🇺🇸
mnsf
2026-06-20 11:05:50
(6 hours ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇩🇪
conseilgouz
2026-06-13 00:38:38
(1 week ago)
vew-(visforms) : try to access forms...
Hacking
🇺🇸
TPI-Abuse
2026-06-12 22:03:47
(1 week ago)
(mod_security) mod_security (id:210801) triggered by 85.237.212.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210801) triggered by 85.237.212.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 18:03:43.629732 2026] [security2:error] [pid 27915:tid 27915] [client 85.237.212.188:62053] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||oculaser.net|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "oculaser.net"] [uri "/license.txt"] [unique_id "aiyCP_Sb2FyrV23DFdbOyAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 21:35:10
(1 week ago)
(mod_security) mod_security (id:210801) triggered by 85.237.212.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210801) triggered by 85.237.212.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 17:35:04.863866 2026] [security2:error] [pid 7808:tid 7808] [client 85.237.212.188:29201] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||activethinkers.net|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "activethinkers.net"] [uri "/license.txt"] [unique_id "aix7iCLBq0F9CfNLEA_cdAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-06-12 20:19:58
(1 week ago)
[FriJun1222:19:53.5436212026][security2:error][pid1753700:tid1753860][client85.237.212.188:0]ModSecu ...
show more
[FriJun1222:19:53.5436212026][security2:error][pid1753700:tid1753860][client85.237.212.188:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:n\(\?:-stealth\|sauditor\|e\(\?:ssus\|etwork-services-auditor\)\|ikto\|map\)\|b\(\?:lack\?widow\|rutus\|ilbo\)\|web\(\?:inspec\|roo\)t\|p\(\?:mafind\|aros\|avuk\)\|cgichk\|jaascois\|\\\\\\\\.nasl\|metis\|w\(\?:ebtrendssecurityanalyzer\|hcc\|3af\\\\\\\\.sourceforge\\\\\\\\.net\)\|\\\\\\\\bzmeu\\\\\\\\b\|springenwerk\|...\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"184\"][id\"330034\"][rev\"14\"][msg\"Atomicorp.comWAFRules:UnauthorizedVulnerabilityScannerdetected\"][data\"paros\"][severity\"CRITICAL\"][hostname\"hosting-e-domini.net\"][uri\"/license.txt\"][unique_id\"aixp6U6aovKnvAT-BBKn8wAAAAE\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 20:00:27
(1 week ago)
(mod_security) mod_security (id:210801) triggered by 85.237.212.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210801) triggered by 85.237.212.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 16:00:18.748171 2026] [security2:error] [pid 2254:tid 2254] [client 85.237.212.188:64999] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||jaojoco.net|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "jaojoco.net"] [uri "/license.txt"] [unique_id "aixlUj76EJivkNRLPtIhEQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 19:25:10
(1 week ago)
(mod_security) mod_security (id:210801) triggered by 85.237.212.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210801) triggered by 85.237.212.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 15:25:06.133930 2026] [security2:error] [pid 20090:tid 20090] [client 85.237.212.188:37877] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||www.robcohn.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "www.robcohn.com"] [uri "/license.txt"] [unique_id "aixdElokGxJmlfhtPt6i3QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 18:30:03
(1 week ago)
(mod_security) mod_security (id:210801) triggered by 85.237.212.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210801) triggered by 85.237.212.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:29:56.685972 2026] [security2:error] [pid 3937:tid 3943] [client 85.237.212.188:21291] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||sattraffic.net|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "sattraffic.net"] [uri "/license.txt"] [unique_id "aixQJCeDFbJmsnNlmdVrLQAAAQE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
i-turnradio.nl
2026-06-12 18:11:44
(1 week ago)
2026-06-12 @ 20:11:43 (CET) ~ Blocked for trying to access: /license.txt
Web App Attack
🇩🇪
FeG Deutschland
2026-06-09 19:03:47
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇩🇪
todix
2026-06-09 17:31:23
(1 week ago)
WebAttack or semilar from 85.237.212.188
Web App Attack
🇨🇭
backslash
2026-06-02 15:42:01
(2 weeks ago)
block ruleset 1E8A9918B1655D0828F2EEF05553DD2681055C9A
Web Spam
🇬🇧
consul.to
2026-05-31 18:23:32
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
consul.to
2026-05-26 22:04:38
(3 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇦🇺
oncord
2026-05-24 13:55:23
(3 weeks ago)
Form spam
Web Spam