This IP address has been reported a total of
14
times from
7 distinct
sources.
178.104.66.47 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 4
reports;
Switzerland
with 3
reports;
United States of America
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
12
times;
Brute-Force
4
times;
Port Scan
4
times;
Hacking
3
times;
Bad Web Bot
2
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SatOct2421:13:28.9183132026][security2:error][pid3654565:tid3654959][client178.104.66.47:0]ModSecur ...
show more[SatOct2421:13:28.9183132026][security2:error][pid3654565:tid3654959][client178.104.66.47:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"aeapcl.ch\"][uri\"/\"][unique_id\"at0DWKSeMvDTulqT_Zo2ggAAAEo\"]
show less
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -59.93 (Bad < -10 / Very Bad < -20 / ...
show moreBot/Spam/Scrapper attack detected on www.handytreff.de - Score: -59.93 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.6
show less
[SatOct2405:55:15.6531122026][security2:error][pid3470689:tid3470700][client178.104.66.47:0]ModSecur ...
show more[SatOct2405:55:15.6531122026][security2:error][pid3470689:tid3470700][client178.104.66.47:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"serversvizzera.ch\"][uri\"/\"][unique_id\"atwsI_celTqB-viQtHWiWAAAAAA\"]
show less
[FriOct2301:38:06.9009162026][security2:error][pid963913:tid964012][client178.104.66.47:0]ModSecurit ...
show more[FriOct2301:38:06.9009162026][security2:error][pid963913:tid964012][client178.104.66.47:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"aid-web.com\"][uri\"/\"][unique_id\"atqeXgOiu1N6Lq4rp5E02AAAAJg\"]
show less
[ThuOct2200:06:25.8457522026][security2:error][pid339758:tid339885][client178.104.66.47:0]ModSecurit ...
show more[ThuOct2200:06:25.8457522026][security2:error][pid339758:tid339885][client178.104.66.47:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"glass-container.com\"][uri\"/\"][unique_id\"atk3YdUzoJzLBe9RlhTpQQAAANc\"]
show less
[WedOct2100:38:58.9649592026][security2:error][pid2144939:tid2145026][client178.104.66.47:0]ModSecur ...
show more[WedOct2100:38:58.9649592026][security2:error][pid2144939:tid2145026][client178.104.66.47:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"hosting-dominio.ch\"][uri\"/\"][unique_id\"atftgut20ppQficwPZFvywAAAJc\"]
show less
[TueOct2004:38:15.6375272026][security2:error][pid1898223:tid1898261][client178.104.66.47:0]ModSecur ...
show more[TueOct2004:38:15.6375272026][security2:error][pid1898223:tid1898261][client178.104.66.47:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ggarchitetti.ch\"][uri\"/\"][unique_id\"atbUFzwJGi5f2kDHzRTEcgAAAdQ\"]
show less
Port Scan
Brute-Force
Web App Attack
Showing 1 to
14
of 14 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
