Total reports
5 from
3 distinct
reporters
First reported
November 16th 2023
Most recent report
2 hours ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
3
Most common categories
Bad Web Bot
3
Web App Attack
3
Brute-Force
3
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-28 14:38:29
(2 hours ago)
(mod_security) mod_security (id:210350) triggered by 167.249.150.85 (167-249-150-85.conectaraxa.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 10:38:20.419342 2026] [security2:error] [pid 12804:tid 1280 ...
show more
(mod_security) mod_security (id:210350) triggered by 167.249.150.85 (167-249-150-85.conectaraxa.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 10:38:20.419342 2026] [security2:error] [pid 12804:tid 12804] [client 167.249.150.85:43124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lamariposagallery.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lamariposagallery.com"] [uri "/"] [unique_id "auII3Jdo1Wv_1B7lQL0BzwAAAAU"], referer: https://dailymusings.top/stats/17395
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 03:55:03
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 167.249.150.85 (167-249-150-85.conectaraxa.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 23:54:56.088457 2026] [security2:error] [pid 9656:tid 9656] ...
show more
(mod_security) mod_security (id:210350) triggered by 167.249.150.85 (167-249-150-85.conectaraxa.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 23:54:56.088457 2026] [security2:error] [pid 9656:tid 9656] [client 167.249.150.85:43028] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lifestylemedica.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lifestylemedica.com"] [uri "/lsm/el-sobrepeso-te-acorta-la-vida"] [unique_id "auAgkH6bscQ2Gd1QVdlX-AAAAAM"], referer: https://lifestylemedica.com/lsm
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 08:28:22
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 167.249.150.85 (167-249-150-85.conectaraxa.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 04:28:17.465732 2026] [security2:error] [pid 10192:tid 1019 ...
show more
(mod_security) mod_security (id:210350) triggered by 167.249.150.85 (167-249-150-85.conectaraxa.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 04:28:17.465732 2026] [security2:error] [pid 10192:tid 10192] [client 167.249.150.85:45284] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lfrmtmorris.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lfrmtmorris.com"] [uri "/"] [unique_id "atxsIQYXAdeE-luyVOlSTgAAABM"], referer: https://buildinghighqualitylinks.space/dir/outreach-link-building-121359
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-02-05 01:03:31
(1 year ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇩🇪
Pingger Shikkoken
2023-11-16 05:41:45
(2 years ago)
Participating in DDoS Amplification Attack! Sending 11 requests over 26226s asking for ?0? of apple.com, cisco.com
DNS Poisoning
DDoS Attack
Hacking
Brute-Force
Exploited Host
