185.61.219.135

(mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:06:52.312150 2026] [security2:error] [pid 23577:tid 23577] [client 185.61.219.135:43633] ... show more (mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:06:52.312150 2026] [security2:error] [pid 23577:tid 23577] [client 185.61.219.135:43633] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.powerkiteforum.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.powerkiteforum.com"] [uri "/member.php"] [unique_id "avbTLOl8qHNQPZ4pYWIGrQAAAAg"] show less

(mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:21:38.681146 2026] [security2:error] [pid 20955:tid 20955] [client 185.61.219.135:45469] ... show more (mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:21:38.681146 2026] [security2:error] [pid 20955:tid 20955] [client 185.61.219.135:45469] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kountz.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kountz.org"] [uri "/pedigree.php"] [unique_id "avTqcoLjBkvAGg1sO-EaRAAAAAY"] show less

(mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 09:14:26.106627 2026] [security2:error] [pid 15843:tid 15843] [client 185.61.219.135:51733] ... show more (mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 09:14:26.106627 2026] [security2:error] [pid 15843:tid 15843] [client 185.61.219.135:51733] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.rocketbattle.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.rocketbattle.org"] [uri "/index.html"] [unique_id "avR4QoO6UXL8PO6WrZDZhgAAAAs"] show less

(mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:16:40.143557 2026] [security2:error] [pid 21102:tid 21102] [client 185.61.219.135:50763] ... show more (mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:16:40.143557 2026] [security2:error] [pid 21102:tid 21102] [client 185.61.219.135:50763] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.painting-with-numbers.com"] [uri "/blog/predicting-sp-voodoo-quantation-post-mortem"] [unique_id "avHHuIjgNKDijfd1CoR2dgAAAAk"] show less

(mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:58:28.362960 2026] [security2:error] [pid 1696:tid 1696] [client 185.61.219.135:48057] M ... show more (mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:58:28.362960 2026] [security2:error] [pid 1696:tid 1696] [client 185.61.219.135:48057] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.disio.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.disio.com"] [uri "/amolatina-avis-2/twitter-a-annonce-j-ai-vaseuse-surs-reseaux/"] [unique_id "avEatMfpg-HHHQxeL-F3RAAAABY"] show less

(mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:44:46.213399 2026] [security2:error] [pid 2792:tid 2792] [client 185.61.219.135:60189] M ... show more (mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:44:46.213399 2026] [security2:error] [pid 2792:tid 2792] [client 185.61.219.135:60189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||drowninglovers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "drowninglovers.com"] [uri "/3/post/2022/07/unboxing-the-goodies.html"] [unique_id "au-bzkxN2gYMLJuJINdeUwAAAAA"] show less

(mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 19:04:49.539439 2026] [security2:error] [pid 32001:tid 32001] [client 185.61.219.135:34379] ... show more (mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 19:04:49.539439 2026] [security2:error] [pid 32001:tid 32001] [client 185.61.219.135:34379] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.naturalunfinishedfurniture.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.naturalunfinishedfurniture.com"] [uri "/products.php"] [unique_id "au5rIVuxgRlW8Y54Lcl9MgAAAAs"] show less

block ruleset 51D5331ECDCF70C2C6410C0D0EEB5F69B17B5F56

(apache-useragents) Failed apache-useragents trigger with match [redacted] from 185.61.219.135 (RU/Russia/-)

Not following 301 redirects — wasted requests | method: GET | path: /robots.txt | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36/Nutch-1.23-SNAPS | 2026-09-29 19:36 UTC

This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; bl ... show more This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: /robots.txt | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36/Nutch-1.23-SNAPS | 2026-09-24 22:56 UTC show less

Automated web scanning and malicious probing

Detected WordPress attack from 4 different servers

(mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 21 06:31:20.933208 2025] [security2:error] [pid 428:tid 428] [client 185.61.219.135:19177] Mod ... show more (mod_security) mod_security (id:210350) triggered by 185.61.219.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 21 06:31:20.933208 2025] [security2:error] [pid 428:tid 428] [client 185.61.219.135:19177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garon.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/"] [unique_id "aUfaiC5VF1gRvDWw1RftNAAAAA4"] show less

Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER