🇺🇸
TPI-Abuse
2026-11-07 10:06:08
UTC ·
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 3.232.82.72 (3-232-82-72.crawl.amazonbot.amazon): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 05:06:00.635736 2026] [security2:error] [pid 22194:tid 22194] ...
show more
(mod_security) mod_security (id:225170) triggered by 3.232.82.72 (3-232-82-72.crawl.amazonbot.amazon): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 05:06:00.635736 2026] [security2:error] [pid 22194:tid 22194] [client 3.232.82.72:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.stantontownshipmn.gov|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.stantontownshipmn.gov"] [uri "/wp-json/wp/v2/users/1"] [unique_id "au74CNHeIFGoEuK9Xz4pVgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hugopvigo
2026-11-06 22:35:09
UTC ·
(21 hours ago)
"2026-11-06 22:35:09+00:00 3.232.82.72 IP con score alto (100) detectada en el log."
Brute-Force
SSH
🇳🇱
javierin
2026-11-06 17:06:37
UTC ·
(1 day ago)
3.232.82.72 - cms.javierin.com - - [06/Nov/2026:17:01:58 +0000] "GET /puertos-de-gestion-expuestos-la-automatizacion-del-ataque-no-da-tregua/ HTTP/1.1" 200 5958 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https ...
show more
3.232.82.72 - cms.javierin.com - - [06/Nov/2026:17:01:58 +0000] "GET /puertos-de-gestion-expuestos-la-automatizacion-del-ataque-no-da-tregua/ HTTP/1.1" 200 5958 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36"
3.232.82.72 - crianzahoy.javierin.com - - [06/Nov/2026:17:06:36 +0000] "GET /estacion-meteorologica-para-casa-que-es-y-que-datos-ofrece/ HTTP/1.1" 200 8094 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36"
...
show less
Web App Attack
Hacking
🇫🇷
security.rdmc.fr
2026-11-06 14:33:44
UTC ·
(1 day ago)
Activity from blacklisted IP
Hacking
🇩🇪
netclix.gr
2026-11-06 13:57:03
UTC ·
(1 day ago)
(bot_kill_mega) Aggressive Bot Blocked: Amazonbot 3.232.82.72 (US/United States/3-232-82-72.crawl.amazonbot.amazon)
Hacking
🇺🇸
SYSMarshal
2026-11-06 08:44:24
UTC ·
(1 day ago)
SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port:443, Proto:TCP, EventID:5152]
Port Scan
Web App Attack
Bad Web Bot
🇪🇸
librebit
2026-11-06 08:23:57
UTC ·
(1 day ago)
Brute force
Brute-Force
🇩🇪
Hugopvigo
2026-11-05 22:56:31
UTC ·
(1 day ago)
"2026-11-05 22:56:31+00:00 3.232.82.72 IP con score alto (100) detectada en el log."
Brute-Force
SSH
🇩🇪
netclix.gr
2026-11-05 08:50:35
UTC ·
(2 days ago)
(bot_kill_mega) Aggressive Bot Blocked: Amazonbot 3.232.82.72 (US/United States/3-232-82-72.crawl.amazonbot.amazon)
Hacking
🇫🇷
security.rdmc.fr
2026-11-05 04:42:36
UTC ·
(2 days ago)
Activity from blacklisted IP
Hacking
🇺🇸
TPI-Abuse
2026-11-05 01:51:25
UTC ·
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 3.232.82.72 (3-232-82-72.crawl.amazonbot.amazon): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:51:18.418414 2026] [security2:error] [pid 4177:tid 4177] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 3.232.82.72 (3-232-82-72.crawl.amazonbot.amazon): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:51:18.418414 2026] [security2:error] [pid 4177:tid 4177] [client 3.232.82.72:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.swarnar.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.swarnar.com"] [uri "/test.sql"] [unique_id "auvhFna90_hsjMOHSomaqwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
netclix.gr
2026-11-04 07:52:37
UTC ·
(3 days ago)
(bot_kill_mega) Aggressive Bot Blocked: Amazonbot 3.232.82.72 (US/United States/3-232-82-72.crawl.amazonbot.amazon)
Hacking
🇫🇷
GoodOldTOS
2026-11-04 06:52:42
UTC ·
(3 days ago)
Highly suspect IP
Hacking
Web App Attack
🇩🇪
palzer.IT
2026-11-04 05:36:34
UTC ·
(3 days ago)
Report for plesk-apache-badbot: 3.232.82.72 - - [28/Sep/2026:00:18:15 +0200] GET /firmen.feed?type=atom [DOMAIN_REMOVED] 200 22821 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +[DOMAIN_REMOVED] Chrome/119.0.6045.214 ...
show more
Report for plesk-apache-badbot: 3.232.82.72 - - [28/Sep/2026:00:18:15 +0200] GET /firmen.feed?type=atom [DOMAIN_REMOVED] 200 22821 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +[DOMAIN_REMOVED] Chrome/119.0.6045.214 Safari/537.36
show less
Bad Web Bot
🇫🇷
security.rdmc.fr
2026-11-03 22:41:29
UTC ·
(3 days ago)
Activity from blacklisted IP
Hacking
