This IP address has been reported a total of
12
times from
11 distinct
sources.
52.214.205.206 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 52.214.205.206 (IE/I ...
show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 52.214.205.206 (IE/Ireland/ec2-52-214-205-206.eu-west-1.compute.amazonaws.com)
show less
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 52.214.205.206 (IE/I ...
show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 52.214.205.206 (IE/Ireland/-)
show less
[ThuJul0904:45:40.9863092026][security2:error][pid3534618:tid3534676][client52.214.205.206:0]ModSecu ...
show more[ThuJul0904:45:40.9863092026][security2:error][pid3534618:tid3534676][client52.214.205.206:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.casacarmen.ch\"][uri\"/\"][unique_id\"ak8LVHWE6QR7tZJAfyaYSQAAAFY\"]
show less
[ThuJul0904:25:17.8876052026][security2:error][pid2830033:tid2830193][client52.214.205.206:0]ModSecu ...
show more[ThuJul0904:25:17.8876052026][security2:error][pid2830033:tid2830193][client52.214.205.206:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"autodiscover.filarmonicaagno.ch\"][uri\"/\"][unique_id\"ak8GjacJGeQta7d0fmwulQAAAIQ\"]
show less
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 52.214.205.206 (IE/Ireland/ec2-52-214 ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 52.214.205.206 (IE/Ireland/ec2-52-214-205-206.eu-west-1.compute.amazonaws.com): 1 in the last 3600 secs (0-195)
show less
IM360 WAF: Block system file path in request MV:../../../../../../../../../../../../../../../etc/pas ...
show moreIM360 WAF: Block system file path in request MV:../../../../../../../../../../../../../../../etc/passwd\\x00
show less
Web App Attack
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩