🇩🇪
LRob
2026-10-28 16:36:16
(3 hours ago)
Not following 301 redirects — wasted requests | method: GET | path: /formation | ua: Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safar | 2026-10-28 16:36 UTC
Bad Web Bot
🇩🇪
LRob
2026-10-27 00:06:33
(1 day ago)
Not following 301 redirects — wasted requests | method: GET | path: /tous-les-restaurants | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0
Bad Web Bot
2026-09-26 19:45:33
(1 month ago)
"Packet Flood; Triggered WAF; Persistent 404 Attempts"
DDoS Attack
🇺🇸
TPI-Abuse
2026-09-22 05:14:51
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 197.184.183.48 (rain-197-184-183-48.rain.network): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 01:14:46.077542 2026] [security2:error] [pid 2585:tid 2585] ...
show more
(mod_security) mod_security (id:210350) triggered by 197.184.183.48 (rain-197-184-183-48.rain.network): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 01:14:46.077542 2026] [security2:error] [pid 2585:tid 2585] [client 197.184.183.48:34776] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||angelachawkins.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "angelachawkins.com"] [uri "/"] [unique_id "arIOxudW736JVm9o87e26AAAAAo"], referer: https://angelicpursuits.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-21 06:20:01
(1 month ago)
"Packet Flood; Triggered WAF; Persistent 404 Attempts"
DDoS Attack
🇺🇸
TPI-Abuse
2026-09-16 19:55:53
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 197.184.183.48 (rain-197-184-183-48.rain.network): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 15:55:44.577280 2026] [security2:error] [pid 15481:tid 15481 ...
show more
(mod_security) mod_security (id:210350) triggered by 197.184.183.48 (rain-197-184-183-48.rain.network): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 15:55:44.577280 2026] [security2:error] [pid 15481:tid 15481] [client 197.184.183.48:57746] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||frmoto24montmelo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "frmoto24montmelo.com"] [uri "/"] [unique_id "aqr0QEXPD2MfSx1tXRxLvAAAAA8"], referer: https://backlinkcheckersite.store/dir/website-growth-backlinks-76875
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-06 10:36:06
(5 months ago)
Unauthorized connection attempt on Port 2323
Port Scan
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2026-01-28 16:02:46
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 197.184.183.48 (rain-197-184-183-48.rain.network): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 28 11:02:39.123608 2026] [security2:error] [pid 26437:tid 26437 ...
show more
(mod_security) mod_security (id:210730) triggered by 197.184.183.48 (rain-197-184-183-48.rain.network): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 28 11:02:39.123608 2026] [security2:error] [pid 26437:tid 26437] [client 197.184.183.48:52243] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||owlcapone.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "owlcapone.com"] [uri "/stickystations.com"] [unique_id "aXozHyCn0Ntswioc360TTwAAAAs"], referer: http://owlcapone.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-19 04:29:51
(11 months ago)
scanning http requests from known botnet
Web App Attack
🇺🇸
ChamberofCommerce.com
2023-12-22 12:28:02
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
Bad Web Bot
2022-05-13 04:48:26
(4 years ago)
May 13 10:48:25 ns3104219 postfix/smtpd[7272]: NOQUEUE: reject: RCPT from unknown[197.184.183.48]: 450 4.7.1 <reverse.rain.network>: Helo command rejected: Host not found; from=<[email protected] > to=<[email protected] > proto=ESMTP h ...
show more
May 13 10:48:25 ns3104219 postfix/smtpd[7272]: NOQUEUE: reject: RCPT from unknown[197.184.183.48]: 450 4.7.1 <reverse.rain.network>: Helo command rejected: Host not found; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<reverse.rain.network>
...
show less
Email Spam
Web App Attack
🇸🇰
wirecontrol
2022-05-11 22:27:25
(4 years ago)
SpamScore above: 10.0
Email Spam
