) triggered by 206.232.2.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 23:39:35.182429 2026] [security2:error] [pid 2649596:tid 2649643] [client 206.232.2.72:62717] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tnccivic.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tnccivic.org"] [uri "/our-story"] [unique_id "ad8Id4j6hveTnkjjitS9ywAAAYo"], referer: https://tnccivic.org/our-story
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 03:36:16
UTC ·
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 206.232.2.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:34:28.820261 2026] [security2:error] [pid 12190:tid 12190] [client 206.232.2.72:60895] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 206.232.2.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:34:28.820261 2026] [security2:error] [pid 12190:tid 12190] [client 206.232.2.72:60895] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||coyotebytes.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "coyotebytes.com"] [uri "/about"] [unique_id "abzARDV3ztCrnxj1eR2G7gAAAAE"], referer: https://coyotebytes.com/about
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 00:04:18
UTC ·
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 206.232.2.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:04:11.124440 2026] [security2:error] [pid 23141:tid 23165] [client 206.232.2.72:33715] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 206.232.2.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:04:11.124440 2026] [security2:error] [pid 23141:tid 23165] [client 206.232.2.72:33715] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ardentsi.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ardentsi.com"] [uri "/"] [unique_id "abyO-6ZS8i2WYfKhKjK4LgAAAJU"], referer: https://www.ardentsi.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-13 09:53:53
UTC ·
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 206.232.2.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 05:53:46.729650 2026] [security2:error] [pid 19419:tid 19445] [client 206.232.2.72:46059] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 206.232.2.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 05:53:46.729650 2026] [security2:error] [pid 19419:tid 19445] [client 206.232.2.72:46059] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||managementlaw.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "managementlaw.com"] [uri "/about"] [unique_id "abPeqoWvT7LB8PsFuETTpgAAAFY"], referer: https://managementlaw.com/about
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-03 03:18:41
UTC ·
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 206.232.2.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 22:18:18.097446 2026] [security2:error] [pid 30105:tid 30105] [client 206.232.2.72:62407] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 206.232.2.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 22:18:18.097446 2026] [security2:error] [pid 30105:tid 30105] [client 206.232.2.72:62407] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||franklincountyquilters.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "franklincountyquilters.org"] [uri "/contact"] [unique_id "aaZS-uarelJfhfucD8S0ewAAAC0"], referer: https://franklincountyquilters.org/contact
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-02 20:45:19
UTC ·
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 206.232.2.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 15:45:00.212394 2026] [security2:error] [pid 24568:tid 24580] [client 206.232.2.72:48653] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 206.232.2.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 15:45:00.212394 2026] [security2:error] [pid 24568:tid 24580] [client 206.232.2.72:48653] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||metropaint.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "metropaint.net"] [uri "/company-profile"] [unique_id "aaX2zDapBpXHlR7Vi9mHMAAAAIk"], referer: https://metropaint.net/company-profile
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2025-04-12 14:14:22
UTC ·
(1 year ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 4/12/2025 2:14 pm (UTC-6)
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2025-04-04 11:52:19
UTC ·
(1 year ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 4/4/2025 11:52 am (UTC-6)
Web Spam
Hacking
Bad Web Bot
Web App Attack
