🇫🇷
conseilgouz
2026-11-07 01:58:10
UTC ·
(1 day ago)
joe-404 : Too many 404 errors
Brute-Force
🇩🇪
botreporter
2026-11-05 14:38:49
UTC ·
(3 days ago)
CMS vulnerability/installation scanning
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-22 13:47:31
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 185.213.247.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 09:47:26.456149 2026] [security2:error] [pid 13864:tid 13864] [client 185.213.247.103:6182 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.213.247.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 09:47:26.456149 2026] [security2:error] [pid 13864:tid 13864] [client 185.213.247.103:61829] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||videoverse.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "videoverse.com"] [uri "/@videoverse"] [unique_id "aomobpq0OOhMUDxj9uvgpwAAAAI"], referer: https://videoverse.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-22 07:14:37
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 185.213.247.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 03:14:32.813440 2026] [security2:error] [pid 9555:tid 9555] [client 185.213.247.103:33407] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.213.247.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 03:14:32.813440 2026] [security2:error] [pid 9555:tid 9555] [client 185.213.247.103:33407] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.evolute.io|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.evolute.io"] [uri "/top-5-learnings-moving-software-to-containers/"] [unique_id "aolMWAD1haZLbyxsgXrs5wAAABg"], referer: https://www.evolute.io/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-12 12:53:32
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 185.213.247.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 08:53:24.365810 2026] [security2:error] [pid 11364:tid 11364] [client 185.213.247.103:5632 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.213.247.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 08:53:24.365810 2026] [security2:error] [pid 11364:tid 11364] [client 185.213.247.103:56321] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||acmax.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "acmax.com"] [uri "/home/"] [unique_id "anxsxOi86vfrTUdHdn0WlwAAABw"], referer: http://acmax.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-08-11 12:26:25
UTC ·
(2 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 247
Exploited Host
Web App Attack
🇩🇪
FeG Deutschland
2026-08-08 13:42:32
UTC ·
(3 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 247
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-08-07 19:11:39
UTC ·
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 185.213.247.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 15:11:34.412438 2026] [security2:error] [pid 30000:tid 30000] [client 185.213.247.103:6123 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.213.247.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 15:11:34.412438 2026] [security2:error] [pid 30000:tid 30000] [client 185.213.247.103:61233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.creertest.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.creertest.com"] [uri "/"] [unique_id "anYt5lxELAe_r34lUNuTwgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Oakley
2026-06-30 19:37:24
UTC ·
(4 months ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇺🇸
TPI-Abuse
2026-06-30 05:24:33
UTC ·
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 185.213.247.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 01:24:27.828863 2026] [security2:error] [pid 8239:tid 8239] [client 185.213.247.103:54029] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.213.247.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 01:24:27.828863 2026] [security2:error] [pid 8239:tid 8239] [client 185.213.247.103:54029] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.videoverse.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.videoverse.com"] [uri "/register"] [unique_id "akNTC-uJUVHmrN5Fx2RY7QAAAAo"], referer: https://videoverse.com/%40videoverse?https://videoverse.com/%40videoverse-https://www.videoverse.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 03:51:07
UTC ·
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 185.213.247.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 23:51:01.307021 2026] [security2:error] [pid 2956:tid 2956] [client 185.213.247.103:57919] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.213.247.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 23:51:01.307021 2026] [security2:error] [pid 2956:tid 2956] [client 185.213.247.103:57919] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.glassicannex.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.glassicannex.org"] [uri "/owners.htm"] [unique_id "ajylpdE0rTAfh9-2dSeMkgAAABM"], referer: http://www.glassicannex.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 16:14:08
UTC ·
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 185.213.247.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 12:13:59.335017 2026] [security2:error] [pid 1304:tid 1304] [client 185.213.247.103:51199] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.213.247.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 12:13:59.335017 2026] [security2:error] [pid 1304:tid 1304] [client 185.213.247.103:51199] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.yarbroughfamily.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.yarbroughfamily.org"] [uri "/"] [unique_id "ajwCR4O2izrtjE5yDsmW4AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-17 04:50:32
UTC ·
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-50.185.213.247.103.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇺🇸
ipblock.com
2026-06-03 06:46:00
UTC ·
(5 months ago)
IPBlock protected site ID [4055-d][s=07].
Persistent 404, vulnerability scanner
Hacking
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-06-01 04:07:00
UTC ·
(5 months ago)
IPBlock protected site ID [4055-d][s=07].
Persistent 404, vulnerability scanner
Hacking
Bad Web Bot
Web App Attack
